How to Check Whether an Online Job Offer or Hiring Company Is Legitimate

Quick answer

No single document proves that an online job offer is legitimate. Before accepting, sending money, disclosing sensitive documents, resigning from your current job, or making travel plans, independently verify all of the following:

  1. The employer’s exact legal identity and registration;
  2. The recruiter’s authority to act for that employer;
  3. The existence of the specific vacancy;
  4. Any required DOLE or Department of Migrant Workers (DMW) licence and approved job order; and
  5. The written employment terms, payment arrangements, and reason for every document requested.

A registered company can be impersonated. A real recruiter’s account can be copied or hacked. Conversely, the absence of a Philippine SEC or DTI record does not automatically make a foreign remote client fraudulent. The entire chain—not just the company name—must match.

Stop immediately if the supposed employer asks for an OTP, password, card details, access to your bank or e-wallet, use of your financial account, payment through a personal account, purchase of cryptocurrency or gift cards, or receipt and forwarding of money or parcels.

Start with the employer’s exact legal identity

Ask the recruiter to provide:

  • The employer’s complete registered name, not only its brand or social-media name;
  • Business address and official website;
  • SEC registration number, DTI business-name details, or foreign registration number, as applicable;
  • The recruiter’s full name, position, company email address, and office contact details;
  • The department and manager hiring for the position;
  • Whether the recruiter is an employee of the company, an independent recruiter, or a placement agency;
  • For agency hiring, the agency’s licence number and registered office; and
  • For overseas work, the foreign principal or employer, country and worksite, approved job order, and DMW-licensed Philippine agency.

A refusal to provide basic identifying information is a strong reason not to proceed.

Check the business registration independently

Do not verify a certificate by calling the number printed on it. Find the regulator or company through an independent search and use the regulator’s official service.

Corporation or partnership

Search the exact legal name or registration number through the Philippine SEC’s Check with SEC service. For higher-risk situations, obtain company documents through the SEC’s official records services.

Check whether the registered name, principal address, status, and available company information are consistent with the offer. A screenshot sent by the recruiter is not independent verification.

SEC registration establishes corporate or partnership registration. It does not prove that:

  • The person messaging you works for the company;
  • The advertised vacancy exists;
  • The company approved the offer;
  • The company is financially sound; or
  • The company complies with recruitment, licensing, labor, tax, or data-protection requirements.

Sole proprietorship

Use the DTI’s Business Name Search. The search requires the exact business name. The DTI’s own guidance explains that business-name registration gives the business a legal identity but does not replace the required business or mayor’s permit.

Match the registered owner, territorial scope, address, and line of business against the offer. A DTI certificate bearing another person’s name or an unrelated business activity requires a satisfactory explanation and further verification.

Foreign employer or remote client

Search the official company registry in the employer’s home country. Confirm the registered name, address, officers, and status through that registry—not through a link supplied only by the recruiter.

A foreign company hiring a genuine remote independent contractor may have no Philippine SEC or DTI registration. That alone does not establish fraud. However, the distinction between an employee and an independent contractor depends on the actual arrangement, including control over the work, not merely the label used in the contract. Obtain advice if the classification affects substantial pay, taxes, benefits, exclusivity, intellectual property, or liability.

Verify the recruiter and vacancy through a separate channel

This is the most important protection against impersonation.

  1. Find the company’s official website yourself. Avoid sponsored search results when possible.
  2. Use the telephone number, contact form, or HR email published on that website—not the contact details in the message.
  3. Ask HR to confirm the recruiter’s name, email address, position, and the specific vacancy or requisition number.
  4. Check whether the position appears on the company’s official careers page. Its absence is not conclusive, but it requires direct confirmation.
  5. Examine the sender’s complete email domain. Look for substituted letters, added hyphens, misspellings, or a domain registered only recently.
  6. If the recruiter uses Gmail, Yahoo, Telegram, WhatsApp, Viber, or Messenger, require confirmation through the company’s official channel. A free email address is not automatic proof of fraud, but it is not sufficient proof of authority.
  7. Ask for a live interview with identifiable company personnel. Confirm their identities independently afterward.

Do not rely only on social-media profiles, video calls, employee IDs, company logos, or photographs of offices. All can be copied or fabricated.

Determine which recruitment rules apply

Direct hiring by a Philippine employer

A Philippine business hiring workers directly for its own operations does not need a private-employment-agency licence merely because it advertises online.

A third party that recruits and places workers for local employers is different. Private employment agencies for local employment are regulated by DOLE. Verify them through the DOLE Bureau of Local Employment’s Private Employment Agency page and, when necessary, with the DOLE Regional Office that issued the licence.

Confirm:

  • The agency’s exact licensed name;
  • Whether its licence is current and unsuspended;
  • Its registered office and authorized branch;
  • The identity of the authorized representative; and
  • Whether any recruitment outside its registered office is properly authorized.

Under DOLE Department Order No. 216-20, no fee or cost may be collected from, or deducted from the wages of, an industry worker placed for local employment. The agency’s service fee is charged to the employer.

For kasambahays, the Domestic Workers Act prohibits charging the worker any share of recruitment or finder’s fees. Covered pre-employment requirements are borne by the prospective employer or agency.

Overseas employment

For work to be performed outside the Philippines, check both the agency and the particular job:

  • Search the DMW directory of licensed recruitment agencies.
  • Search the DMW list of approved job orders.
  • Confirm directly with the licensed agency whether the job order remains active and has an available balance.
  • Verify that the person contacting you is an authorized representative of that agency.
  • Transact at the agency’s registered office. If recruitment is conducted elsewhere, ask DMW whether the activity is authorized.
  • Confirm the foreign principal, position, salary, country, worksite, and contract against the DMW record.

A licensed agency without an approved job order for the advertised position is not enough. Likewise, a genuine job order does not authorize an unrelated person to collect money or recruit in the agency’s name.

The DMW advises applicants not to deal with unlicensed agencies, unauthorized representatives, travel agencies or training centers promising overseas work, or recruiters offering deployment on a tourist visa. Use the DMW contact page or Hotline 1348 for verification.

Direct offers from foreign employers

A direct foreign offer is not automatically fraudulent, but overseas deployment is regulated. Article 18 of the Labor Code generally prohibits direct hiring for overseas employment except through authorized entities or within recognized exemptions, such as specified diplomatic and international-organization hiring and other employers allowed by the responsible authority.

A worker covered by an exemption must still complete the applicable DMW documentation and obtain the required clearance or Overseas Employment Certificate before departure. The exact route depends on the employer, occupation, country, and worker’s circumstances. Do not buy a ticket or leave on a tourist or visit visa based only on a recruiter’s promise.

This overseas-deployment rule is different from a person remaining in the Philippines and performing genuine remote freelance or contracting work for a foreign client.

Examine the offer and contract

A credible offer should identify, at minimum:

  • The correct legal employer;
  • Job title, duties, reporting line, and work location;
  • Employee, probationary employee, project worker, fixed-term worker, or contractor status;
  • Salary or fee, currency, pay schedule, and payment method;
  • Work hours, rest days, and applicable benefits;
  • Start date and conditions that must first be completed;
  • Authorized deductions, if any;
  • Probationary or performance standards, where applicable;
  • Confidentiality, intellectual-property, equipment, and data-security terms;
  • Termination provisions; and
  • For overseas work, the country, worksite, visa or work-permit arrangements, accommodation and travel terms, and DMW-approved or verified contract where required.

Compare every name, amount, address, position, and worksite with the advertisement and regulator records. Do not accept unexplained contract substitution after signing.

Be cautious if the contract:

  • Leaves the employer unidentified;
  • Uses only a brand name;
  • Allows pay or duties to be changed unilaterally without meaningful limits;
  • Requires illegal activity or receipt and transfer of third-party money;
  • Demands a security deposit, performance bond, or purchase from a designated private seller;
  • Contains blank spaces or incomplete annexes;
  • Requires surrender of your passport or original documents; or
  • Pressures you to sign immediately without keeping a copy.

Understand when a fee may or may not be lawful

Local jobs

For placement of local industry workers through a DOLE-licensed private employment agency, Department Order No. 216-20 prohibits collecting fees or costs from the placed worker or deducting them from wages. The agency charges its service fee to the employer.

A request for a “reservation,” “slot,” “activation,” “training,” “interview,” “uniform,” “ID,” “processing,” or “security” payment should not be accepted merely because it is given a different label.

Overseas jobs

The 2023 DMW Rules for land-based OFWs allow a licensed agency, in qualifying cases, to charge a placement fee of up to one month’s basic salary stated in the DMW-approved contract. The fee cannot be charged to:

  • Domestic workers; or
  • Workers going to countries where law, policy, or practice prohibits recruitment or placement fees.

Where a placement fee is legally allowed, it may be paid to the licensed recruitment agency only after the worker signs the DMW-approved contract, and the agency must issue a BIR-registered receipt stating the date, purpose, and exact amount. Other specified recruitment costs—including the visa, work and residence permits, round-trip airfare, DMW processing fee, OWWA membership fee, and any additional trade test required by the principal—are chargeable to the principal or employer under those rules.

Because country-specific no-fee policies and job categories matter, confirm the exact charge with DMW before paying. Never pay an individual recruiter, personal bank account, e-wallet, cryptocurrency address, remittance recipient, travel agency, or training center based only on a promise of deployment.

Protect your personal and financial information

A legitimate recruiter may need a résumé and, at later stages, documents reasonably connected with hiring or lawful onboarding. The Data Privacy Act requires personal-data processing to follow transparency, legitimate purpose, and proportionality.

Before submitting sensitive information, ask:

  • Who is collecting it?
  • For what specific purpose?
  • What is the legal basis?
  • Is it necessary at this stage?
  • Who will receive it?
  • How will it be secured and retained?
  • How can you exercise your data-subject rights?

Do not give a recruiter:

  • Bank, e-wallet, or email passwords;
  • OTPs, PINs, CVVs, recovery codes, or authentication prompts;
  • Remote access to your phone or computer;
  • A newly opened bank or e-wallet account for “payroll testing”;
  • Permission to receive, transfer, withdraw, or convert third-party funds;
  • A SIM card or financial account registered in your name; or
  • An unnecessary selfie holding an ID or an unwatermarked high-resolution ID copy before verification.

Republic Act No. 12010, the Anti-Financial Account Scamming Act, covers money-muling and social-engineering schemes. A “job” that involves lending, selling, renting, or allowing use of a financial account, or moving proceeds known to come from crime or social engineering, may expose the account owner to serious criminal liability. Do not assume that calling a transfer “payroll,” “commission processing,” or a “test transaction” makes it safe.

Red flags that justify stopping

No single red flag proves fraud, but several together should be treated as a serious warning:

  • You receive an offer without applying or interviewing;
  • The pay is far above market while qualifications are minimal;
  • The job description is vague, copied, or changes repeatedly;
  • The recruiter creates extreme urgency or discourages independent checks;
  • All interviews occur by text or chat;
  • The sender’s domain resembles, but is not identical to, the company domain;
  • The reply-to address differs from the sender;
  • HR will not confirm the recruiter or vacancy;
  • The registered company’s actual business is unrelated to the advertised work;
  • Names, addresses, salaries, or job titles differ across the advertisement, licence, job order, and contract;
  • Payment is demanded before a proper interview or contract;
  • Money must be sent to an individual or unrelated business;
  • The recruiter sends a check or excess payment and asks you to return part of it;
  • You must buy equipment from a designated seller or deposit a check before buying it;
  • You are asked to receive and reship parcels;
  • You are asked to post fake reviews, create accounts, recruit more applicants, or make deposits to unlock tasks or commissions;
  • The job involves transferring client money through your account;
  • The recruiter asks for passwords, OTPs, screen sharing, or installation of remote-access software;
  • An overseas offer uses a tourist visa, has no approved job order, or requires payment to a travel agency;
  • The recruiter keeps your passport or original documents; or
  • The company refuses to give you a signed copy of the offer or contract.

Evidence to preserve

If the offer is suspicious, preserve evidence before blocking or reporting the account:

  • The complete job advertisement, including URL, profile name, date, and platform;
  • Original emails, including full headers and attachments;
  • Chat exports, text messages, voice messages, call logs, and meeting invitations;
  • Screenshots showing usernames, URLs, dates, and timestamps;
  • The recruiter’s telephone numbers, email addresses, account handles, and profile links;
  • Offer letters, contracts, invoices, receipts, IDs, certificates, licences, and job-order claims;
  • Bank or e-wallet account names and numbers;
  • Transaction confirmations, reference numbers, amounts, dates, and recipient details;
  • Cryptocurrency wallet addresses and transaction hashes;
  • The official company’s response denying or confirming the recruiter;
  • Notes of calls, including who spoke, when, and what was said; and
  • Copies of every document or ID you disclosed.

Keep the original electronic files. Do not crop, annotate, overwrite, or delete them. Store a backup separately. Under the Supreme Court’s Rules on Electronic Evidence, a party relying on an electronic document must be able to establish its authenticity, integrity, and reliability.

What to do if you already paid or disclosed information

1. Contact the bank or e-wallet immediately

Use the institution’s official app, website, card, or published hotline. Report the transaction as fraudulent or disputed, request that the recipient account and transaction be flagged, secure your account, and obtain a case or reference number.

The Anti-Financial Account Scamming Act and BSP Circular No. 1215 provide mechanisms for temporarily holding disputed funds and coordinating verification. The statutory holding period cannot exceed 30 calendar days unless extended by a court. A report does not guarantee recovery, so delay can be costly.

First use the institution’s Financial Consumer Protection Assistance Mechanism. If its response is unresolved or unsatisfactory, follow the BSP Consumer Assistance Mechanism.

2. Secure affected accounts and devices

Change compromised passwords from a clean device, starting with your email and financial accounts. Use unique passwords, activate multi-factor authentication, revoke unknown sessions, remove unauthorized recovery methods, and tell the financial institution if an OTP, PIN, card detail, or remote-access session was exposed.

If the recruiter controlled your screen or device, disconnect it from financial accounts and have it checked before using it again for banking.

3. Report the recruitment activity

For a local recruitment concern, contact the relevant DOLE Regional Office or Hotline 1349. A labor-related Request for Assistance may be filed through DOLE ARMS, although a criminal scam or illegal-recruitment report may also require referral to law enforcement.

For overseas recruitment, contact DMW through Hotline 1348, info@dmw.gov.ph, or the channels on its official contact page.

For an online scam, identity theft, account compromise, or cyber-enabled fraud, file through the NBI Online Complaint service or approach the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or the appropriate local police cybercrime unit.

Reporting to a social-media platform is useful for disabling an account, but it is not a substitute for reporting financial loss or suspected crime to the bank, regulator, and law-enforcement authorities.

4. Address misuse of personal data

Write to the real company or concerned entity and identify the information disclosed, the suspected unauthorized processing, and the action requested. Keep proof that the notice was received.

Under the current NPC rules, a formal complaint generally requires prior written notice to the concerned personal information controller, processor, or entity. If it fails to take timely or appropriate action or does not respond within 15 calendar days, a complaint may be filed with the National Privacy Commission, subject to the NPC’s authority to waive exhaustion requirements for good cause or serious violations.

Use the NPC’s complaint guidance and form. A formal filing generally requires a notarized complaint-assisted form or verified complaint, supporting evidence, and any witness affidavits.

When help is urgent

Act immediately if:

  • Money has just been transferred;
  • An OTP, password, PIN, recovery code, or remote-access permission was disclosed;
  • Your email, SIM, bank, or e-wallet account has been taken over;
  • You are being instructed to move or withdraw someone else’s money;
  • Departure for overseas work is imminent but the visa, contract, job order, DMW documentation, or recruiter remains unverified;
  • Someone is holding your passport or original documents;
  • You are threatened, confined, coerced, transported, or prevented from leaving;
  • The supposed job involves sexual exploitation, forced labor, unlawful surveillance, or trafficking; or
  • A child or other vulnerable person is involved.

Contact the bank or e-wallet first for a recent transaction, DMW for an overseas recruitment emergency, and 911 or law enforcement where there is an immediate threat to safety.

Common mistakes

  • Treating SEC or DTI registration as proof that the offer is genuine;
  • Calling only the telephone number supplied by the recruiter;
  • Assuming a company email, logo, ID, or video interview cannot be faked;
  • Checking the agency licence but not the overseas job order;
  • Paying because the amount is described as refundable;
  • Sending an ID before confirming who will process it and why;
  • Accepting a tourist visa for overseas work;
  • Failing to read the legal employer’s name in the contract;
  • Allowing the recruiter to keep original documents;
  • Deleting chats after realizing it is a scam;
  • Waiting for the platform to investigate before notifying the bank; and
  • Believing that no crime is possible because the applicant knowingly authorized the transfer.

Frequently asked questions

Is SEC or DTI registration enough?

No. It verifies a registered entity or business name, not the recruiter, vacancy, offer, or payment request. Scammers frequently impersonate registered businesses.

Is a recruiter using Gmail or Messenger automatically fake?

No, but the recruiter’s authority must be confirmed through the company’s independently located official HR channel before you send money or sensitive information.

Can a legitimate employer request government IDs?

Yes, when reasonably necessary for verified hiring, background checks, legal documentation, or onboarding. The timing, purpose, recipient, security measures, and amount of information requested should be proportionate. Passwords, OTPs, PINs, and financial-account access are not ordinary recruitment requirements.

Can a recruitment agency charge an applicant?

For local placement of industry workers through a private employment agency, DOLE rules prohibit charging the placed worker fees or costs. For qualifying overseas land-based jobs, a limited placement fee may be lawful, but important no-fee exceptions, timing requirements, and receipt requirements apply. Verify the exact charge with DMW before paying.

Is a direct offer from a foreign employer illegal?

Not necessarily. However, a Filipino leaving the country for employment is generally subject to the overseas direct-hiring restrictions, exemptions, and DMW documentation requirements. A genuine remote contractor remaining in the Philippines presents a different legal situation.

What if the company is real but says it never contacted me?

Treat the offer as impersonation. Preserve the company’s confirmation, report the fake account to the platform, and notify the bank and authorities immediately if money or sensitive data was involved.

Should I report an attempt even if I did not lose money?

Yes. Preserve the evidence and report the impersonating account to the real company and platform. Report suspected local or overseas illegal recruitment to DOLE or DMW, especially if other applicants may be targeted.

This article provides general Philippine legal information, not legal advice for a specific offer, contract, complaint, or case. Legal consequences may depend on the documents, parties, country, work arrangement, and surrounding facts. Official sources, procedures, and public channels were checked as of 29 July 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.