# MA-339.112012: MyCERT Alert - Beware of Job Scam

**Date:** 28 Nov 2012  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-339.112012  
**Advisory ID:** MA-339.112012

---

**1.0 Introduction**
MyCERT had been receiving several reports of online job scam activities from Internet users and victims within our constituency. The job scam poses as a recruitment department from particularly well known industries that in need of employees. The targeted industries are Oil & Gas, Hotel, Construction and Hospitals. Previously the job scam targeted the Oil&Gas industry but now the scam has gone a bit further by targeting other industries as well. Target users for the job scam are mostly foreigners and expatriates.
**2.0 Modus Operandi**
The methods used in the scam is via email and fake websites. Scammer will send email to target purportedly from the Recruitment Department of the organization claiming that their online resume had been viewed by the company's HR department and that their experiences and skills had matched the job requirements. The user will be offered a position in the organization with an attractive package and salary.
Interested users will have to send a photocopy of their current passport and their personal information for verification purpose and to assure that they are able to accept the employment. The job scammers will continue sending emails to the users requesting more information for the job purpose. Next, the scammer will continue to correspond in order to finalize the process concerning working overseas. Eventually a charge is required as a processing fee to the wishful jobseeker to secure and obtain the job. At this point the victim will fall in the trap when they start to pay the scammers to secure in getting the job. In the end the victims will not get the job but end up losing huge amount of money after realizing they had been cheated.
Job scammer also use fake websites included in the email that imitates the real organization's website. The fake website will advertise and list job vacancies in the organization, including for General Surgeon, Paediatrician, Project Manager, On-Site Manager. The contact in the fake website will have a handphone number for the public to contact them.
**3.0 Example of the Job Scam Emails**
Attached below are some samples of emails received by users:
**==========Sample 1===========**
CEMENT INDUSTRIES OF MALAYSIA BERHAD (CIMA).
Aras 111, Mercu UEM Jalan Stesyen
Sentral 5 Kuala Lumpur Sentral
50570 Kuala Lumpur
Malaysia.
Attn ..............
This is an Affirmation that your submitted information was short-listed and found suitable for the requirements of Cement Industries of Malaysia Berhad (CIMA). You are finally considered and employed to work in Cement Industries of Malaysia Berhad (CIMA) based on this new project. Your information/answers to the Online Interview was reviewed with your resume and found qualified.
This document attached embodies the approved Terms for the purpose of this project. Attached herewith is the soft copy of Official Appointment Letter from Cement Industries of Malaysia Berhad (CIMA) which the hard copy has been delivered to the travel agency for endorsement and authenticity.
Be informed that any employee who studied and signed the Appointment Letter must abide in Terms and Conditions stated therein. You should study the Appointment Letter completely, if the Terms and Conditions are accepted by you, kindly proceed to sign in the required space, scan and email the signed copy to the hr/department for initial approval and also email a copy to the Ministry tourism group for the processing of your Employment Insurance Certificates EIC and expatriate residential work permit as we are having a contract agreement with them for the easiest acquisition of employee's necessary employment permit.
TOUR HOLIDAY ASIA NETWORK SDN. BHD MALAYSIA. Level 74 & 78G, Jalan Pandan Indah 4/6B, Pandan Indah, 55100 Kuala Lumpur Malaysia.
Website: http://www.tourmalaysia-travelagency.net
Email: [[email protected]](/cdn-cgi/l/email-protection)
Email: [[email protected]](/cdn-cgi/l/email-protection)
Processing Person: Mr. Abidin Mohamed
Telephone: +60102915380
Fax: +60342911902
According to the contract agreement with the travel agency, your EIC and work permit will be processed in 3 days from the date you submit your EIC & work permit requirement to them. You are required to start the process of your travel documents and furnish us with the soft copies of your employment permit via scan email attachment before 10 working days as a proof of readiness to join our team in due date for your job resumption.
You shall receive your due entitlements/emoluments prior to your departure for service with Cement Industries of Malaysia Berhad (CIMA). You are expected to update us in the process of your employment permit with the travel agency.
Congratulations on your success,
Best Regards,
Dr. Hakim Bin Abdul-karim
Cima Head Recruitment Manager.
Telephone: +601116693466
**=======Sample 2==========**
Dutamas Hospital - Kuala Lumpur
No. 9, Jalan Dutamas, 1 Solaris Dutamas,
50480 Kuala Lumpur, MalaysiaDutamas Hospital Malaysia
No. 9, Jalan Dutamas,
1 Solaris Dutamas,50480
Kuala Lumpur, Malaysia
Tel: +601 6995 9337
Fax: +601 6995 4435
Website: www.dutamashospital.com
Dear ...................
With the approval of the Board of Directors of Dutamas Hospital Malaysia after extensive assessment and evaluation of your submitted resume with deligent confirmation from your educational institutes, we are delighted to formally offer you the Appointment to work with us in Dutamas Hospital Malaysia for the provision of Expatriates Relation Services for the period duly specified in your Offer Letter, please find attached Soft Copy of your Contract Terms of Employment for your perusal and immediate action if the terms of work is acceptable to you. Upon thorough review and acceptance of this Contract Package, dot your signature in the space indicated in the last page of the Offer Letter and return same back to us via email attachment within a period of 14 working days.
You are to immediately make contact with FARIDAH & KERIM ASSOCIATES with the below details to secure your Affidavit of Guarantee and Letter of Attestation from the Malaysian High Court of Justice to enable us process your Residence and Work permit / Visa and also legalize your contract engagement with Dutamas Hospital Malaysia.This Affidavit covers for your total contract acceptance with duration terms and allegiance to the laws guiding the Aliens/Expatriates Registration Quota under the Ministry of Internal Affairs which empowers us to procure your works/residence permit with the Malaysian Immigration Services here in Malaysia.
FARIDAH & KERIM ASSOCIATES
No. 32, Jalan Pju 7/16 Mutiara Damansara
47800 Petaling Jaya, Selangor Malaysia.
E-mail: [[email protected]](/cdn-cgi/l/email-protection)
Designation: Solicitor and Advocate in Law
Contact Person: Barrister(Mrs.) Nur Azzat Binti Kerim
Tel: +601 47132470
On getting the Affidavit make available to us the below documents for the processing of your Residence and Work permit / Visa:
1. Scan copy of your affidavit of Guarantee and letter of attestation from the Malaysian High Court of Justice
2. Scan copy of your duly Signed Job Offer Letter (Enclosures: 6 below)
3. Scanned Copy of International Passport (Data Page)
4. Scanned Copy of Passport Photograph (Colored)
Should you require more information, please feel free to contact us immediately on +601 6995 9337.
Congratulations!
Thanks and best regards,
Regards,
Mr Mohamad Idris Mansor.
Recruitment Manager.
Dutamas Hospital Malaysia
Tel: +601 6995 9337
E-mail: [[email protected]](/cdn-cgi/l/email-protection)
Website: www.dutamashospital.com
**================ =================4.0 "Red Flag" To Look for In Scams**
Internet users may look out for the below "red flags" in suspicious email that offer job and once identified the "red flags", they can just ignore the email and never respond to it.
- Real companies will conduct an interview before offering a job and not just offering via email.
- Look out for email address scammer. A contact email address that is not a primary domain. For example, the Recruitment Department using a Yahoo! or Gmail email address.
- There may be inaccuracies and inconsistencies in the emails and the fake website. For example spelling and grammar errors.
- The fake website will have inaccurate physical address and telephone numbers that belongs to handphone numbers. Real website will have correct physical address and will never use handphone number as their contact.
- The fake job offer will also request users to bank in certain amount of money to the fraudsters as a processing fee for the job. Real job offer will never request for any processing fee.
- Look out for the web address. The web address may not reflect or bear the organization name.
**5.0 Recommendation**
MyCERT advise the followings to Internet users particularly job seekers to be precautious of such scams on the net:
- Ignore the scam email and never respond to the sender of the email or make any attempts to communicate with him/her as this will serve to further propagate the scam activity.
- However, if users had been cheated a certain amount of money as a result of this scam, we advise you to lodge a police report at a police station nearest to your location. You will need to attach all relevant evidences 
- Verify the authenticity of the emails with relevant parties such as with your local CERT or CSIRT or with your local Law Enforcement Agency. Users are also encouraged to report to Cyber999 if they receive such emails for our checkings and analysis together with the full header of the email.
- Companies/businesses which their image or website that has been replicate for such scam should put a disclamer highlighting the scam activities on their official website or broadcast on the corporate social media network site (if any)
- Report to relevant parties such as with your local CERT or CSIRT or with your local Law Enforcement Agency if you receive or aware of any job scams on the net. Users need to forward the full header of the job scam email to them for further analysis.
To retrieve full header, please refer at:
[https://www.mycert.org.my/portal/articles-content?menu=b9f3fdda-c343-4cb4-99a7-a7506cfb13ba&id=7bfb3962-8764-47d3-85d4-6d2c254058bb](https://www.mycert.org.my/portal/articles-content?menu=b9f3fdda-c343-4cb4-99a7-a7506cfb13ba&id=7bfb3962-8764-47d3-85d4-6d2c254058bb
)
- Users must never pay money supposedly charges or processing fees to the scammer.
- Never give out your personal information unless you have verified the authenticity of the company's reputation and record.
- We recommend web hosting providers and Domain Registrars must be more strict when approving registration of new websites. They must be alert of any websites that looks fake or bogus in nature.
To contact Cyber999, please refer here:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#56352f3433246f6f6f16352f34332425333523243f222f783b2f) or [[email protected]](/cdn-cgi/l/email-protection#3d50445e584f497d50445e584f4913524f5a135044)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**6.0 References**
- [http://www.mycert.org.my](https://www.mycert.org.my/portal/advisory?id=MA-276.042011)
- [http://www.fraudwatchers.org](http://www.fraudwatchers.org/forums/showthread.php?s=8fbf8e61ba96e131d4cd0b55a0c96378&p=160905#post160905)
- [http://thestar.com.my](http://thestar.com.my/news/story.asp?file=/2012/11/27/nation/12372603&sec=nation)