字号·· | 护眼
美国消费者新闻与商业频道

像币安遭遇的那种虚假招聘面试骗局正变得越来越高明,以下是需要注意的新迹象Fake job interview scams like the one that hit Binance are getting more sophisticated. Here are the new signs to watch for

点「原文对照」整页切到原文,或双击某段只看那段的原文。

求职申请可能让申请人损失数百甚至数千美元。但最近一起虚假招聘面试却影响了超过60亿美元的资产。

can cost applicants hundreds or thousands of dollars. But one fake job interview recently impacted over $6 billion in assets.

全球最大的加密货币交易所币安周二宣布,近期遭遇了一起安全漏洞事件,涉及63.4亿美元的数字资产。此次黑客攻击部分得益于求职者的噩梦:虚假招聘面试。

Binance, the world's largest cryptocurrency exchange, announced on Tuesday it recently experienced a security breach impacting $6.34 billion in digital assets The hack was enabled in part by a job seeker's nightmare: bogus job interviews.

虽然币安黑客的目标远比个人求职者大得多,但与求职相关的诈骗正在激增。美国联邦调查局互联网犯罪投诉中心(IC3)统计显示,2025年与就业相关的损失总计约3.63亿美元,较上一年的2.64亿美元大幅上升,也远高于2023年的7000万美元。由于许多此类犯罪的受害者未予举报,实际数字可能更高。

While the Binance hackers had their sights set on a much bigger target than an individual job seeker, job-related scams are on the rise. The FBI's Internet Crime Complaint Center (IC3) tallied employment-related losses amounting to roughly $363 million in 2025, up sharply from $264 million the year prior, and $70 million in 2023. The actual figure is likely higher, since many victims of such crimes do not report them.

前谷歌和英伟达招聘人员Stefanie Fackrell表示,策划虚假招聘诈骗的人如今有许多潜在目标,“因为现在对许多人来说,求职过程耗时太长了”。尽管10月的就业报告显示出希望,美国经济新增16.5万个就业岗位,远超预期,但许多申请人已在低招聘、低裁员的市场中挣扎了数月。

Those orchestrating fake job scams have many potential targets today "because the job search is taking so long for so many right now," says Stefanie Fackrell, a former recruiter at Google and Nvidia. While October's jobs report showed promise as the U.S. economy added 165,000 jobs, far more than expected, many applicants have been struggling through a low-hire, low-fire market for months.

Garber说:“在当今的就业市场下,人们焦虑、疲惫,许多人已走投无路。主动发出的询问可能让你在未加思考的情况下立即回复。”人工智能也能让诈骗更广泛、更难被识别。

"With today's job market, people are anxious, they're tired, many are at their wits' end," says Garber. "A proactive inquiry can be something you just immediately respond to without thinking." Artificial intelligence can also make scams more widespread and harder to detect.

德雷塞尔大学克莱恩法学院隐私与网络安全专家、兼职法学教授Leeza Garber表示:“网络诈骗总体上变得更加复杂,就是因为它们与人工智能及公众对AI的获取同步演进。AI将让事物看起来越来越真实。”根据IC3数据,2025年受害者报告的涉及AI的就业诈骗损失近1300万美元。币安黑客事件始末币安的公告简要还原了黑客攻击的经过。

"Cyber scams in general are becoming much more sophisticated just because they're evolving at the same speed as AI and public access to AI," says Leeza Garber, a privacy and cybersecurity expert and adjunct law professor at Drexel University's Kline School of Law. "AI is going to make things seem more and more real." In 2025, victims reported losses of almost $13 million to AI-involved employment scams, according to the IC3. What happened in the Binance hack Binance's announcement included an abbreviated play-by-play of how its hack went down.

法克雷尔和加伯分析了事件发展过程中的一些警示信号,以及求职者能从这起事件中学到什么。事件经过:币安在公告中表示,一位未透露姓名的软件工程师通过“一个合法的求职平台”被冒充项目总监的人联系。此人安排这位工程师先与所谓的HR代表进行初面,随后又与一家假公司的所谓CEO进行了第二轮面试。专家指出的危险信号:法克雷尔说,如果头像明显是AI生成的,或者看起来不自然,以及个人资料信息或活动稀疏、人脉很少,就应该引起警惕。

Fackrell and Garber broke down some of the warning signs in how the events unfolded, including what job seekers can learn from the incident. What happened: A software engineer, who was not named, was contacted through "a legitimate job-hunting platform" by someone posing as a project director, Binance said in its announcement. That person arranged for the engineer to have an initial interview with a purported HR representative and a second-round interview with the supposed CEO of a fake company. Experts' red flags: A headshot that's clearly AI-generated or otherwise looks uncanny, as well as sparse profile information or activity, and few connections should give you pause, Fackrell says.

例如在领英上,你可以点击某人资料上的三个点,打开“关于此会员”的弹窗,在那里可以看到对方何时加入领英,以及是否验证了身份、工作单位和学校。

On LinkedIn, for example, you can click the three dots on a person's profile to open an "About this member" pop-up, where you can see when they joined LinkedIn and if they've verified their identity, workplace and school.

她补充说,尽管一些小型初创公司可能会安排与最高管理层高管面试,但这种情况通常不常见,尤其是二轮面试,除非你将直接向此人汇报。

Though some small startups may arrange for an interview with a C-suite executive, it's generally unusual, particularly for a second-round interview, unless you'd be reporting to that person, she adds.

币安表示,在第一轮面试中,假HR代表与这位软件工程师进行了实时视频面试,甚至与他分享了一个带有个人照片和视频的社交媒体账号以建立信任。币安在公告中补充说,这一手法“比以往见过的社会工程学手段更高级、更具欺骗性”。

In the first round, the fake HR representative had a live video interview with the software engineer, even sharing with him a social media account with personal photos and videos to build trust, Binance said. The tactic was "more advanced and deceptive than previously seen social engineering approaches," Binance added in its announcement.

法克雷尔说,招聘人员可能会提到与候选人的共同点,比如同一所母校或前雇主,以“在对话中注入人情味”。但她补充说,在一轮面试中就分享个人社交媒体是很奇怪的。

A recruiter might bring up commonalities with a candidate like the same alma mater or ex-employer to "bring that human element into the conversation," Fackrell says. But sharing personal social media in a first-round interview is strange, she adds.

在视频面试中,一些危险信号可能包括面试者动作异常缓慢、未对你的某个问题作出回应,或其画面出现卡顿,Garber 表示。

In video interviews in general, some red flags might include the person moving unusually slowly or not responding to one of your questions, or their visual skipping a beat, Garber says.

Binance 称,与这家虚假公司所谓 CEO 的第二轮面试是在“一款流行的社交聊天应用”上进行的,该软件工程师被要求下载一个包含恶意代码库的“作业”到他的工作电脑上。面试通常通过 Microsoft Teams、Zoom 或 Google Meet 进行,而不是社交聊天应用。“我不认识任何人会用 FaceTime 或 WhatsApp 面试候选人,”Fackrell 说。

The second-round interview with the purported CEO of the fake company was conducted on "a popular social chat app," Binance said, and the software engineer was instructed to download "an 'assignment' containing a malicious code repository onto his work computer." Interviews commonly happen over Microsoft Teams, Zoom or Google Meet, not a social chat app. "I don't know anybody that's FaceTiming or WhatsApping any of their candidates," Fackrell says.

虽然带回家的作业,特别是技术岗位的作业,可能会使用第三方系统,但如果你不熟悉该软件,就不要下载,Fackrell 建议。这些作业应通过合法系统以电子邮件形式分享,而不是通过电话。求职者应使用个人设备参加面试,而不是工作电脑。避免求职诈骗的提示当前常见的求职诈骗包括:虚假招聘人员联系某人告知职位空缺并索要简历,随后声称必须付费重写简历才会予以考虑 发出虚假录用通知,要求收件人支付工作设备费用,包括兑付一张假支票来支付费用并退回“多余”资金;或要求收件人提供敏感信息,如身份证、银行账户详情或社会安全号码 短信提供看似过于轻松的工作,如付费点赞社交媒体内容或留下好评,因为骗子通常随后会向这些工作者索要自有资金 像 LinkedIn 和 Indeed 这样的招聘网站,以及联邦贸易委员会和 Better Business Bureau 等机构,也提供有关常见诈骗的更多信息。

While take-home assignments, particularly for technical roles, may use third-party systems, don't download software if you're not familiar with it, Fackrell advises. These assignments should be shared via email through a legitimate system, not over the phone. Job seekers should take interviews on a personal device, not a work computer. Tips to avoid job search scams Common job search scams today include: A fake recruiter reaching out to someone about a position and asking for their resume, only to say their resume must be rewritten, for a fee, to be considered Extending a fake job offer and asking the recipient to pay for job equipment, including by cashing a fake check to cover it and sending back "excess" funds; or asking the recipient to provide sensitive information, such as ID, bank account details, or Social Security number Text messages offering jobs that seem too easy, such as being paid to like social media content or leave positive reviews, as scammers typically ask these workers for their own money down the line Job sites like LinkedIn and Indeed, and entities like the Federal Trade Commission and Better Business Bureau, also have more information about common scams.

根据联邦贸易委员会(FTC)的说法,你不应当为了获得工作而提供敏感信息或付款。正规招聘人员会使用公司邮箱地址联系你,而非个人邮箱。其他危险信号包括:催促你快速完成招聘流程,或通讯中出现多处错别字。

You should not have to provide sensitive information or payment in order to get a job, according to the FTC. Legitimate recruiters will reach out from their corporate email addresses, not a personal address. Other red flags include pressure to move quickly through the hiring process or seeing multiple typos in communications.

“在点击、回复或与任何人互动之前,先做调查,”Fackrell 说。

"Do your research before clicking, responding or engaging with anybody," Fackrell says.

Garber 建议,花一分钟思考一下你是如何被联系上的,以及对方要求你做什么才能进入下一环节,并将招聘信息与公司官方招聘页面进行核对。

Take a minute to think about how you were contacted and what you're being asked to do to proceed, Garber suggests, and cross-check job postings against the company's official careers page.

“如果看起来好得不像真的,那它肯定是假的,”Garber 说。

"If seems too good to be true, it definitely is," says Garber.

掌控你的财务,尽在 CNBC Select。CNBC Select 编辑独立,通过附属链接可能获得佣金。

Take control of your money with CNBC Select CNBC Select is editorially independent and may earn a commission from affiliate partners on links.

2026 年最热门节日玩具的最佳信用卡 储蓄基金可助你避免节日负债。以下是最佳起步方式 1000 美元存入一年期定期存单(CD)能赚多少?

The best credit cards for the hottest holiday toys of 2026 A sinking fund can help you avoid holiday debt. Here are the best ways to start How much could $1,000 earn in a 1-year CD?

买方市场中谈成房屋好价的 4 种方法 旅行成本上涨。以下是判断你是否拿到最优酒店价格的方法

4 ways to negotiate a good deal on a house in a buyer’s market Travel is getting more expensive. Here’s how to know if you’re getting the best hotel deal

阅读媒体原文 ↗