We have found the Web to be an invaluable source of information when investigating fraudulent offers. Searching information found in the email often yields interesting results in Google . The BBB is helpful to search names and addresses located in Canada and the United States. WHOIS (we prefer domaintools.com) can tell you information about where Web sites are hosted and by whom they are owned. TrustedSource.org can tell you how much email is being sent out by a specified IP or domain to determine if they are maliciously sending bulk mail.

In addition, look for the following clues in the email offers:

1.  Email address spoofed (examples: offer @ careerbuilder.com, job @ monster.com)

2.  Reply-tos are different  (example: from=career @ careerbuilder.com but reply-to=joe @ phishyco.com)

3.  Origin of sender, based on WHOIS of IP or Web site domain, is significantly different from where they say they are located

4.  Spam filter has rated the email (example: **** 4.88)

5.  No Web site link was provided (only an email address is provided for reply to the offer)

6.  Email address and site different   (example: joe @ gmail.com; www.phishyco.com)

7.  Email address is Web-based (Gmail, Live, Hotmail, Yahoo, etc.)

8.  Poor spelling / grammar

9.  Involves money transfer

10.  Involves online shopping

11.  Involves product shipping

12.  Involves auction or online advertising

13.  Links to a Web site submission form

14.  No opt-out link provided

15.  Unsolicited / no reference to how you were found is included

16.  Spoofing job board or sent through the job board system (check reply-tos and hyperlinks)

17.  Spoofing legitimate employers (examples: GE , Ashley Furniture , MailBoxes Etc. , Sunoco )

18.  You are asked to reply with personal info

19.  You are instructed to reply to a different email address

20.  Job offer doesn't match your skills

21.  Job is offered to you without an interview

22.  An employment contract is attached

23.  You are assured the offer is legal

24.  You are told they are trying to avoid taxation or other charges

25.  You received email shortly after joining job board

26.  Salary offer is high or seems too good to be true

27.  Offer begins Dear Sir/Ma (instead of Madam or Ma'am)

28.  Contact phone number begins with +44 70 (see comment at bottom of this post for details)