This is a version of Fake Brand Recruitment Phishing in Phishing.
Fake Samsung Careers job application on a Workday lookalike address that pushes you to download official forms
A job page at sec.wd3.myworkdayjobs[.]works copies the look of a Samsung Careers application on Workday, the hiring system many large companies use. It advertises a "Remote Operations Specialist (Full Time)" role, "Remote - Worldwide", paying $20 to $33 an hour. Before you can apply, a pop-up marked "Required Action" tells you to download "Official Samsung Application Forms", including a "Samsung CV / Resume Template", and warns that applications with "self-created or non-standard documents will be automatically rejected". The application form then asks for your name, place of residence, phone number, email, CV, extra files, age, US work authorization and expected pay. It was first observed on November 5, 2026, aimed at job seekers in the United States. The address is not a Samsung or Workday website.
What’s different in this version
These traits set this message apart from the usual pattern.
-
The address copies the format of real Workday job sites (company.wd3.myworkdayjobs.com) but ends in .works instead of .com.
-
Before the form opens, a pop-up insists you download three "official" files: a CV template (required), a personal information declaration form and a background check consent form. Real Workday applications accept your own CV.
-
The three downloads come from cdn.myworkdayjobs[.]works, and the page loads their links from the scammer's server each time, so the files can be swapped at any moment. The files themselves were not captured, so it is not known whether they contain malware or are forms that collect more personal data.
-
The application form copies a real Workday layout, with fields for your name, place of residence, phone, email, CV and extra attachments, plus questions on age, US work authorization, visa sponsorship and expected annual pay.
-
Some comments in the page's code are written in Vietnamese and the footer links point to Samsung's Vietnamese-language pages, although the job is aimed at the United States.
-
How the job link reached people (job board, message or ad) was not recorded.
Other variations of this scam
Other reported versions of this scam.
Related scams
Other patterns in the same category, or that share a brand with this report.
Retailer Order Release Fee ScamShipping / Delivery · Shared brand · Added 2026-09-18A website carrying the name and branding of a shop you have bought from claims to be holding your order. It asks for an identity number t...
Inheritance, Compensation, and Prize Payout Scam EmailsAdvance Fee Fraud · Shared brand · Added 2025-09-21Unsolicited emails or letters claim you are due a large inheritance, compensation payment, recovered funds, or prize. The message may imp...
Fake Game Item Vote Login ScamPhishing · Added 2026-11-02A link takes you to what looks like a page on a gaming platform's community site, usually a fan-made weapon skin or other game item, with...
Expiring Reward Points ScamPhishing · Added 2026-10-22A web page uses the name and logo of a company you know, such as your mobile network or a fuel brand, and says you have loyalty or reward...
Fake Bank Credit Card Application ScamPhishing · Added 2026-10-17A page copies a bank or credit-card company's name, logo, and card pictures, and invites people to start an application. The web address...
Cloud-Hosted Phishing Page ScamPhishing · Added 2026-09-08Scammers can use legitimate cloud-storage and file-hosting services to publish fake sign-in pages, payment forms, prize pages, delivery n...
How this scam works
- 1
The visitor reaches a polished careers page on a domain that is not the company’s official website. The page copies familiar logos, images, navigation, and job-related language.
- 2
The page presents a social-media login as the only way to continue an application, creating an opportunity to collect a password.
- 3
The flow may then ask for a one-time SMS code. Never enter that code into an unexpected page: it may be used during an attempted account takeover.
✓ Do this
- Open the employer’s official website yourself and find its careers page there.
- Check the address bar before entering a password or verification code.
- If you entered a reused password, change it through the real service and review recent sign-ins.
- Report suspicious recruitment pages to the impersonated company and the relevant platform.
✗ Avoid this
- Do not enter a social-media password into a job page reached through an unexpected link.
- Do not enter or share a one-time verification code with a recruiter or website.
- Do not assume a page is genuine because it uses a familiar logo, video, or professional design.
Verbatim excerpts from the scam
Exact lines from emails or messages—searchable text so you can compare wording.
- 1 Excerpt 1Remote Operations Specialist (Full Time) Job ID: REQ-OPS-2026-001 Remote - Worldwide Operations Full-time $20-$33 /hr
- 2 Excerpt 2Download Official Samsung Application Forms
- 3 Excerpt 3Before completing your application, please download all required documents below. Only Samsung's official standard forms will be accepted by our Talent Acquisition team.
- 4 Excerpt 4Applications submitted with self-created or non-standard documents will be automatically rejected. Please fill in and attach only the official templates provided here.
- 5 Excerpt 5Samsung CV / Resume Template Required Official CV format required by Samsung Talent Acquisition
- 6 Excerpt 6I confirm that I have downloaded all required Samsung standard forms above and will complete and attach them to my application.
