How to Identify a Fraudulent Recruiter in the Gulf
From Human Resources and Cybersecurity Perspective
 |
| Illustration showing common warning signs of recruitment scams, including fake job offers, upfront payment requests, and recruiter verification checks for Gulf healthcare job seekers. |
Healthcare careers in the United Arab Emirates and the wider Gulf region generally pay well compared to home country because of being tax-free, and the licensing process is long enough that many professionals and practitioners feel they need help in getting through the process. Unfortunately, the scammers know this. They disguise as recruiters, hospital human resource team members, or "healthcare licensing consultants," and they count on you being tired, hopeful, and short on time and lacking knowledge about the legal processes and procedures.
This guide explains how to fact check a local or foreign recruiter or recruitment agency before you dispatch documents, credentials or money. It covers the website address and email address, the agency itself or the representative agent, the job offer letter or appointment letter, and what to do if you have already been trapped. Everything regarding this matter in UAE can be checked online for free through official government channels and web portals.
How to check online company information in uae | How can I check if company is real or fake in UAE
Published by Rocky Gyan Tech | Step-by-step guidance on verifying UAE company registration status and employment offer letters via official government portals.
Copyright & Courtesy Notice: This video embed is shared strictly for educational, awareness, and informational purposes to assist job seekers and healthcare professionals in verifying UAE employment records and combating recruitment fraud. All rights, titles, ownership, and intellectual property remain with the original publisher, platform creator, and copyright holders (Rocky Gyan Tech YouTube Channel). Special thanks and due credit are extended to YouTube and the channel authors for permitting public embedding and digital dissemination. If you are the copyright owner and wish to request specific modifications or video removal, please contact our webmaster.
- The one rule that settles most of the cases
- Red flags at a glance
- Checking the web address and the email
- Checking the agency, the employer, and the job offer
- How genuine healthcare hiring process works
- Common scam scripts
- If you already paid or sent documents
- Using the screening tool
- Frequently asked questions
- Sources
The one rule that settles most cases
In the United Arab Emirates (UAE,) the employer pays the charges of recruiting and hiring you to the government agencies. Article No 6 of Federal Decree, Law No. 33 of year 2021 on the regulation of labour relations says an employer may not charge the worker for recruitment and employment costs/fee, either directly or indirectly. Visa cost, medical examination for the visa, residence permit fee, and travel arranged by the employer all fall on the employer's side of the account.
So if someone asks you to pay a "visa clearance fee," a "file opening charge," a "refundable or non-refundable deposit," or a "medical booking fee" before you have started work, treat the request as a "warning sign" even if the rest of the process looks professional. Real agencies earn their money from employers, and not from an applicant or a candidates.
Be precise about what you are paying for. Costs that belong to you personally are different, for example your own examination fees, your own document verification, and your own credential attestation cost charged directly by a regulator or verification provider, performed by government departments. Those are paid to the official body through its own web portal, never to a recruiter's personal bank account, and never as a deal that promises a guaranteed license issuance or renewal.
Identifiable Red flags at a glance
| What you notice | Why it matters |
|---|---|
| Any request for money even before or after you have a signed, verified job offer | Breaks the employer-pays rule stated above. |
| Offer arrives after a short conversation, with no real job interview. | Hospitals interview clinical staff. Skipping that step is a bad sign. Genuine employers do not hire anyone without proper investigation |
| Salary amount far above what the role normally pays | High pay is the bait. Compare against ranges from current job postings and colleagues in the field. |
| Pressure or urgency such as "answer today" or "only two slots left" | Urgency is there to stop you from thinking or checking or obtaining a second opinion. |
| "Keep this confidential" or "don't tell your current employer or family" | Isolation makes it harder for anyone to warn you. |
| Contact only through WhatsApp, Telegram, or a free email addresses like hotmail, gmail, outlook | A hospital recruiter normally writes from a company domain email address. |
| Promises of a "fast-track" or "guaranteed" license | No recruiter can bypass the health authority's review due process. They work in own pace. |
| Won't do a live video call, or won't let you contact the employer directly (business secret tactic) | Someone legitimate expects to be verified. |
One red flag notice is a reason to slow down. Two or three together are a reason to stop.
Checking the website and the email
Look closely at the domain name
Fake or fraudulent websites often use a name that is almost right. A hyphen added to an official name, a different ending such as .net or .com instead of .gov.ae, or a swapped letter can all pass at a glance, especially on a phone. Official UAE government websites end in .gov.ae. If a message claims to come from a regulator or ministry domain, type the official address into your web browser yourself, instead of clicking the link you were sent. Clicking an insecure link can be very dangerous.
Find out when the domain was registered
We have a free web-based tool which shows the registration date for most domains (website). As a rule of thumb, a "long and well established agency" whose website was registered just a few weeks ago deserves hard questions and investigation. This is a clue, not s proof of scammer. A genuine new business can buy a new domain (website address), and a scammer can purchase an old one too, so use it together with the other checks given below.
Don't trust the padlock sign next at the beginning of the website address
The padlock icon only means the connection is encrypted/encoded. Fraudsters get free security certificates for their sites in minutes, so HTTPS protocol tells nothing about who is behind the website.
Compare the email domain with the website address
If the agency's web address is example-recruitment.ae, its emails should come from that same domain. Messages from a free email services such as Gmail, Hotmail, Yahoo, or Outlook address that claim to represent a hospital or a recruitment agency are a mismatch. If you use Gmail, you can open a suspicious message, choose "Show original," and look at the Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM), and Domain-based Message Authentication, Reporting, and Conformance (DMARC) results at the top header. Failure in getting those details suggest the email sender is not authorized to use that domain address, though a pass alone does not prove the email sender is genuine.
Test the contact details in the email message
Ignore the phone number and email address in the recruiter's email message. Find the employer's own website address yourself, google it, use the landline or Human Resource contact number or extension listed there, and ask whether the vacancy exists and whether this person works for them. The United Arab Emirates (UAE) government gives the exact same advice in its regulatory guidance on avoiding labour and visa fraud attempts.
Check whether the content was copied
Copy a distinctive sentence from the "About us" page and search for it in quotation marks on google search engine. If the same wording appears on a hospital's real website, the page was probably lifted. Also look for the basics a real business has: a physical/ geographical business address you can find on a map, a privacy policy, consistent branding between pages, and working web links.
Be careful with files and forms
Be wary of "applicant assessment forms" or "applicant credentialing packs" that ask you to enable macros or editing, install software, or log in with your email password. A real employer does not need any of that to evaluate a healthcare professional, nurse, a paramedic or a technician. If a careers page suddenly redirects you to somewhere unrelated online or tries to download a file, close it immediately. A genuine company's website can also be hacked at times, so an unexpected redirect on a familiar name is still a reason to stop and call the company to get explanation.
Checking the agency, the employer, and the job offer
Work through these four checks stated above in order. Each one uses an independent source, so a scammer would have to fake all of them to disguise.
1. Verify the job offer with MOHRE
Job offers or appointment letters for private-sector jobs in the United Arab Emirates (UAE) are registered with the Ministry of Human Resources and Emiratization (MOHRE) [formerly known as labor department]. A genuine offer carries a trackable transaction number you can look up through MOHRE's website or mobile app (search for the job offer verification service). You can also call the MOHRE contact center locally or internationally on 600590000. If the transaction number does not exist or the details differ from your letter, the offer is not what it claims to be.
A passing result is necessary but not enough. It shows that an offer exists. It does not prove the person messaging you is the genuine employer's representative, which is why the next steps still matter.
2. Verify the recruitment agency
Recruitment and employment mediation in the United Arab Emirates (UAE) requires a permit from Ministry of Human Resources and Emiratization (MOHRE) , in addition to an ordinary trade license/business license number. Ask the agency for its permit and trade license numbers. For Dubai mainland companies, the Department of Economy and Tourism (DET) licensing service shows whether a license is active/valid and what business activities it covers. Companies in free zones appear in the relevant free zone's own register. Check that the name, address, and licensed activity match what the recruitment agency told you.
3. Verify the hospital or clinic authenticity
Confirm that the facility itself is licensed by its health authority.
| Location | Authority | Where to check |
|---|---|---|
| Dubai | Dubai Health Authority (DHA) | Sheryan registry on the DHA website |
| Dubai Healthcare City | Dubai Healthcare City Authority | Its public professional and facility registers |
| Abu Dhabi emirate | Department of Health (DOH) | DOH services through the TAMM portal |
| Sharjah, Ajman, Umm Al Quwain, Ras Al Khaimah, Fujairah | Ministry of Health and Prevention (MOHAP) | MOHAP website and licensing services |
Regulators change their portals from time to time, so start from the authority's official homepage rather than a link in a message.
4. Call the employer directly
Phone the hospital's published main phone number, ask for Human Resources or recruitment department or the department that is hiring, and give them the recruiter's name and the job title. Ask for a live video interview with someone from the facility as well. People who are really hiring are glad to do this for verification.
What a real offer letter looks like
- The employer's legal (registered) name matches its trade or facility license.
- Job title, salary amount, allowances, working hours, and employment contract terms and conditions are spelled out, and match what MOHRE shows.
- It asks you for no payment of any kind.
- The recruiter invites you to verify it and does not discourage you from contacting the employer.
- Nobody asks to surrender /hold your original passport, credential, certificates or original documents. Under the labor laws an employer may not keep a worker's official documents.
A missing or unresolvable transaction number, an incorrect salary table whose numbers don't add up, or a hospital name you can't find online or in any regulator's register are each enough to pause the process.
How the genuine healthcare hiring works
Knowing the normal step by step sequence helps you spot a shortcut or tricky activity. The details may differ by profession and by emirate, but the typical path for a licensed practitionerlooks like this:
- You check your eligibility with the relevant health authority (DHA, DOH, SHA or MOHAP, depending on where you are going to work).
- Your qualifications and experience go through primary source verification (PSV). Most UAE health regulators use DataFlow term for this, and you submit your documents through the official portal.
- You sit any required licensing exam.
- A licensed facility (hospital or clinic) interviews you and makes an offer, and the license is normally linked to that medical facility.
- The employer registers the offer with MOHRE, and visa and residence formalities follow which is legal and security process done by Immigration Department known as Federal Authority for Identity, Citizenship, Customs & Port Security (ICP).
Nobody can skip steps 2 and 3 for a fee. Phrases like "pre-approved license," "ministry quota," or "DHA fast track" describe a process that does not exist in real world. A recruiter can introduce you to employers (medical facility, hospital or a clinical) and explain the steps, but cannot grant a license. Only the competent government department is authorized to issue a license.
Common scam scripts
The designated travel agent. You get a convincing job offer letter, then a request to pay money for "visa stamping" or "clearance" charges to a named travel agency. The agency belongs to the fraudulent scheme, and the money is hard to recover. Government guidance advise that money for an employment contract, work permit, or employment visa should not be sent to an agent or supposed company representative.
The WhatsApp recruiter. A friendly message mentions that your CV from a job website, asks for a passport copy "for registration," and soon introduces a small fee or deposit to be made online. After you pay, the contact vanishes. Your passport copy may be reused for other fraud.
The cloned careers page. The website copies a real hospital's logo and text but lives on a different domain (replica website), and their online application form collects your documents or your email login.
The fake assessment. After a short conversation you are requested to complete a "assessment test" or download a "application form." The file or page is designed to install malware or steal your login details.
Dubai Police have repeatedly warned about fake recruitment offices advertised on social media. Whatever the format, the pattern is the same. You are asked to hand over documents and money first and verify nothing, while a genuine recruiter expects you to check.
If you already paid or sent documents
- Stop sending money. Scammers often follow the first payment with a second one for a "problem" with the visa.
- Call your bank right away. Request for blocking the transaction. Quick action matters.
- Keep the evidence. Save screenshots, the website address, email headers, chat history, receipts, and any license numbers the person gave you.
- Report it. In the UAE you can use the Dubai Police e-Crime platform (www.ecrime.ae), call Dubai Police on 901, or contact MOHRE on (+971) 600590000 for recruitment complaints. In Abu Dhabi, the police "Aman service" and the "My Safe Society" mobile app accept reports.
- Protect your accounts. If you opened a link or file or typed a password, change that password immediately, turn on two-step verification against your login details, and run a security scan on your device (computer or mobile phone or smart device). If you shared your passport or Emirates ID, tell your bank and watch for misuse.
The UAE cybercrime laws, Federal Decree, Law No. 34 of 2021, makes it an offense to create a website, account, or email and falsely attribute it to another person or organization (Article No. 11). Penalties include a fine of AED 50,000 to AED 200,000 and/or imprisonment, with at least two years if the fake is used to harm the person it impersonates. Fraud is covered by separate law provisions. Your saved evidence is what gives investigators something to work with.
Using the screening tool
We have built a free of cost Gulf Recruitment Fraud Website Checker that gives a quick first read on a recruiter's website, with a risk score and a list of the signals it found. Think of it as a first filter, similar to the technical checks above. It cannot confirm that an agency holds a MOHRE (formerly known as labor department) permit or a trade license, however, it cannot confirm that an job offer is registered. Those answers come from the official sources in the section above, so please do both.
Frequently asked questions
Can a recruiter legally charge me a visa fee in the UAE?
No, not at all. The labor law prohibits the employer from charging recruitment fee and employment costs to the worker, directly or indirectly, and licensed recruitment agencies are not allowed to take placement fees from workers (applicants or candidates). A demand for a visa fee is a strong sign of a scam.
How do I check a UAE job offer?
A MOHRE (Ministry of Human Resources and Emiratisation) labour contract transaction number typically contains 13 characters (such as format MBxxxxxxxxxAE. Use the transaction number mentioned on the offer (work permit as mentioned below) in MOHRE's job offer verification service, on its website https://www.mohre.gov.ae or mobile app in Iphone or Android, or call (+971) 600590000. Then confirm separately with the employer using contact details from its official website.
 |
| This specimen is a copy of an electronic work permit issued in UAE by MOHRE |
Is a recruiter who only uses WhatsApp always fake?
Not always, however a whatsapp communication not recognized an official or formal way by a professional entity, since these days many real recruiters use WhatsApp for convenience. But if WhatsApp is the only channel and there is no company email, no verifiable office address, and no license number, treat it as high risk until you have checked everything independently.
What is the difference between DHA, DOH, and MOHAP licenses?
Each is a separate regulator associated with a separate Emirate in UAE. DHA covers Dubai, DOH covers the emirate of Abu Dhabi, and MOHAP covers the northern emirates. A license from one does not automatically let you practice in the others, so confirm which one applies before paying any exam or verification fee.
Should I still verify an offer that comes from a hospital's own email?
Yes you should. Emails can be spoofed, and real hospital accounts can be compromised. A short call to the hospital's published human resources number takes a few minutes only.
A personal story
Personally, I have worked as a medical secretary in different hospitals across the UAE for 15 years, and I have seen enough recruitment frauds to know it often starts with something that looks like something real. A few years ago, while I was between employment contracts, I received a WhatsApp message from someone claiming to be a hiring agent for a well-known government hospital in Abu Dhabi. They already had my CV from some source, spoke confidently about a medical secretary opportunity, and sent a job offer letter within two days. The letter had a hospital logo, a decent salary figure, high then mine, and a tentative start date. It looked official until I read the details closely. The email came from a free email account, the logo was slightly stretched which affected its graphic quality, and the recruiter refused a face to face or video interview, they said we know you, there is no need for formalities. Then came the request for AED 2,500 for visa processing and insurance fee, followed by another request for a mandatory orientation training fee.
I dialed the hospital’s main switchboard and asked for recruitment department. There was no such vacant opportunity and no person by that name. So I stopped responding. I did not pay, but I understood how easily someone could be trusted, especially after months of job hunting. That experience changed how I handle every offer. I now verify vacancies through the hospital’s official website or Linkedin careers page, I normally call the published human resource phone number or I approach on their Linkedin Account, and insist on speaking to a named person that was mentioned a company email domain. I never send passport, Emirates ID or any other identity document copies before the employer is verified, and I treat urgency as a warning sign. A real employer will never ever ask a candidate to pay money for whatever reasons.
By the way, this is very common in the UAE and other Gulf countries. Common enough that most healthcare administrative staff I know have either experienced it or heard about it from their colleagues, friend or a relative. The Gulf has a large expatriate workforce, high competition for hospital administration roles, and a recruitment process that often moves through WhatsApp and personal email. Scammers use all those unverifibale channels. They copy hospital logos, send fake offer letters, fake whatsapp display pictures, ask for visa, medical, or training fee in advance, and then they disappear. I have heard similar stories from friends who applied in Qatar, Saudi Arabia, and Kuwait.
My practical advice is simple. Slow down. Check the employer’s official website, Linked Career page. In my experience and opinion, 90% of the job vacancies are announced on LinkedIn by private sector. You can also call the hospital directly. Look at the recruiter’s email address details, not just the display name. Ask for a in person or live video interview with the Recruitment Department. Never pay for a job offer, visa processing, or mandatory training as a condition of employment. Keep copies of every message. If something feels rushed or secretive, walk away. Fifteen years in UAE hospitals have taught me that a legitimate job offer can survive verification. A fraudulent one usually cannot.
Sources
- UAE Government Portal, Tips to stay safe from labour and visa fraud: u.ae
- Ministry of Human Resources and Emiratisation (MOHRE): www.mohre.gov.ae, job offer verification and complaints, contact center (+971) 600590000
- Federal Decree, Law No. 33 of 2021 on the Regulation of Labour Relations, Article 6: official text available through MOHRE and the UAE legislation portal
- Federal Decree-Law No. 34 of 2021 on Combatting Rumors and Cybercrimes, Article 11: UAE Public Prosecution summary, reported by WAM (www.wam.ae)
- Dubai Department of Economy and Tourism (DET): trade license verification
- Dubai Health Authority: Sheryan registry; Department of Health Abu Dhabi: TAMM portal; Ministry of Health and Prevention: www.mohap.gov.ae
- Dubai Police: Electronic Crime platform, www.ecrime.ae
- World Health Organization, Global Code of Practice on the International Recruitment of Health Personnel: www.who.int
Indian Workers In UAE Targeted By Fake Agents In New Scam | Firstpost Live
Published by Firstpost | Contextual analysis on recruitment fraud and biometric identity theft in the UAE.
Copyright & Courtesy Notice: This video embed is shared strictly for educational, awareness, and informational purposes under fair use principles to educate job seekers against recruitment fraud. All rights, titles, ownership, and intellectual property remain with the original publisher, platform creator, and copyright holders (Firstpost YouTube Channel). Special thanks and due credit are extended to YouTube and the channel authors for permitting public embedding and digital dissemination. If you are the copyright owner and wish to request specific modifications or video removal, please contact our webmaster.
Note: This article is for general information and educational purpose, and does not replace any legal advice or an official decision from any authority. Provided Rules, portals, and phone numbers can change, so confirm details on the official websites before you act. Gulf Care Careers (GCC) is an independent website and has no affiliation with the government bodies named here. We do not accept payment from recruitment agencies or employers to feature them.
