LogoYour Job Mitra

Job safety

What Information Should You Never Share With a Recruiter?

By Your Job Mitra Team · Updated · 3 min read

Short answer

Never share OTPs, card numbers, CVV, UPI or net-banking PINs and passwords, or remote-access codes with a recruiter. Hold back Aadhaar, PAN and bank account details until a genuine, verified offer, and share them only through official channels. To start, a recruiter needs your resume, contact details and availability, nothing that gives access to your money.

Key facts

  • Never share OTPs, PINs, passwords, card numbers, CVV or screen-sharing codes with anyone, real recruiters included.
  • A resume, phone number, email and availability are all a recruiter needs at the start.
  • Aadhaar, PAN, bank account and academic documents are normal at onboarding, after a verified offer.
  • Ask why a document is needed and how it will be stored. A genuine employer can answer.
  • Remove personal details you do not need to publish from any resume you upload online.
On this page

What a recruiter needs at each stage

The simplest way to stay safe is to match what you share to how far the process has really gone. Requests that jump ahead of the stage are the warning sign.

StageReasonable to shareNot needed
ApplicationResume, phone, email, city, availability, links to your workID numbers, bank details, family details, a photo unless requested
Interview or assessmentWork samples, projects, references if askedAny financial information, OTPs, passwords
Verified offer and onboardingID and address proof, academic certificate copies, bank account details for salary, previous employer detailsPINs, card numbers, CVV, passwords, OTPs

Even at onboarding, documents should go to the company's official HR email or portal, not to a personal account or a chat application.

Never share, at any stage

These give someone direct access to your money or accounts. No genuine recruiter or employer needs them, at any stage, for any reason.

  • One-time passwords (OTPs) sent to your phone or email. An OTP exists to prove that you are the one acting.
  • Card numbers, CVV and expiry dates.
  • UPI PINs, net-banking passwords and app logins, and approval of any UPI "collect" request you did not start.
  • Screen-sharing or remote-access codes. Installing such an app because a recruiter asks lets them see and operate your phone.
  • A small "test" payment to "verify" your account.
  • Signed blank cheques or blank signed forms.
  • Passwords for your email or social accounts.

Share only after you have verified the offer

Some documents are normal at onboarding but risky beforehand, because they can be used for identity theft, loan fraud or opening accounts in your name:

  • Aadhaar and PAN details
  • Passport or other identity documents
  • Bank account number and IFSC, which payroll needs
  • Address proof and photographs
  • Copies of academic certificates

Before you share any of these, complete the checks in how to verify a job offer: the company, the role, the recruiter, and the process. Then send documents through the company's official channels only.

Be careful with original documents

Sharing copies is normal. Being asked to show your original certificates at joining, so HR can check them against the copies, is also common. What should worry you is an employer that wants to keep your originals as security, or a recruiter who asks you to courier originals before you have joined. Push back, ask for the policy in writing, and reconsider if they insist.

Protect what you publish

Recruiters and scammers both browse resume databases. Before you upload a resume anywhere public:

  • Leave off your Aadhaar, PAN and any bank details. They do not belong on a resume.
  • Consider whether you need to show a full home address. A city is usually enough.
  • Use an email address and phone number you are comfortable receiving unsolicited messages on.
  • Remember that anything you upload can be copied and reused to make fake offers convincing.

If you need a clean resume that leaves out unnecessary personal details by design, the free Resume Builder does not ask for them.

How to ask before you share

You are allowed to ask, and a genuine employer expects it. Try something like this:

Could you tell me what this document is used for and how it will be stored? I'll send it to the official HR email once my offer is confirmed in writing.

A real HR team can explain and will usually wait. A scammer tends to push back, add pressure, or disappear.

If you have shared something you should not have

  1. If you shared an OTP, card details or a banking password, call your bank at once, using the number on your card or the bank's official website, so they can block the card or account.
  2. Change passwords that may be exposed, and check your recent transactions.
  3. Report it: call 1930, the national cyber fraud helpline, and file a complaint at cybercrime.gov.in.
  4. If you shared Aadhaar details, the official UIDAI website explains how to review where your Aadhaar has been used and how to lock your biometrics.
  5. Save the evidence of the conversation, then stop replying.

More on how these schemes work is in whether you should ever pay money for a job, and you can check the person contacting you with how to verify a recruiter or a recruitment email.

Put it into practice

Free tools for this

Related questions

Frequently asked questions

Can a recruiter ask for my Aadhaar number?

Not at first contact. Aadhaar and other ID documents are normal at onboarding, after a genuine and verified offer, and should be sent through the company's official HR email or portal. A request for them before any interview or offer is a warning sign.

Is it normal to share bank details before joining?

Employers collect bank details for payroll, but that happens at onboarding after a confirmed offer. A request for your bank account details, or anything like a card number or OTP, before you have an offer is a strong warning sign.

Should I give original certificates to an employer?

Copies are normal, and showing originals at joining so HR can verify them is common. Be wary of an employer that wants to keep your originals as security, or a recruiter who asks you to send originals before you have joined. Ask for the policy in writing.

What should I do if I shared an OTP by mistake?

Call your bank immediately using the number on your card or its official website, so they can block the card or account. Then call the national cyber fraud helpline 1930 and file a complaint at cybercrime.gov.in, and keep the evidence.

Why would a recruiter need my photo?

Generally not at the application stage. A photo may be needed later for an ID card or onboarding form, after you have joined. It is not required to apply for most jobs, so unless a specific application asks for one you can leave it out.

Sources and method

Written by the Your Job Mitra team. Read our editorial policy and how we verify jobs. Guidance is general - your situation may differ.

Keep reading

Related guides

Looking for a job right now?

We email verified fresher openings the morning they go live.

We only email you job openings. No spam, unsubscribe anytime. We never sell your data.