Employment scams#
Employment scams impersonate Centurion Labs, a recruiter, or a partner to steal money, credentials, source code, or wallet access. A professional interview schedule and realistic job description do not prove that the opportunity is genuine.
Common employment scam patterns#
Attackers may:
- Contact you from a lookalike email domain or newly created messaging account.
- Move the interview immediately to a private chat or text-only channel.
- Offer a role without a meaningful interview or identity verification.
- Ask you to pay for equipment, training, background checks, or account activation.
- Send a counterfeit payment and ask you to return part of it.
- Require a wallet connection, token purchase, or transfer as an “assessment.”
- Provide a take-home project containing credential-stealing code or a malicious package.
- Ask you to install remote-access software, an unknown wallet, or a browser extension.
- Request confidential information earlier than a normal hiring process would require.
Technical candidates are often targeted with repositories that appear ordinary but execute scripts during installation or testing. Review code and dependencies in an isolated environment before running anything.
How to verify an opportunity#
- Locate the current Centurion Labs careers information through a verified official Centurion source.
- Compare the role, recruiter identity, and communication domain with information published there.
- Contact the organization through a separately verified channel rather than replying to the original message.
- Inspect meeting links and file origins before opening them.
- Refuse any request to transfer crypto, buy a token, connect a wallet, or pay an onboarding cost.
- Do not provide identity documents until you have independently verified the employer and understand how the data will be handled.
A real recruiter does not need your recovery phrase, private key, token approval, or test transaction.
If you ran suspicious software#
- Disconnect the device from sensitive accounts and networks.
- Use a clean device to change important passwords and enable strong multifactor authentication.
- If wallet secrets may have been exposed, create a new wallet on a clean device and move remaining assets.
- Review token approvals, NFT operators, and smart-account permissions.
- Preserve the repository, package names, messages, payment details, and file hashes for reporting.
- Have the affected device assessed or rebuilt before using it for wallets again.
Common warning signs#
- Urgency or secrecy around the offer.
- Compensation that is unusually high for the role and process.
- Inconsistent names, domains, time zones, or job details.
- Requests to receive and forward money.
- A recruiter who refuses a verifiable company channel.
- A coding task that requires wallet secrets or production credentials.
Stay safe#
Never share a recovery phrase, private key, password, or one-time code during recruitment. Verify every file and link independently, and treat any request for a crypto payment or wallet signature as a reason to stop.