SCAM ALERT: Watch Out for Fake Sainsbury's Job Offer Emails!

We've seen a concerning new phishing attempt circulating that targets individuals with what appears to be a job offer from Sainsbury's. This scam is particularly insidious as it preys on people actively seeking employment.

If you receive an email like the one pictured (see attached images), please be extremely cautious.

Why this is likely a scam:

• Request for Sensitive Personal Information via Email: The email asks for highly sensitive data such as your date of birth, address, legal gender, and National Insurance number. Legitimate companies, especially those as large as Sainsbury's, would almost certainly not ask for this level of personal detail via a direct email with a clickable link. They would typically direct you to a secure portal or an official HR system, often after a formal offer has been made through a verified process.
• The Sender's Email Address: While the sender name appears as "Sainsburys Recruitment," the actual email address shown in the second image is Sainsbury.Recruitment@myhr.sainsburys.co.uk. While "sainsburys.co.uk" is part of the domain, the inclusion of "myhr." and the way it's presented can sometimes be a red flag. Sainsbury's official recruitment portal is typically accessed directly through their sainsburys.jobs website. While myhr.sainsburys.co.uk could theoretically be a legitimate subdomain, the combination of it with the highly suspicious request for personal data points heavily towards a scam. Sainsbury's explicitly states they will never ask for account details or passwords via email or a link from an email. (Source: sainsburys.jobs/privacy)
• Urgency and Pressure: The phrase "Please make sure you accept this as soon as possible so that we can get you set up ready for your first day" creates a false sense of urgency, a common tactic in phishing scams to bypass critical thinking.
• Generic "clicking here" link: Instead of providing a clear, official URL for a secure portal, it uses a generic "clicking here" link, which could easily lead to a fraudulent website designed to steal your information.

What to do if you receive this email:

1. DO NOT click on the link.
2. DO NOT reply to the email or provide any information.
3. Mark it as spam/junk and delete it immediately.
4. If you have applied for a job at Sainsbury's recently and are concerned, go directly to the official Sainsbury's careers website (sainsburys.jobs) and log in to your applicant portal or find their official contact details to enquire about your application status. Do not use any contact information provided in the suspicious email.
5. Report the email: You can report suspicious emails to the National Cyber Security Centre (NCSC) by forwarding them to report@phishing.gov.uk.

Remember: Always be suspicious of unsolicited emails, especially those asking for personal or financial information, or those that create a sense of urgency. Always verify the authenticity of job offers through official channels.