Introducing MERENA+ — our premium tier with your personalized safety dashboard, risk score, and all security tools. Sign up and cancel risk free in the first 14 days.Learn More
MERENA
Advisory Alert

Fake Recruiters Target Web3 Developers Through Trusted Bitbucket and npm Workflows

Scammers are pretending to be job recruiters and targeting Web3 developers with fake interview steps that lead them to install a harmful meeting app called “Relay.” The scam looks professional and uses familiar work tools to trick people into trusting it.


Who is at risk

Web3 developers, software engineers, and anyone actively job hunting in remote or tech roles are most at risk.

What to watch for

Be alert for recruiters who quickly push you to download unfamiliar interview software, especially if the process feels rushed or happens outside normal company channels.

What to do

Do not install any app sent by a recruiter until you independently confirm the company, recruiter, and interview process through the employer’s official website or contact information.