A FRAUD ALERT!

Crewell does not provide employment services and does not contact users directly. If you have received a message from someone claiming to represent Crewell and offering you a job, please do not respond to this message and do not provide any personal information.

We provide digital online services exclusively on the website with the address crewell.net. Any other websites/resources using the Crewell name in their domains/names are not related to crewell.net.

Any copying or publication of publicly available information hosted on the Crewell platform (including company profiles and vacancies) on third-party websites or aggregators is carried out without our consent and outside our control.

Our official domains and email addresses from which you can receive automatic notifications are:

@crewell.net

@info.crewell.net

Please note that scammers may send fake emails with a spoofed sender address that looks like Crewell (for example, emails with subjects such as “Please confirm pending messages”, “Mailbox verification required”, “Your account will be deactivated”). These emails are not sent by Crewell, even if the “From” field contains a spoofed @crewell.net address. Never click any links in such emails.


📌 What to do if an employer contacts you directly


If you are contacted by email, phone or messenger and offered a job, do not rush to reply, send documents or follow any requests. This is important even if you really applied for a vacancy.

First, check who is actually contacting you.

Important: scammers often use the names of real companies, real vacancies, names of employees, logos and fake documents with the details or corporate style of a real company. Even if the vacancy is really posted on Crewell or on the official company website, it does not guarantee that you are speaking with a real representative of that company.


1. Check the sender’s contact

Check which email address, phone number or messenger account was used to contact you.

If the contact looks suspicious, it is a warning sign. But even if the email, phone number or message looks realistic, it does not prove that you are speaking with a real company representative.

Scammers may use similar domains, fake email addresses, other people’s names, logos, messengers and fake documents in the corporate style of a real company.

Do not open links from such messages and do not use the contacts sent in the message for verification.

2. Check the company itself

Check the company yourself: its official website, work history, official registration, licenses or other permits if they are required for its activity, as well as independent mentions and reviews from other seafarers, if available.

A new company or lack of reviews does not always mean fraud. But if there is little information about the company, the information is contradictory, or you cannot understand who exactly is contacting you, be especially careful.

Continue communication only if you have checked the information yourself and consider it sufficient to trust the company.

3. Contact the company yourself

This is the most reliable way to check.

Do not use links or contacts from a suspicious message.

Open the official company website yourself and contact the company using the contacts shown on that website. Ask whether this person really works for the company and whether they are contacting you on behalf of the company.

Until you complete this check, do not continue communication, do not open files or links, and do not send documents or personal data.

4. Never send money

Any request to send money for any reason is a serious sign of fraud.

Do not send money and stop communication with this contact. 🚨


📂 Where scammers may find seafarers’ data

Scammers may find seafarers’ data in different ways.

Possible sources of risk:

  • Open CVs and resumes on third-party websites, forums, groups and other public sources.
  • Profiles on social networks, professional networks, messengers and open chats where professional or personal data is shown.
  • Registration on new, little-known, suspicious or fake websites and vacancy aggregators created or used to collect CVs, documents and contact details.
  • CV distribution through suspicious services, intermediaries, mass email lists or unofficial employer databases.
  • Previously sent CVs that may have been stored by employers, crewing agencies, intermediaries or their employees.
  • Databases of former employers, agencies or intermediaries, if such databases were sold, stolen, copied or used illegally.
  • Dishonest employees, former employees, intermediaries or third parties who had access to seafarers’ CVs and contacts.
  • Hacked email accounts, messengers, accounts, devices or internal systems of employers, agencies, intermediaries or seafarers themselves.
  • Phishing and social engineering: fake emails, websites and surveys used by scammers to collect data.
  • Malware and viruses on the devices of seafarers, employers, agencies or intermediaries.
  • Pirated, fake or unsafe mobile apps and programs for job search.
  • Weak, reused or stolen passwords for email, messengers, websites and other accounts.
  • Any organizations, services or external recipients to whom a seafarer has ever sent a CV, documents, profession, contacts or other personal information.

Therefore, if someone knows your rank, work experience, phone number or email, it does not always mean that this person is a real employer. Always check who is contacting you through the official company contacts.


If you found your CV on a website where you never registered

Sometimes dishonest people create “job search websites” and copy public information in bulk from several well-known platforms, including job vacancies and other open data. That is why you may see new or little-known websites showing a very large number of vacancies from many employers, often without the employers’ knowledge. Such websites may ask you to register and save your personal data to “apply” for these vacancies. In some cases, they may automatically create user accounts without their involvement, using personal data taken from public sources or from third parties. After that, the user may be asked to “log in” or “confirm” the account. It is not recommended to register on such websites or to “confirm” the account, as this may lead to further sharing of personal data, loss of control over it, and a higher risk of fraud.

In such situations, it is recommended to promptly submit a complaint to the hosting provider and the domain registrar of the website where your personal data has been published without your consent, requesting its removal. In your complaint, state that you did not give permission for the publication of your data and consider such publication a violation of applicable data protection laws (including GDPR, if applicable).

It is impossible to fully protect yourself from data leaks. Fraudsters constantly improve their schemes, and seafarers’ data can circulate across many services and organizations.

The only way to reduce risks is to strictly follow anti-fraud safety rules: carefully check offers, do not share your data with unverified people, use strong passwords, and regularly improve your digital awareness.


Disclaimer

User profile data, including the uploaded CV, is shared with employers via Crewell only with the user’s explicit consent and in accordance with the privacy settings chosen by the user. The user independently decides to provide such information when applying for vacancies, sending a CV, or activating automated services.

Crewell does not share profile data automatically and does not provide access to it to third parties without the user’s explicit consent. Access to the user’s profile data is provided only to registered employers and strictly within the privacy settings selected by the user.

After profile data is shared with an employer, any further use, storage, or processing of such information is the responsibility of the recipient and is outside Crewell’s control.

Crewell makes reasonable efforts to verify employers and ensure data security within its infrastructure. However, Crewell cannot guarantee or control employers’ actions after profile data is shared with the user’s consent.

If a user has posted their data on third-party websites, registered on other platforms, or made such information publicly available outside Crewell, reports about possible unlawful use of such data usually cannot be reviewed by Crewell, because the information is freely distributed on the Internet and may be copied and used multiple times by third parties.

Crewell is not responsible for any further use, storage, or distribution of profile data after it is shared with an employer with the user’s consent, or in cases where such data is used by third parties without Crewell’s involvement and outside Crewell’s control.


If you have any questions about security or encounter suspicious activity, please contact our support service.