Private digital risk briefingOuttake is an AI-native threat intel & brand protection platform, to find & remediate impersonation (fake WTW recruiter outreach, lookalike sending domains, spoofed brokers, and fake pension member portals).
01 hiring identities and candidate communications
02 broker, placement, and claims correspondence
03 pension member portals and sending domains
A fake recruiter message, a lookalike sending domain, and a fake member portal use different hooks against different audiences. They may still reuse hosting, templates, certificates, or delivery paths that reveal a relationship.
A familiar name and urgent opportunity create trust.
A small spelling change makes a sender or portal appear legitimate.
A verification request uses an established service relationship as the hook.
The timeline separates first-party warnings, published research, and one historical third-party incident. None of these items is an Outtake-observed finding, and none establishes that an example remains active today.
WTW warned that scheme members, trustees, sponsor representatives, and key advisors can be impersonated, and that schemes should make their communication methods clear.
A pension member site administered by WTW warned about slight variations in legitimate sending addresses and published a defanged lookalike example. The exact publication date is not stated.
WTW FINEX Global described voice cloning, deepfake executive impersonation, and AI-generated fraudulent websites as current fraud risks.
WTW says people not associated with its Recruitment team have impersonated recruiters over WhatsApp and Telegram, and that WTW will never ask candidates to send money.
Outtake turns separate suspicious assets into one investigation. WTW gets the evidence around each fake, the relationships between them, and the provider dependencies available for coordinated response.
Find fake recruiter outreach, lookalike domains, spoofed placement and claims correspondence, fake member portals, and impersonating profiles across messaging and social platforms.
Automatically collect hosting, registration, delivery, identity, and content evidence around each fake so the security team has a reviewable case.
Connect shared hosting, templates, certificates, and delivery paths so a recruiter lure and a pension lure can be handled as one related operation instead of two isolated tickets.
Coordinate with registrars, hosting companies, messaging platforms, and other providers to remove services the operation depends on and make it harder and more costly to continue.
Outtake combines entity definition, agentic search, threat-graph intelligence, and autonomous takedowns in one platform. The result is continuous protection that improves as the system learns from every operation.
Defend exactly what matters most to you. Outtake's agentic search reads logo, layout, image, video, and audio across every surface, mapping your full brand presence in minutes.
See the entire operation behind every fake. Outtake's threat graph maps the spoofed domains, cloned apps, and coordinated impersonations driving it.
Takedowns execute automatically across every infrastructure provider, with a 99.4% confirmation rate and 14.4-hour average resolution. A faster queue is still a queue.
Every investigation and takedown adds new infrastructure, identity, and response evidence to the threat graph, helping Outtake recognize related activity and improve future detection and response paths.
In 30 minutes, see how Outtake finds a fake WTW recruiter profile or lookalike sending domain, investigates what sits behind it, connects related activity across hiring, broking, and pension channels, and coordinates action with the providers keeping it online.
