Trust & Security

• Every job post is reviewed by a person before it appears on the board. Nothing goes live automatically — posts that look like scams, spam, or misleading offers are rejected.
• Your connection is encrypted. Every page on HayBiz.us is served over HTTPS, so what you type — applications, resumes, account details — travels encrypted between your device and our server.
• Passwords are never stored in plain text. If you create an account, your password is hashed with bcrypt, an industry-standard one-way algorithm. We could not read your password even if we wanted to.
• Automated spam and bot filtering screens the public posting form before a human ever sees a submission.
• We collect the minimum and sell nothing. Resumes and application details are shared only with the employer of the job you applied to and with site moderators. We never sell your personal information. Details are in our Privacy Policy.
• One official email address. All emails from us — post approvals, applicant notices, password resets — come from no-reply@haybiz.us. Any other sender claiming to be HayBiz is not us.

No website can honestly promise perfect security — anyone who does is selling something. What we promise is care: minimal data, strong basics, human review, and fast action on reports.

• Use a strong, unique password — one you don't use on any other site. A password manager makes this painless.
• If anything seems off with your account, reset your password immediately and email us.
• Sign out on shared computers — a library PC, a friend's laptop, a work machine others use.
• Keep your browser and phone up to date. Most real-world account theft starts with outdated software, not hackers in hoodies.

Job scams follow patterns. If you see any of these red flags, stop and report the post — even if the person writes in Armenian, knows the community, or was referred by a name you recognize. Scammers borrow trust; verification earns it.

• You're asked to pay anything — for training, equipment, a uniform, a background check, or "processing." Real employers pay you, not the other way around.
• A job offer with no interview. Nobody hires a stranger sight unseen. An instant offer is bait.
• Pay that's too good for the work. $45/hour to stuff envelopes from home is not a salary, it's a hook.
• The check-and-refund trick. They "overpay" you by check and ask you to send back the difference. The check bounces days later and the bank takes the money from you.
• Requests for your SSN, bank, or ID documents before you've had a real interview or signed anything. Real paperwork comes after a real hire.
• Pressure to move off the platform fast — to WhatsApp, Telegram, or text — combined with urgency ("position closes today"). Urgency is a scammer's favorite tool.
• "Personal assistant" or "package reshipping" gigs that involve buying gift cards, forwarding parcels, or moving money through your account. These are fraud and money laundering — and you become the one holding the bag.
• A company that doesn't exist. Search the business name plus "scam," check the address on a map, and call the listed phone number before an in-person meeting.

Meeting for an interview? Prefer a public place or a real business address for the first meeting, and tell someone where you're going.

Phishing is when someone impersonates a site you trust to steal your password or information. Four quick checks before you click or reply:

• Check the sender. We only send from no-reply@haybiz.us. A lookalike such as haybiz-jobs@gmail.com or support@haybiz-us.net is fake.
• Check the link before you click. Hover (or long-press on a phone) and make sure it leads to haybiz.us — not haybiz.us.something-else.com.
• Distrust threats and prizes. "Your account will be deleted in 24 hours" and "you've been selected" are both pressure tactics.
• Don't open unexpected attachments — we never send attachments, and neither should an employer you haven't met.

When in doubt, don't click anything in the email — open haybiz.us directly in your browser and check your account there. Forward the suspicious email to us at haybiz.us@gmail.com.

• Be cautious with unexpected attachments in applications. Resumes should be PDF or Word files — never .zip, .exe, or files that ask you to "enable macros."
• Verify before you hire. A quick phone or video call catches most fake applicants and protects your business and your customers.
• Never share your HayBiz password with staff. If someone else manages your postings, have them contact us instead.

See a suspicious post, a scam message, or a fake email? Email haybiz.us@gmail.com with a link or screenshot. Reports are read by a person, suspicious posts are removed, and repeat offenders are banned — usually the same day. Reporting in English or Armenian is equally welcome.

If you've lost money to a scam, also report it to the FTC at reportfraud.ftc.gov and to your local police. Acting fast matters, especially with bank transfers.

If you're a security researcher (or just sharp-eyed) and you've found a vulnerability in HayBiz.us, we want to hear from you. Email haybiz.us@gmail.com with the subject "Security vulnerability report" and enough detail to reproduce the issue.

We ask that you give us reasonable time to fix the issue before disclosing it publicly, avoid accessing or modifying other people's data, and don't run disruptive automated scans. In return: we'll respond, we'll fix confirmed issues promptly, and we'll credit you by name if you'd like. We will never take legal action against good-faith research that follows these guidelines.