As Seen in The Wall Street Journal, Bloomberg, Fox News Media, Entrepreneur, NBCNews.com & YahooNews.com58,846 total fake jobs removed from LinkedIn150 fake jobs removed from Teal7,000+ fake profiles removed from LinkedIn1,000+ hijacked profiles removed and disrupted100s of fake companies destroyedOne Mission — Decimating Criminal EnterprisesAs Seen in The Wall Street Journal, Bloomberg, Fox News Media, Entrepreneur, NBCNews.com & YahooNews.com58,846 total fake jobs removed from LinkedIn150 fake jobs removed from Teal7,000+ fake profiles removed from LinkedIn1,000+ hijacked profiles removed and disrupted100s of fake companies destroyedOne Mission — Decimating Criminal Enterprises
LinkedIn Confidential Pt. 3 banner
Part 3 of 6

LinkedIn Confidential — Pt. 3

The Lies

The Opening

There are several places lies hide. These lies hide in plain sight. The executive search process is normally handled confidentially — a discretionary hiring process where companies want to find people without a lot of attention or applicants. It helps maintain a stable reputation for the company, its stock, and doesn’t alert the person being replaced.

Other real people list their place of employment as Confidential if they don’t want people to know where they work, or if they’ve endured harassment and want to be protected. Scammers seized this ambiguity. There are thousands of fake jobs on these pages and countless fake profiles that can hire for these jobs and add themselves to hiring teams of real listings — without the original job poster knowing.

“There are several places lies hide. These lies hide in plain sight.”

The Exhibits — 22 Documented Profiles

Exhibit 1 Kendra Scott Necklace Jessica Simpson Lee

The constructed name “Kendra Scott Necklace Jessica Simpson Lee” assembles brand names and celebrity references into a fake professional identity. The combination is nonsensical as a human name but engineered to surface in specific searches.

Red Flags: Kendra Scott Necklace Jessica Simpson Lee

  • Name constructed from brand names and celebrity references
  • Artificial assembly, not a natural human name
  • Attached to Confidential network
Exhibit 2 Florence Gordon

“Florence Gordon” presents as a professional recruiter in the Confidential network. The name is more naturally constructed than others in this case file — which is the point. Normalcy is camouflage.

Red Flags: Florence Gordon

  • Attached to Confidential fake job network
  • More naturalistic name construction designed to blend in
Exhibit 3 Timothy Moses Heritage Daniel

“Timothy Moses Heritage Daniel” uses a four-word name construction with no natural surname — a pattern repeated throughout this network. The more names in the string, the more it reads as artificially assembled.

Red Flags: Timothy Moses Heritage Daniel

  • Four-word name with no natural surname
  • Artificial name construction pattern
  • Attached to Confidential hiring network
Exhibit 4 Jason (C) Smith

“Jason (C) Smith” uses a middle initial in parentheses — a stylistic choice common in certain professional traditions that bad actors have adopted to signal formality.

Red Flags: Jason (C) Smith

  • Parenthetical initial — mimicking professional formatting
  • Attached to Confidential network
  • No verifiable professional history
Exhibit 5 Jennifer Jamestown & Thalassa Calista — Coordinated Pair

Two profiles operating together on the same listing. “Jennifer Jamestown” and “Thalassa Calista” both appear on the same hiring team — part of a coordinated effort to build a fabricated panel that makes the listing appear staffed by a real team.

Red Flags: Jennifer Jamestown / Thalassa Calista

  • Two fake profiles operating together on the same listing
  • Coordinated dual-profile hiring team construction
  • Both attached to Confidential network
Exhibit 6 Ms. Mary Mark Grace

“Ms. Mary Mark Grace” uses the honorific “Ms.” followed by a first-middle-last construction — a formatting pattern that signals formality without providing verifiable credentials.

Red Flags: Ms. Mary Mark Grace

  • Formal honorific applied to a constructed name
  • Designed to appear more professional than warranted
  • Attached to Confidential network
Exhibit 7 Thompson Sonoma’s

“Thompson Sonoma’s” is an unusual construction — a possessive appended to what reads as a surname, creating a name that reads more like a business than a person. The possessive construction is used to evade standard name-recognition checks.

Red Flags: Thompson Sonoma's

  • Possessive construction — name reads as a business, not a person
  • Atypical professional naming
  • Attached to Confidential fake recruiter network
Exhibit 8 Husston Genrald

“Husston Genrald” presents with a misspelled surname — “Genrald” instead of “Gerald” — a telltale marker of hastily constructed fake accounts.

Red Flags: Husston Genrald

  • Misspelled surname: 'Genrald' instead of 'Gerald'
  • Hasty account construction
  • Attached to Confidential network
Exhibit 9 Marlowe Sandra

“Marlowe Sandra” uses reversed name order — what would be a first name appears as the surname. This construction pattern is documented throughout this investigation as a sign of artificially generated fake profiles.

Red Flags: Marlowe Sandra

  • Reversed name order
  • Artificial name construction
  • Attached to Confidential network
Exhibit 10 Jason Franklin

“Jason Franklin” is a more naturally constructed name — which is precisely what makes it more dangerous. The most effective fake profiles are the ones that look the most ordinary. Nothing in the name signals fraud.

Red Flags: Jason Franklin

  • Naturally constructed name — blends into normal professional network
  • Requires deeper inspection to identify as fraudulent
  • Attached to Confidential network
Exhibits 11–12 Williams Brasfield & Henry Gray — Stolen Photo of Bill Reffert

“Williams Brasfield” and “Henry Gray” operate together on the Confidential network. Williams Brasfield uses a photo stolen from Bill Reffert. Two profiles. One stolen face. Two data-collection points for the same operation.

Red Flags: Williams Brasfield / Henry Gray

  • Williams Brasfield's photo stolen from Bill Reffert
  • Two profiles operating as a coordinated pair
  • One stolen face used across coordinated profiles
Exhibit 13 Cynthia PP Patrick

“Cynthia PP Patrick” uses double initials in the middle — “PP” — a formatting anomaly that flags the name as artificially constructed. Double initials combined with a given name and surname is an uncommon naming convention that appears across this network as a sign of mass account generation.

Red Flags: Cynthia PP Patrick

  • Double initial 'PP' in middle position
  • Artificial naming convention
  • Attached to Confidential fake job network
Exhibit 14 Harper Bailey — AI-Generated Photo

“Harper Bailey” does not use a stolen photograph — they use an AI-generated image. This is the most significant development in Part 3: the network is no longer exclusively reliant on stolen photographs. AI-generated faces cannot be reverse-image-searched to reveal their fraudulent nature. This is a major escalation in the sophistication of the operation.

Red Flags: Harper Bailey

  • AI-generated profile photo — not stolen from a real person
  • Cannot be identified via reverse image search
  • Represents escalation beyond photo theft into AI-generated identity fraud
Exhibit 15 Jessica Jessi

“Jessica Jessi” uses a first name as both given name and surname — a minimal-effort construction that produces a functioning profile name at the cost of any plausibility as a real person’s name.

Red Flags: Jessica Jessi

  • First name used twice as given name and surname
  • Minimal-effort name construction
  • Attached to Confidential network
Exhibit 16 Michael Revenaugh

“Michael Revenaugh” presents as a professional recruiter in the Confidential network. The surname “Revenaugh” is an unusual construction that may be generated or borrowed.

Red Flags: Michael Revenaugh

  • Unusual surname construction
  • Attached to Confidential network
  • No verifiable professional history
Exhibit 17 Marina C. — AI-Generated Photo

A second AI-generated profile photo in the same case file. “Marina C.” uses an AI-generated image — not stolen from a real person. Two AI-generated profiles in Part 3 confirms this is not an isolated experiment. The network is actively integrating AI image generation into its profile construction pipeline.

Red Flags: Marina C.

  • AI-generated profile photo
  • Second confirmed AI-generated face in Part 3
  • Systematic integration of AI into fake profile infrastructure
Exhibit 18 Hazard Joseph — Stolen Photo of the Late Patrick James Lloyd Sr.

“Hazard Joseph” uses a photo stolen from the late Patrick James Lloyd Sr. — a real person who is deceased. Stealing the image of someone who has passed makes the original subject unable to report or respond to the identity theft themselves.

“Stealing the face of someone who has passed is not a victimless crime. It strips a person of their dignity after death and weaponizes their image against the living.”

Red Flags: Hazard Joseph

  • Photo stolen from the late Patrick James Lloyd Sr.
  • Deceased victim of identity theft cannot self-report
  • Attached to Confidential network
Exhibit 19 Margaret Collins — AI-Generated Photo

“Margaret Collins” uses a third AI-generated profile photo in this single case file. Three AI-generated faces in one case file is not coincidence — it is infrastructure. The shift from photo theft to AI generation is systemic.

Red Flags: Margaret Collins

  • AI-generated profile photo
  • Third confirmed AI-generated face in Part 3
  • Systematic integration of AI into fake profile infrastructure confirmed
Exhibit 20 Taylor Collins

“Taylor Collins” is a naturally constructed, gender-neutral name that offers maximum camouflage in a professional network. The less a fake profile looks like a fake profile, the more effective it is.

Red Flags: Taylor Collins

  • Gender-neutral name — maximum camouflage
  • No obvious artificial tells in the name
  • Attached to Confidential network
Exhibit 21 Mary Josh

“Mary Josh” uses a given name as a surname — an informal naming convention that reads as slightly unusual in a professional context but is common enough not to trigger immediate suspicion.

Red Flags: Mary Josh

  • Given name used as surname
  • Mild artificial name construction
  • Attached to Confidential network
Exhibit 22 Nancy Linda Jerry Donland — Stolen Photo of Courtney A. Munnings

“Nancy Linda Jerry Donland” uses four names — three given names and a constructed surname — along with a profile photo stolen from Courtney A. Munnings. Four names. One stolen face. Part 3 closes on the clearest possible statement of how this network operates.

“Four names. One stolen face. These lies hide in plain sight.”

Red Flags: Nancy Linda Jerry Donland

  • Four-name construction: three given names, one constructed surname
  • Photo stolen from Courtney A. Munnings
  • Maximum artificial construction combined with stolen identity

Case Summation

Part 3 confirms two critical escalations: the network has begun integrating AI-generated profile photos, eliminating the ability to reverse-image-search stolen faces; and it is stealing photographs from deceased individuals, removing the victim’s ability to report their own identity theft.

Why This Matters

Every major company is targeted by foreign scammers. All Confidential pages should be pulled until the accounts affiliated with fake profiles are gone. It is never only one profile, one fake company, or one other variation. These are concerted, focused efforts to use real people in scams that rob job seekers of hope, money, time — and in some cases, their lives.

Visual Documentation

Every slide from the original case file. Click any image to expand full-screen.