We are not hiring: beware of scammers!

We've had several recent reports of a scammer sending emails from the address bscotchworks@gmail.com, claiming to be recruiting for our studio. It of course asks people to go apply via Telegram (by contacting user @bscotchcareers, who is definitely not anyone affiliated with our studio), since that's where all scammers want people to go to complete the scamming process.

We are not hiring. And if we were:

• We would post information here and on other official channels listing the valid email addresses and websites related to the hiring process. We've never used a 3rd party recruiter before, but if we do someday we'll also list any valid emails/websites associated with that entity.
• Our team would only ever be sending emails from bscotch.net or butterscotch-shenanigans.com addresses. In general, if you get an email claiming to be from someone on our team and it is NOT from one of those domains, it's a scam. Even emails that look like they're from those domains might be scams, so always double-check via an alternate means of contact if you aren't expecting an email from us!
• We'll literally never do any business over Telegram. Telegram is for scams.

Protect yourself!

We live in the Age of the Scammer, so you should assume that everything you see is a scam until proven otherwise. Some (non-comprehensive) tips:

• If it sounds too good to be true, it is.
• If you don't know the person who sent something to you, it's a scam.
• If someone asks you to install any software, it's a scam.
• If someone tries to get you to talk to them on Telegram, it's a scam.
• If you get an email from a general email domain (gmail.com, outlook.com, etc), from someone you don't know, claiming to be for some professional purpose, it's a scam. (If you yourself use a generic email address for professional stuff, make sure people have a way to verify it's you!)
• If you get an email from a non-general domain (like "bscotch.net") that you're familiar with, it's still probably a scam but at least less likely. Always triple-check the domain to make sure it doesn't have any typos, visit the website for the domain to make sure it's real, and if it doesn't resolve to a real website it's a scam. (It probably is even if it does resolve.)
• ALWAYS confirm via another contact method when you receive something you aren't expecting, or from someone you don't know, or anything that just seems a little off. Send a text, find contact info on an official site, look for verification posts on official sites/social media, etc.
• ALWAYS report scams wherever you see them. And, if you can, inform others who might be impacted.
• Use a password manager so you can have unique passwords for every account you have, and add multi-factor authentication (MFA) to every important service you use. Add a few MFA options (at least one that doesn't depend on you having your phone) so you don't get yourself locked out of everything! I'm a big fan of YubiKeys, but anything is better than nothing.

Good luck out there!