A job posting may appear to be from a familiar company, but make sure the email address belonging to the person contacting you matches the same domain as the real representatives of the company. Visit the company's website and make sure the email domains match. Mismatched information is a red flag. For example, if KPMG were hiring, the email address would be firstname.lastname@example.org and not email@example.com. Unsolicited emails can also come from domains like @live.com, @gmail.com, @yahoo.com, and @hotmail.com.
Most legitimate jobs in the U.S. do not ask for a photo. Only for very profession-specific jobs ask for a photo and it is rare. Review federal hiring standards.
New business efforts are often used by fraudulent employers. They entice you to be a part of the development. These may be very legit jobs, but you have to do your research very carefully.
If the wages or salary do not match your level of experience or what is typically offered for that type of position with any other reputable companies, the salary range given is too wide, the company promises a large sum of money, or the job posting appears to be a traditional job but with further research, it is sounding more like an independent contract, walk away from applying.
Emails should always come from an official company email address that reflects the organization's domain. Email addresses from @gmail.com, @yahoo.com, @hotmail.com, etc. all suggest the employer does not have an official company website/domain and may not be legitimate. Proceed with caution.