I think it is a good general principle that, for any process that is likely to be a tempting target for scammers, you should require a non-electronic step to initiate that process. Requiring a physical letter of application for a job, for example.