Is Your Naukri Resume Exposing More Than You Think?
TL;DR: Naukri's default setting makes your profile — full name, phone, email, address, employment history — visible to over 2 lakh recruiters, and a 2025 API bug separately exposed recruiter email addresses to phishing risk. Here's what's actually visible by default, what you can control, and what happens to your data once it's out there.
👉 Check what's already exposed about you — free 30-second scan →
A resume is meant to be seen — that's the entire point of putting one on a job portal. But "seen by the right recruiter at the right company" and "sitting in a searchable database accessible to hundreds of thousands of accounts indefinitely" are different things, and most people upload a resume without registering the gap between them.
What's visible by default
Naukri's default "Communication and Privacy" setting for an active jobseeker makes your full profile — name, phone number, email, current and past employers, salary range, and address — visible in its database to over 2.5 lakh registered recruiters. This is a deliberate design choice, not an oversight: the entire value of the platform to jobseekers depends on recruiters being able to find and contact them. The tradeoff is real exposure in exchange for real discoverability.
What happens to that data beyond the intended use
- Recruiter and staffing-firm reselling — some third-party recruiters and databases buy or trade candidate contact lists beyond a single platform's boundaries.
- Recruiter spam — the volume of unsolicited calls and emails from firms you never applied to is a near-universal complaint among active job seekers on any major portal.
- Fake job scams using real resume details — scammers reference specific details from a scraped resume (your actual last employer, your real skills) to make a fraudulent job offer or a fake "registration fee" request feel credible.
- Platform-side vulnerabilities — in May 2025, a security researcher found and reported an API flaw in Naukri's mobile apps that exposed recruiter email addresses when viewing candidate profiles; the company fixed it within the same week. It's a reminder that even a well-run platform is a target, not a guarantee.
What you can actually control
Naukri offers three visibility tiers under Communication and Privacy settings, reachable through "My Naukri" after logging in:
- Immediately looking — full visibility to all 2.5 lakh+ recruiters, daily job recommendations and recruiter contact.
- Open but not actively looking — profile hidden from the general recruiter database, but you still receive curated weekly recommendations.
- Not looking — profile hidden entirely, no recruiter contact or platform communications.
You can also use "Block Companies" to specifically exclude your current employer or named competitors from seeing your profile — useful if you're job-hunting quietly while still employed, without going fully invisible to everyone else.
Trimming what a resume actually needs to show
Beyond platform settings, the resume document itself often carries more than it needs to:
- A full home address is rarely necessary on a resume — city and state is typically sufficient, and it's one less specific detail circulating with every application.
- Use a dedicated job-search email rather than your primary personal one, so recruiter spam and any resulting phishing stays contained to a disposable inbox.
- List a phone number you're comfortable having called by unknown numbers for the duration of your search, separate from your primary line if that's a concern.
Once you've got the job
Delete or deactivate your profile rather than leaving it active — an old resume that's no longer maintained doesn't get less exposed with time, it just becomes a stale, unattended copy of your personal information still sitting in a searchable database.
A resume is one specific place your details circulate — data brokers, old breaches, and other listings often carry the same details independently. Scan My Shadow checks your phone number and email across 1,500+ sources so you can see the full picture beyond just what one job portal shows.
Related Reading
- Cleaning Up Your Online Presence Before a Job Search — the broader self-audit before you start applying.
- Fake Job Offer and LinkedIn Recruiter Scams — how scammers use exactly this kind of leaked detail.
- Fake Job Registration Fee? Recovery Steps — what to do if this has already happened to you.
- How LinkedIn Exposes More About You Than You Think — the same risk pattern on a different platform.
FAQs
Can I make my Naukri resume invisible to my current employer only?
Yes — the 'Block Companies' setting lets you exclude specific named companies from viewing your profile while remaining visible to everyone else, which is the standard approach for quiet job-hunting while employed.
Does deleting my Naukri account remove my resume data completely?
You can request profile deletion by contacting Naukri support, and set visibility to 'Not looking' as an immediate step. As with most platforms, full data removal timelines vary, so check the platform's current privacy policy for specifics.
Is it safe to upload my resume to third-party job aggregator sites?
Be selective — some aggregator sites exist primarily to harvest resume data for resale rather than genuine job placement. Prefer applying directly through a company's own careers page or well-established major portals over smaller, unfamiliar aggregators.
What should I do if I'm getting recruiter spam I never signed up for?
Check your Naukri (or equivalent portal) communication settings first — you can often restrict recruiter contact without deleting your profile entirely. If spam persists from unfamiliar sources, it may indicate your resume data was scraped or resold beyond the original platform.
Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.
- Results within about 5 minutes
- Clear, plain-English report
- Delivered straight to your inbox
- No login or passwords required
- Scan data deleted after report is generated