Alternatively to the GPG route, maybe just post the domains which approved recruiters would ever be messaging candidates from. This would go a long way in count

Alternatively to the GPG route, maybe just post the domains which approved recruiters would ever be messaging candidates from. This would go a long way in countering scammers that don't have access to a compromised recruiter account, for example.