Predators in Research: How to Recognize Them Early and Protect Yourself

Early in a research career, the work comes with excitement and with real pressure: publish, collaborate, stay visible. From my own experience, I've learned that this exact stage is where most of the risks show up, and not just technical ones. Many of them are human.

When I say "predators," I mean three realities that early-career researchers run into more and more often: predatory journals, which feed on the pressure to publish; people who ask, or expect, to be listed as authors without a real contribution; and people who present themselves as experts to earn trust, only to later ask for money, data, or access. The point of this piece is to bring clarity, offer practical, good-practice advice, and highlight the risks worth watching for. You need to observe, verify, and react in time, before a rushed decision costs you your work or your research integrity.

As a researcher working on cybersecurity behavior, this concern for risk matters a great deal to me. Through this work, I've noticed a series of attacks and patterns that researchers, especially those early in their careers, are exposed to. Praise that comes out of nowhere sometimes hides less honest intentions, and a researcher's work is genuinely valuable and deserves to be protected as such. Sometimes it's healthier to be suspicious than naive.

Predatory journals: fast promises, hidden costs

Not every new journal is a problem, and being new is not, by itself, a reason for suspicion. What deserves attention are the patterns that keep repeating: unsolicited invitations, sent very frequently, with no clear connection to your field; promises of "extremely fast" publication; a peer-review process that is vague or simply doesn't exist; fees that are disclosed late or without transparency; and an editorial board that is hard to verify through independent sources.

In practice, I never rely on a single indicator. I check the journal through independent sources, look closely at its editorial policy, and assess how clearly the review process is described. When that information is missing or vague, it's already a strong enough signal to stop.

Opportunistic authorship: "I'll help, but add me as an author"

A growing risk is authorship claimed as a favor rather than earned through actual scientific work. Often, someone asks to be added as an author before any real contribution exists, and their "reputation" gets used as the justification for adding their name. At the same time, conversations about concrete contributions, who wrote what, who analyzed the data, who reviewed the text, tend to get carefully avoided.

The principle I apply consistently is simple: authorship should be tied to contribution, not influence. If someone can't clearly say what they brought to the paper, their name doesn't belong on it, no matter their position or reputation.

Impersonation and social engineering in academia

Some messages are built to be very convincing, with a professional tone, real references, and a sense of urgency that's manufactured on purpose. I've learned to watch for a few recurring signals: emails sent from domains that look almost identical to official ones, but with a letter swapped or a different extension; urgent payment requests outside normal institutional channels; requests for sensitive data or full manuscripts with no legitimate context behind them; and emotional pressure along the lines of "act now or lose this opportunity."

My rule, and I apply it every time, is that when urgency shows up, I pause and verify through an independent channel, not the one the message arrived on.

A short 15-minute verification protocol

Before responding to anything that raises suspicion, I run a short but consistent protocol. First, I check the person's identity: institutional affiliation, ORCID profile, and their actual publication history. Then I check the channel the message came through: the email domain and the institution's official contact details. Finally, I ask myself whether the request itself is legitimate, proportionate to the context, and something that can be documented. If any of these three steps stays unclear, I don't continue the conversation until I get independent confirmation.

Practical recommendations for early-career researchers

If you're early in your career, a few simple habits can protect you from most risky situations. Set authorship criteria in writing at the start of any collaboration, so you avoid uncomfortable conversations later. Don't send sensitive data without clear agreements and a well-defined context. Check journals through independent sources, not just the marketing material they send you directly. Don't make payments based on a single email, no matter how official it looks. And, most importantly, ask for a second opinion, from a mentor, a colleague, or your institution, whenever you have doubts, because an outside perspective often catches what you, caught up in the pressure of the moment, might miss.

Conclusion

Trust in research is hard to build, which is exactly why it's worth staying alert without becoming cynical. Caution doesn't mean standing still, it means professional maturity. If you're early in your career, you don't need to know everything from day one. But it matters to verify, to ask, and to slow down when something seems too good to be true.

References

• ICMJE – Recommendations (Authorship and Contributorship): https://www.icmje.org/recommendations/
• COPE – Principles of Transparency and Best Practice in Scholarly Publishing: https://publicationethics.org/
• Think. Check. Submit.: https://thinkchecksubmit.org/
• DOAJ (Directory of Open Access Journals): https://doaj.org/
• InterAcademy Partnership – resources on predatory journals/conferences: https://www.interacademies.org/