Sorry this happened. Rule of thumb for job offers is no legitimate company will offer a job without a face-to-face or at least a video interview. Be careful of links to document sites, etc. Always check emails, those usually give scammers away. They pray on people who are too busy to check. Scam emails I get are emails that usually end with gmail.com or some domain other than the company referred to in the email. Instant trashcan for me.
I'm super critical of most things. I'm getting older, so I may not be as sharp as I used to be. And with AI, catching scams are getting a lot tougher. I'm starting to fall for the AI slop online. Imagine how scammers can use AI in these situations. I imagine in a few years you will be talking to someone in a video conference and they are AI!
Stay vigilant. Hope your kid gets a great job.