Start your 3-day free trial
Sign up to experience all premium features at no cost.
*Available only to new users. Each user is limited to one trial.


A job scam, sometimes called a recruitment scam, is a false recruitment or work opportunity designed to obtain money, identity information, financial access, goods, or unpaid labor. The scammer may impersonate a real employer, invent a company, advertise simple online tasks, send a fake check for equipment, or recruit you to receive and forward packages.
The FTC warns that honest employers do not charge applicants to obtain a job.[1]
Key Takeaways
- Verify the company, vacancy, recruiter, and interview route separately before sharing sensitive data.
- Stop when an employer asks you to pay to unlock work, earnings, training, equipment, or a background check.
- A real company name, contract, video call, or job-board listing does not by itself authenticate the recruiter.
- Recovery depends on what you exposed: a résumé, identity document, bank data, payment, or reshipped goods each needs a different response.
Job seekers are already expected to disclose information and respond quickly, which gives impostors a useful script. Build a repeatable verification habit with the online security guide rather than relying on how professional a recruiter sounds.
The approach may begin through a job board, email, social network, messaging app, or unsolicited text. The recruiter moves quickly, gives an unusually easy interview, and creates momentum with an offer, contract, onboarding form, or training schedule. Only after you feel selected does the request change into money, identity data, bank details, account access, or handling goods.
The FBI describes fake hiring schemes in which criminals copy company sites and job listings, impersonate recruiters or managers, conduct false interviews, and then request identity or financial information. The paperwork may look convincing because a signed contract is easy to fabricate and public company details are easy to copy.
The strongest test is not whether each item looks plausible in isolation. It is whether the vacancy, person, company domain, interview process, and payment request form one independently verifiable chain.
An impostor claims to represent a known company and asks for a passport, driving license, tax identifier, bank information, or card data before the hiring relationship is verified. Legitimate employers may need some sensitive information after hiring, but the timing, collection channel, and identity of the recipient matter.
You are paid or shown a small balance for rating products, clicking buttons, testing apps, or “optimizing” listings. The interface then says you must deposit money or cryptocurrency to unlock more tasks or withdraw earnings. The FBI warns that these schemes display supposed earnings that victims cannot actually cash out.[2]
The “employer” sends a check and instructs you to buy a laptop, software, or supplies from a named vendor, or to return an overpayment. Your bank may make funds appear available before discovering that the check is fraudulent. You remain responsible for money you sent onward.
You receive goods at home, repackage them, and forward them elsewhere. The merchandise may have been bought with stolen payment details, while promised wages never arrive. Do not continue moving packages to preserve the relationship; keep records and contact the platform, carrier, or appropriate authority through an independent route.
The recruiter asks you to receive money, open accounts, move funds, buy cryptocurrency, or let the business use your bank account. These tasks can expose you to stolen funds and serious legal or financial consequences. A job should not require you to act as an unexplained payment bridge.
Check four layers separately.
The FBI recommends searching for the hiring company independently and comparing apparently similar company domains. It also warns that HTTPS alone does not prove legitimacy.[3] Check professional profiles for consistent employment history, but do not treat a profile as decisive because accounts and biographies can be copied.
A real vacancy can still be used as bait by a fake recruiter. Conversely, a small company may have an informal process. Your goal is not to reject every unusual employer; it is to pause sensitive actions until someone reached through the company's independent contact route confirms the role and person.
| Request or signal | Why it is risky | Safe response |
|---|---|---|
| Pay before you can work or withdraw earnings | The “job” depends on your deposit, not your labor | Stop; never send money to unlock work |
| Buy equipment from a designated vendor using a new check | The check may later be reversed while your payment is final | Ask the verified employer to procure equipment directly |
| Send card details or online-banking credentials | Payroll does not require card access or login secrets | Refuse and verify HR independently |
| Move packages or money through your home or account | You may be handling fraud proceeds or stolen goods | Stop handling items and seek official advice |
| Interview only by text with immediate hiring | The process avoids identity checks and creates speed | Request a verified company channel and live confirmation |
| Provide identity documents before the role is confirmed | The data can support identity theft or account fraud | Delay disclosure and verify the recipient and necessity |
“Pay first to earn” is the clearest stop line. The FBI advises never sending money to an alleged employer and identifies cryptocurrency deposits tied to simple optimization tasks as a red flag. The FTC also describes honest employers as not charging applicants to get a job.
A normal résumé may already contain enough detail for targeted follow-up scams. Note exactly what it included, remove unnecessary home-address or identity details from future versions, and expect messages that reuse your work history. Change nothing merely because a résumé was sent, but secure any account if it included a reused password or private access link.
Preserve the conversation and contact the identity-theft or document-issuing authority relevant to your country. Follow its fraud-alert, credit-monitoring, replacement, or protective-registration guidance. Warn your real employer or relevant account providers if the document could be used to impersonate you.
Contact the bank through its official app or a known number. Explain what fields were shared and whether you gave login credentials, a one-time code, direct-deposit details, or only an account number. Follow its advice on credential changes, transaction monitoring, account restrictions, or replacement.
Call the bank, card issuer, payment app, transfer company, or cryptocurrency service immediately. Ask whether the payment can be stopped or recalled and explain any check you deposited. Do not send more money to “release” a refund. Report the listing to the job platform and notify the impersonated company.
Stop forwarding. Keep labels, instructions, tracking numbers, messages, and payment promises. Do not sell or keep goods as compensation. Contact the carrier, marketplace, and appropriate local authority through official channels for instructions that fit your jurisdiction.
Use a résumé that contains professional contact details but not identity numbers, bank information, a full birth date, or document images. Keep a record of every role you applied for so an unexpected recruiter can be matched to a real application. Use a unique password for each job platform and enable MFA where available.
Before sending onboarding data, ask what is required, why it is needed, how it will be stored, and whether a secure portal is available. Reach that portal from the employer's official site. If you feel pressured, end the call and reconnect through the published company contact.
Yes. Platforms can remove fraud, but a listing may appear before detection or may copy a real vacancy. Confirm the role on the employer's own careers page and verify the recruiter through a published company contact.
No, but hiring immediately after a short text exchange is a strong warning sign when combined with payment or sensitive-data requests. Ask for a verified company email, live conversation, and independent confirmation of the recruiter.
A contract creates commitment and makes later requests feel like onboarding. Names, logos, addresses, and signatures can be copied. Verify the relationship before treating the document as proof.
A task scam presents simple online actions as paid work, shows fictional earnings, and then requires deposits to continue or withdraw. The money you send is the scam; the displayed balance is not reliable evidence of wages.
A verified employer may request limited payroll information after hiring. Do not provide online-banking passwords, one-time codes, or card details, and do not send payroll data until you have independently confirmed the employer and secure collection channel.
Do not spend or forward funds based on it. Contact your bank, explain the circumstances, and follow its instructions. Funds appearing in an account do not prove that the check has finally cleared.
Some logistics work is legitimate, but an unsolicited role that uses your home to receive and forward consumer parcels is high risk. Stop if the company cannot be independently verified or if goods, payment sources, and wages are unclear.
No. A VPN cannot authenticate a recruiter, make a fake check valid, prevent identity disclosure, or recover a transfer. Independent employer verification and refusing upfront payments are the relevant controls.
Disclaimer: This article provides general cybersecurity, employment-scam, and consumer information. It is not legal, financial, employment, identity-theft, or professional incident-response advice.
Sources
Sources checked 28 August 2026.
Related articles:
Sign up to experience all premium features at no cost.
*Available only to new users. Each user is limited to one trial.





