Employment and job offer scams
Job scams take money and identity from people who are looking for work, and sometimes recruit them into moving stolen money without telling them.
What it is
An employment scam is a job that does not exist, used to extract money, personal data, or unpaid labour.
There are three shapes. The first takes fees: for equipment, training, certification or a background check, with the money returned in the first paycheck that never comes. The second takes identity: the "onboarding" collects a Social Security number, date of birth, bank details and a copy of your ID, which is everything needed to open credit in your name. The third recruits you into crime without saying so, by having you receive payments into your account and forward them on, or receive parcels and reship them. That is money laundering and package reshipping, and the person recruited carries real legal risk.
The targets are people in a vulnerable position by definition. Recent graduates, people recently laid off, carers needing flexible hours, and people new to a country.
How it starts
A message rather than an application, usually. A recruiter on LinkedIn, a text about a role you did not apply for, a WhatsApp message offering task-based work paying daily.
Or a real listing on a real job board, since fraudulent posts routinely appear on legitimate platforms, often cloning a genuine company's branding.
The interview, if there is one, happens over text or on a messaging app rather than by video. Telegram, WhatsApp and Signal are common. A "hiring manager" conducts a chat interview and offers the role quickly, sometimes within an hour.
The offer is generous relative to the work, remote, flexible, and requires little verification of your experience. Then onboarding starts, and onboarding is where the extraction happens.
Why it works
Need suppresses scrutiny. Someone three months into a job search, or behind on rent, is being asked to disbelieve the thing they most want to be true.
Onboarding is a normal moment to hand over everything. A real employer does ask for a Social Security number and bank details. The request is not itself suspicious, which is precisely why this shape works.
The fee is framed as reimbursable. Paying for your own equipment feels like a formality when the first paycheck is a week away.
Money mule recruitment does not look like crime. "Payment processing agent" or "financial operations assistant" sounds administrative. The recruit often does not understand what happened until an account is frozen or the police make contact.
Speed is disguised as opportunity. An offer within a day feels like being valued. It is the absence of any process that would expose the fiction.
How to spot it
You are asked to pay for anything. Equipment, training, certification, a background check. Legitimate employers pay for these
The interview was by text or chat only, never live video
Communication happens on Telegram, WhatsApp or Signal rather than a company email domain
The email domain is a free provider, or close to the real company's but not identical
An offer arrived with little or no assessment of your experience
You are asked for a Social Security number, bank details or an ID scan before a written offer and a verifiable employer
The role involves receiving money into your account and forwarding it, or receiving and reshipping parcels
Pay is described as daily, per task, or unusually high for the work
The company exists, but the recruiter's details do not match anything on its own website
What to do
Verify the employer independently. Find the company's real website, call its main number, and ask whether the recruiter and the role exist. Check the recruiter's profile history rather than their claims.
Never pay to be employed. There is no legitimate version of this.
Hold identity documents until there is a signed offer from a verified employer, with a verifiable address and a working phone number.
If you have moved money for an "employer". Stop immediately and contact your bank. Tell them you may have been used to move criminal funds. Reporting it yourself is materially better than being found, and being unaware is a defence that weakens the longer it continues. Report to the FBI's IC3 at ic3.gov.
If you gave a Social Security number or ID. Place a fraud alert or a credit freeze with Equifax, Experian and TransUnion, and check your credit report. Report identity theft at identitytheft.gov, which produces a recovery plan.
Report the listing to the job board, which removes it for everyone who would have seen it next.
---
Have this emailed to you
Send yourself this page so you can forward it, or read it later when you are not standing in a shop.
Email it to myselfPaste a text, email or direct message
A text, an email or a chat message. Take out names and account numbers first.
Add a screenshot
Check it
No account needed.
What happens to your message
Checking the message now. Stay on this page.
Flggd could not check this message just now. Try again in a moment, or use the Flggd app.
Try again
Flggd could not read this image, so it has not been checked. This is not a verdict. Try a clearer screenshot, or paste the text instead.
Paste a message or add a screenshot first.
Text Submission
Image Submission
Flggd Verdict
Scam
Red flag
High confidence of a scam. The content, the sender, the intent and where its requests lead all point the same way. Do not reply, click, call or pay.
Likely to be a scam
Yellow flag
It asks you to act: a link, a number, a reply or a payment. Where that request leads is where the harm starts.
Looks normal
Green flag
High confidence this is normal. The content reads as expected, the sender has a safe history, and anything it asks leads somewhere legitimate. Accounts can be taken over, so if a request seems out of character, check again.
Likely to be a scam
Grey flag
Nothing is asked of you yet. The content, the sender or the intent do not add up. Scams like this start friendly and ask later.
This result could not be shown. Check the message again. If it happens twice, use the Flggd app instead.
Score
Scam type
Confidence
Why Flggd says this
What this message wants you to do
Has anything happened yet?
You do not have to answer. Nothing you tap here is sent or recorded, and the verdict above stands either way.
Change answer
Nothing has happened yet
Good. Checking first is the safest thing to do. Do not tap any link, reply, or call any number in the message. Block the sender and delete the message. If it claims to be from an organisation you know, contact them using details you already trust.
Change answer
You tapped a link
Opening a link does not usually take money or details on its own. The harm comes from what you do on the page it opens. If you entered nothing and installed nothing, close the page and do not go back to it. If it asked you to sign in, enter a code, or install something, and you did, choose Gave details instead.
Change answer
You gave details
Work through this in order. First, if you gave bank or card details, call your bank now on the number on your card. Next, change the password for any account you entered, and for any other account that uses the same password. If you shared a one-time code, tell the organisation it belongs to straight away. Then turn on two-step verification where you can, and watch your statements for anything you do not recognise.
Change answer
You sent money
Call your bank now, on the number on your card or in your banking app. Say: "I have been scammed and I need to stop a payment." The sooner they hear from you, the more they may be able to stop or recover. In the UK you can call 159 to reach your bank. Do not pay anyone who offers to get the money back. That is another scam.
Report it. US: ReportFraud.ftc.gov, and ic3.gov for online crime. UK: reportfraud.police.uk or 0300 123 2040; in Scotland, Police Scotland on 101. Australia: scamwatch.gov.au. Have ready the message, the sender's number or address, and any payment details.
What to do next
Do not reply, click any link, call any number in the message or send money. If it claims to be from an organisation you know, contact them using details you already trust.
Do not reply, click any link, call any number in the message or send money. If it claims to be from an organisation you know, contact them using details you already trust.
No action needed. If the sender later asks for money, codes or personal details, check that message too.
Do not reply at all, not even to say wrong number. A reply tells them the number is live. Block the sender and delete the message. If a request follows, check it again.
Text read from your image
Your image
The closest scam in the Flggd library. Similar, not necessarily the same message.
How this scam works
The closest match is the scam described on this page.
Share this result
Email it to myself
Copied. Paste it anywhere to share it.
Could not copy. Select the text and copy it, or use Email it to myself.
Checked with Flggd at flggd.com
My Flggd verdict
Check the next one on your phone
The Flggd app checks texts, emails and screenshots wherever you are, and teaches you the warning signs as you go. Free on iPhone and Android.
Get the app
What Flggd does about this
Worried about someone else rather than yourself?
Helping someone else
