How to Spot a Job Offer Scam Before You Pay to Get Paid

Patrol Blog · 2 November 2026 · Reading time: about 6 minutes

Learning how to spot a job offer scam starts with a rule so plain it fits on a sticky note: a job pays you. You never pay the job. The message in your phone says the opposite in a friendly voice — easy remote work, good money, start today — and down the line it asks for a deposit, a fee, or a check cashed and partly sent back. That request is not a step in the hiring process. It is the whole scam, wearing a recruiter's name tag.

The numbers behind the friendly text

The Federal Trade Commission's data spotlight "Paying to get paid," published in December 2024, tracked what it calls gamified job scams — better known as task scams. Reports went from about 5,000 in all of 2023 to about 20,000 in just the first half of 2024. Reported losses to job scams of every kind topped $220 million in those six months, with about $41 million paid in cryptocurrency — nearly double the crypto figure for all of 2023.

Those are reported losses. Most people never file a report. It's a production line, and the text on your phone went to thousands of other phones too.

The task scam playbook, step by step

The FTC's August 2025 alert on task scams lays out the routine:

1. The approach. An unexpected text, WhatsApp, or Telegram message offers online work — "optimization," "product boosting," rating products, liking videos. No job you applied for.
2. The dashboard. An app or site where simple tasks earn a "commission" with every click. Tasks come in sets. A balance climbs. It feels like a game because it's built like one.
3. The small payout. The scammer may actually pay you a little — the FTC says usually $5 to $20. Real money, sent on purpose. It's the cheapest trust a con can buy.
4. The turn. To unlock the next set of tasks, or withdraw your "earnings," you must deposit your own money first — usually in crypto. The deposit changes size, the excuses change shape, and the earnings stay on a screen the scammer controls.
5. The exit. You stop paying, or you run out. The chat goes quiet or turns hostile. The balance was never money.

The FTC's April 2026 alert added a newer opening move: instead of a link, the text asks you to reply "YES" or "INTERESTED." Don't. The reply is the hook — it marks your number as live, and the conversation moves to an encrypted chat where the playbook starts.

How to spot a job offer scam in the first message

Run any offer through these checks before you answer:

• You never applied. Real employers answer applications. They don't cold-text strangers about unnamed remote positions.
• The pay is specific, the job is fog. A daily rate quoted to the dollar next to duties described in five vague words. Real postings do it the other way around.
• You're hired in minutes. No interview, no references, no questions about whether you can do the work — because there is no work.
• The interview lives in a chat app. Text-only, on WhatsApp or Telegram, with a "mentor" who keeps the conversation moving fast.
• Money is asked for, in any costume. A deposit to unlock tasks. A fee for training, equipment, or a background check. The FTC's line is blunt: never pay anyone to get paid, or to get a job.
• Pay for likes and ratings. Anyone offering money to give positive ratings or like things online is running a task scam. No honest company pays for that.

One check failing is enough to walk away. Two or three failing together is a fake job offer scam introducing itself.

The other two costumes: the check and the paperwork

Not every fake offer runs the task play. The FTC's job scams guide names two older costumes still in heavy rotation:

The fake check. Your new "employer" sends a check — for equipment, or by "overpayment" — and asks you to deposit it and send part of the money on, or buy gift cards with it. The check bounces days later. The bank takes the full amount back out of your account, and the money you sent is gone.

The paperwork grab. Before any interview, you're asked for your Social Security number, driver's license, or bank details to complete "onboarding." That information is the payload: it gets used for identity theft long after the job evaporates.

Reshipping belongs on the same shelf: a "job" receiving packages at home, repacking them, and sending them on is not employment — the goods were bought with stolen cards, and the FTC is clear that reshipping is never a real job.

Check the offer on ground you walked to yourself

• Go to the company's real site yourself — typed in, not tapped from the message — and look for the opening on its careers page. No listing, no job.
• Search the company and recruiter names with "scam," "review," or "complaint" added, exactly as the FTC suggests. Other targets often compare notes in public.
• Check the email domain. A recruiter for a real company writes from that company's domain, not a free mailbox.
• Describe the offer out loud to a person you trust. Scam pitches wilt in conversation; they are built for a quiet screen and a quick thumb.

The fee that frees the prize in a fake giveaway scam and the deposit that unlocks the earnings here are the same move: money asked up front, story wrapped around it.

If you already paid, or sent your ID

• Stop depositing. Not one more payment to "release" the balance. There is no balance.
• Contact the company you paid through — bank, card issuer, payment app, or crypto exchange — right away, report the fraud, and ask whether the transfer can be reversed.
• If you shared ID details, go to IdentityTheft.gov for a recovery plan and watch your credit.
• Save everything: the messages, the app or site address, the names and numbers used, and any wallet addresses or transaction IDs.

Report it, then delete it

File the offer with the FTC at ReportFraud.ftc.gov, and forward the original text to 7726 — SPAM — so your carrier can block the same pitch for the next phone. Learn who runs this patrol on the About page, and if a fake recruiter has taken money or ID details from somebody in your house, report a tether with the number it came from and the story it told. Patrolling the online borders, one tether at a time.