10 Job Scam Red Flags Every Applicant Should Know
Fake recruiters now text first, interview the same day and ask for money — here is how to check a message, a company and an offer before you reply.
By Priya Shah · Sep 29, 2026 · 13 min read
A job scam is a fake hiring process built to take your money or your personal data, and almost all of them leak the same small set of clues: money moving the wrong way, a recruiter using a personal email or phone number, an unsolicited text, and pressure to move fast. Reports to the FTC about job scams tripled from 2020 to 2024, with reported losses rising from $90 million to $501 million over that period (Federal Trade Commission, June 2025), so the screening habit is worth building deliberately.
This guide treats scam-spotting as a skill you practise during a job search: what you check each day, the steps to set it up, the tools and scripts that make it fast, and what it costs you when you get it wrong.
What a scam-aware job applicant does (list)
Screening is a set of small, repeated checks you run alongside applying — not a separate project.
- Check who actually sent the message. Legitimate recruiters generally email from a company account (@companyname.com) rather than a personal @gmail.com or @yahoo.com address (FTC, December 2023).
- Search the employer's name together with words like "review", "scam" or "complaint" before replying, and steer clear if you cannot find the company online at all (FTC, June 2025).
- Match the advert against the employer's own careers page. Scammers take outdated ads from real employers, change them, and repost them on sites like Indeed or LinkedIn (FTC, May 2023).
- Triage inbound texts and WhatsApp messages about "online work" that carry few specifics (FTC, December 2024).
- Hold back your Social Security number and bank account details until you have a verified written offer from a company you have confirmed exists. Hijacked postings often advertise work-from-home personal assistant or customer service roles, then ask for exactly those numbers (FTC, May 2023).
- Log every application: date, employer, the URL you applied through, and who contacted you afterwards. Anything that arrives with no matching entry gets extra scrutiny.
- Report and block what fails, so the same number or address does not get a second try.
The ten red flags
- Anyone asks you to pay to get the job, get trained, get equipment or get paid. Anyone who asks for payment to get a job is a scammer (FTC, June 2025), and there is never a charge to apply for US government or US Postal Service positions (FTC, October 2003).
- The recruiter contacts you from a personal email account or personal phone number while claiming to represent a big-name employer (FTC, July 2025).
- First contact is an unsolicited text or WhatsApp message about online work with almost no detail (FTC, December 2024).
- The message asks you to reply "YES" or "INTERESTED" instead of pointing you to a real application (FTC, April 2026).
- You go from submitting an application to a text-based "interview" the same day (FindLaw, November 2025).
- The pay quoted is way over the industry norm for the work (FindLaw, November 2025).
- The "work" is completing tasks such as "app optimization" or "product boosting", with small payments early and a request to put in your own money later (FTC, December 2024).
- A check arrives and you are told to send part of the money on or buy gift cards with it — no honest employer does this (FTC, June 2025).
- Your Social Security number and bank account number are requested early, before any verified offer (FTC, May 2023).
- The company has no findable trace online, or the site looks newly built for the purpose; scammers set up fake websites and hunt on social media, including targeting people hit by layoffs (FTC, January 2023).
Where you do it and when. At a laptop or phone, inside the same job boards you apply through, plus your email and messages app. A workable schedule is one 30 to 60 minute application block a day, with five to ten minutes of verification per employer before you send anything, and a five-minute sweep of overnight texts and emails each morning.
The honest downside: you will occasionally slow down or walk away from a real employer with sloppy hiring admin. That is the trade. Money sent to a scammer is rarely recovered, so a few missed opportunities cost less than one successful scam.
How to become one (steps)
- Start the search from trusted sources. Open your state's job bank through Career OneStop, and fedshirevets.gov if you are a veteran looking at federal roles (FTC, June 2025). Time: 20 to 30 minutes to bookmark and set up saved searches. Cost: none beyond your time. This changes the mix of what reaches you before any screening happens.
- Write a one-page verification checklist in a document tool you already use, such as Google Docs, listing the ten red flags above plus your own rule for when personal data gets released. Time: 30 to 45 minutes. Cost: none. Keep it open in a tab while you apply.
- Practise the company search on three employers you already trust. Search each name plus "review", "scam" and "complaint" (FTC, June 2025) so you know what normal results look like before you meet an abnormal one. Time: 15 minutes total, then 5 to 10 minutes per new employer.
- Verify one recruiter end to end. Take a real message, compare the sending domain with the company website, find the same role on the employer's careers page, then call the switchboard number listed on that site — never the number in the message — and ask whether the role and the recruiter exist (FTC, December 2023 and May 2023). Time: 20 to 40 minutes the first time, under 10 minutes afterwards.
- Separate your money from your job search. Turn on transaction alerts in your banking app, and check each credit bureau's own site for how to place a freeze and whether any fee applies in your country. Time: 30 to 60 minutes. Cost: varies by bureau and country — check before you start. This is what limits the damage if a bank account number or Social Security number leaks.
- Set up a clean application trail in a spreadsheet — Google Sheets or Excel — with columns for date, employer, source URL, contact name, contact address and outcome. Time: 20 minutes to build, 1 minute per application. Any contact with no matching row is treated as cold outreach until proven otherwise.
- Rehearse two refusal scripts out loud so pressure does not catch you flat. Scammers have invited people to do things like 45-minute interviews specifically to make them lower their guard (FTC, December 2023), so the script matters more than the instinct.
Script — when money is requested
"I don't pay anything to be hired, including for [equipment], [training] or [background check]. If the role covers that, send it in writing on company letterhead from your [@companyname.com] address and I'll review it. Otherwise I'm going to stop here."
Script — when data is requested early
"I release my Social Security number and bank details only after a written offer, and only through your official onboarding system. Can you send the offer to [email] from your company account and tell me the name of the system you use?"
- Report what you catch. Send the details to the FTC, to the job board the posting appeared on, and to your bank if any account number was shared. Time: 15 to 30 minutes per report. Cost: none. Do this even if you lost nothing — the posting is usually still live for the next person.
Skills you'll need (list)
Hard skills
- Email origin checks. Use "Show original" in Gmail or "View message source" in Outlook to see the real sending domain, not the display name. You are looking for company accounts rather than @gmail.com or @yahoo.com addresses (FTC, December 2023).
- Search-engine verification. Company name plus "review", "scam" or "complaint", plus a quoted search of distinctive lines from the job advert — copied text is how hijacked postings show themselves (FTC, May 2023).
- Reverse image lookup. Run recruiter profile photos and company site images through Google Lens or a similar tool to spot stock or stolen images on fake websites (FTC, January 2023).
- Domain age checks. A public WHOIS lookup tells you when a site was registered. A company with a decade of trading history and a three-week-old domain is a mismatch worth explaining.
- Job board hygiene. On LinkedIn, Indeed and ZipRecruiter, tighten profile privacy, and where possible apply through the employer's own careers page rather than the board listing (FTC, May 2023; FindLaw, November 2025).
- Tracking in a spreadsheet. Google Sheets or Excel, with filters, so you can answer "did I apply here?" in seconds.
Soft skills
- Deliberate slowness. Show it by writing your own rule — no money, no Social Security number, no bank details before a verified written offer — and keeping it visible while you apply.
- Saying no under social pressure. Show it by using the refusal scripts above word for word instead of improvising after a long, friendly call.
- Documentation habit. Show it by keeping screenshots, sending addresses and phone numbers, so a report to the FTC or the job board takes minutes rather than an evening of reconstruction.
- Direct questioning. Show it by asking, early and plainly, for the recruiter's company email address, the hiring manager's name and the job's URL on the company careers page — and by noticing what happens when you do.
Pay and outlook (prose)
There is no salary for spotting scams. The payoff is money you do not lose and data you do not hand over, and the scale of that is not small: reported losses from job scams tripled between 2020 and 2023 and exceeded $220 million in just the first six months of 2024 (FTC, December 2024), rising from $90 million in 2020 to $501 million in 2024 (FTC, June 2025).
What drives the pay in the job you are actually chasing is the occupation itself, your experience, the industry, your location and whether the work is shift-based, contract or salaried. A recruiter's number is a claim, not a rate. Pay offered "way over the industry norm" is itself a warning sign (FindLaw, November 2025), which is only useful if you know the norm — so check before you interview, not after. In the United States, the Bureau of Labor Statistics Occupational Outlook Handbook is the standard free reference for typical pay and job outlook by occupation, and your state job bank through Career OneStop shows what local employers are actually advertising (FTC, June 2025). Elsewhere, use your national statistics agency or public employment service; figures vary a lot by country and region.
On outlook for the threat itself, the pattern in the FTC's data is that contact is shifting to text and messaging apps and to job boards including LinkedIn and ZipRecruiter (FindLaw, November 2025), and that task scams — the "app optimization" and "product boosting" variety — were estimated to account for nearly 40 percent of 2024 job scam reports (FTC, December 2024). Layoffs feed it, because scammers look for targets on social media and have exploited redundancies including in the tech sector (FTC, January 2023).
The honest downside is worth stating clearly. Screening costs time in a search that is already tiring, and a fake check scam can leave you out of pocket after you have already sent money on — which is why no honest employer sends a check and asks you to forward part of it or buy gift cards (FTC, June 2025). If it happens, contact your bank immediately and ask what it can reverse; do not assume the cleared balance is yours. Be wary too of anyone who contacts you afterwards promising to recover the money.
Career path (timeline)
Two timelines run in parallel: how fast your own screening gets good, and where the skill leads if you want to be paid for it.
Your own search
- Day 1 to week 1: set up trusted sources, the checklist, the tracking sheet and bank alerts. Screening adds five to ten minutes per employer.
- Weeks 2 to 8: the checks become automatic. Most applicants land a first role somewhere in the weeks-to-months range, depending on field, location and how many verified sources they are applying through.
- Ongoing: repeat the company search each time a new recruiter appears, including for internal moves and contract work.
If you want the paid version
| Stage | Typical titles | Typical years |
|---|---|---|
| Entry | Trust and safety associate, fraud operations associate, customer support agent on a fraud or disputes queue, recruiting coordinator | 0 to 2 years |
| Mid | Fraud analyst, trust and safety analyst, risk operations specialist, talent acquisition specialist handling vendor and candidate verification | 2 to 5 years |
| Senior | Fraud investigations lead, trust and safety manager, risk operations manager, head of talent operations | 5 to 10+ years |
Entry roles usually want careful written English, comfort with case queues and evidence of judgement rather than a specific qualification. Mid-level roles add pattern analysis and spreadsheet or SQL work. Senior roles add policy writing, vendor management and working with law enforcement or regulators. Fraud-examination credentials exist and can help at the mid-to-senior step — check the issuing body's own site for current requirements, eligibility and fees, since both vary by country.
Frequently asked questions
Do I need a degree to spot job scams?
No. Every check in this guide is free, public and takes minutes: comparing the sender's domain with the company website, searching the company name with "review", "scam" or "complaint", and refusing to pay or hand over your Social Security number early. A degree matters for the paid fraud and trust-and-safety roles listed in the career path section, and even there many employers hire on experience with case work rather than a specific subject.
Are remote job offers more likely to be scams?
Remote work is legitimate, but it is the setting scammers prefer because it explains away the lack of an office, an in-person interview or a local phone number. Hijacked postings often advertise work-from-home roles such as personal assistant or customer service representative and then ask for a Social Security number and bank account number (FTC, May 2023), and scammy recruiters claiming to represent well-known employers often pitch a remote job from a personal phone number or email account (FTC, July 2025). Treat remote as normal, and verify the employer harder.
How long does it take to get good at this?
An afternoon to set up and a couple of weeks of applying to make it automatic. Budget 30 to 45 minutes for the checklist, 20 to 60 minutes for bank alerts and credit freeze research, and 20 to 40 minutes the first time you verify a recruiter end to end. After that it is five to ten minutes per employer.
I already replied, or sent money. What should I do?
Act on the money first: contact your bank or the payment provider straight away and ask what can be stopped or reversed, especially if a check was involved (FTC, June 2025). Then report the details to the FTC and to the job board or platform where the posting appeared, and change any passwords you reused. If you shared a Social Security number or bank account number, check your bank's and each credit bureau's guidance on freezes and monitoring. This is general information, not legal advice — if money or identity documents are involved, consider speaking to a qualified adviser.
Can I trust postings on big job boards?
Partly. Scammers take outdated ads from real employers, change them and post them on employment sites and platforms like Indeed or LinkedIn so they look legitimate (FTC, May 2023), and FTC data shows job offers arriving increasingly by text and through boards including LinkedIn and ZipRecruiter (FindLaw, November 2025). Use the boards to find roles, then apply through the employer's own careers page where you can, and verify the recruiter before you send anything personal.
Sources
- Federal Trade Commission — Job Scams | Consumer Advice
- Federal Trade Commission — Job-seeking servicemembers: Avoid scams while you search (2025-06)
- Federal Trade Commission — New FTC Data Show Skyrocketing Consumer Reports About Game-Like Online Job Scams (2024-12)
- Federal Trade Commission — That job offer text is probably a scam (2026-04)
- Federal Trade Commission — How to spot the latest job scams (2023-12)
- Federal Trade Commission — How to avoid work-from-home job scams (2025-06)
- Federal Trade Commission — Scammers are hijacking job ads. Here's how to spot the fakes (2023-05)
- Federal Trade Commission — FTC Launches Nationwide Ad Campaign to Protect Consumers from Job Scams (2003-10)
- Federal Trade Commission — Job scammers are looking to hire you (2025-07)
- Federal Trade Commission — Looking for a job? Scammers might be looking for you (2023-01)
- FindLaw — FTC Warns Job Seekers About Scammers on the Prowl (2025-11-18)