Fake job recruiter scam: how it works and what to do
ScamChecker.online·Last verified June 2026·Active and growing·5 min read
In a nutshell
Criminals post convincing job listings - or message you directly - impersonating real companies or inventing fake ones.
The goal is your money, your Social Security number, or both.
No legitimate employer ever charges candidates for background checks, equipment, or training.
If you've already shared personal information, credit bureau action is the first step.
Our verdict
Fake job recruiter scams are one of the fastest-growing fraud categories in the US. The FTC reported $501 million in job scam losses in 2024 - up from $90 million in 2020.1No real employer asks candidates to pay anything before starting work. That rule has no exceptions.
Advertisement728×90 · Replace with AdSense unit
Does this sound familiar?
A recruiter reached out about a role that sounds perfect - good pay, remote work, flexible hours. The interview was quick and friendly. An offer arrived within a day. Now they're asking for your Social Security number "for onboarding paperwork," or telling you to pay a background check fee before your start date.
Below are reconstructed examples of how these approaches typically look. The scam arrives via LinkedIn DM, email, WhatsApp, or job board message. The details vary - the structure doesn't. (Illustrations, not real screenshots. Company names and contact details are fictional.)
LI
LinkedIn
New message from Sarah K.
Sarah Kim · Talent Acquisition · Nexorix Inc.
Hi! I came across your profile and think you'd be a great fit for our Remote Data Analyst role - $85k-$110k, fully remote, flexible hours. We move quickly with candidates. Would you be open to a brief call this week?
Remote Data Analyst
Nexorix Inc. • Remote • Full-time
$85,000 - $110,000/yr
The company name is invented or slightly misspells a real firm. The salary is high to attract applicants quickly. The message emphasizes speed.
Sarah Kim <recruiting@nexorix-hr[.]com>
To: you • Today, 9:14 AM
🎉 Job Offer - Remote Data Analyst
Congratulations! After reviewing your profile we'd like to extend an offer for the Remote Data Analyst position.
Start date: June 23
Salary: $92,000
To complete your onboarding, please reply with your full legal name, date of birth, and Social Security Number for our background screening process.
The offer arrives before a real interview has taken place. The email domain looks like a company HR portal but is newly registered. PII is requested immediately.
Onboarding Team <onboard@nexorix-hr[.]com>
To: you • Today, 2:33 PM
Action required: Background screening fee
To process your start date, please complete the mandatory background screening.
Fee: $89 (reimbursed in your first paycheck)
Payment link: nexorix-screening[.]com/pay
This must be completed within 24 hours or your offer will be reassigned.
No legitimate employer charges candidates for background checks. The 24-hour deadline creates pressure to pay before you have time to verify anything.
Two distinct variants run under the same fake-recruiter umbrella. The fee variant extracts money directly - background check fee, equipment deposit, training costs. The identity variant skips the fee and instead collects your SSN, passport, or bank account details under cover of "onboarding paperwork," then uses them for identity fraud.
How it works
The scam runs in four phases. Most victims don't suspect anything until the demand arrives - because the first two phases are designed to feel entirely normal. (Examples below are illustrative reconstructions.)
1
The job posting or direct outreach
The scammer either posts a fake job listing on LinkedIn, Indeed, or ZipRecruiter, or sends a direct message claiming to have found your profile. The company name is invented or slightly misspells a real firm. Pay is set high enough to attract interest quickly. The role description is plausible but vague - "data entry," "customer liaison," "remote coordinator." Some operations impersonate real, verifiable companies; others invent convincing-sounding ones. A related variant - the task-app job scam - uses similar outreach but runs a deposit cycle rather than an upfront fee.
Two months old, three employees - but the listing looks professional and the pay is real.
2
The fast-tracked interview
A brief video call or email exchange follows - few substantive questions, no skills test, no reference check. The "interview" is designed to feel thorough without actually evaluating anything. Some operations now conduct these with AI-generated avatars or scripted video responses. An offer arrives within hours or a day or two - far faster than any legitimate hiring process. The speed is deliberate: it prevents you from having time to verify the company.
The "interview" red flags
✖ Lasted under 15 minutes
✖ No questions about your specific skills
✖ Interviewer turned off camera halfway through
✖ Offer arrived before references were contacted
✖ Communication moved to WhatsApp or Gmail
3
The demand - fee or identity, or both
The "onboarding" step reveals the real purpose. Either you're asked to pay a fee - background check, security clearance, training materials, equipment deposit - with a promise of reimbursement on first paycheck; or you're asked for your SSN, date of birth, ID photos, and bank account details for "direct deposit setup." Some operations collect both. The fee is usually under $200 - low enough that paying feels reasonable. The identity data is used for fraudulent tax returns, credit applications, or sold in bulk.
Two variants of the same demand
Fee variant
"Pay $89 for the background check - reimbursed in your first paycheck." The money is gone. No first paycheck follows.
Identity variant
"Send your SSN and a photo of your ID for onboarding." Your details are used for tax fraud, new credit accounts, or resold.
4
The disappearance - or an escalating drain
After the fee is paid or the PII collected, one of two things happens. In simpler operations, contact stops immediately - the recruiter's number goes dead. In more sophisticated ones, the victim is given a fake start date, then told there's a delay, then asked for another payment (equipment deposit, software license). Each new request is slightly larger. Some operations also use the fake check mechanic - mailing a check and asking you to wire back part of it, then the check bounces weeks later. The pattern in all variants is the same: whatever you hand over is taken and not returned.
Background check fee$89 gone
"Equipment deposit"$250 gone
Contact goes silentno reply
Meanwhile: SSN used for fraudulent tax return filed before you notice.
Remember
No legitimate employer charges candidates for anything before the first paycheck.
A job offer that arrives within hours is a red flag, not a compliment.
Always search the company independently - don't follow links the recruiter sent.
Your SSN is as valuable as cash to a fraudster. Treat it accordingly.
Red flags to catch it early
None of these alone is conclusive. Several together means stop and verify before sharing anything.
Recruiter contacted you without you applying
Unsolicited outreach can be real, but it warrants extra verification - especially when combined with any other flag here.
Pay is unusually high for minimal requirements
"No experience needed, $85k, fully remote" is designed to lower your guard quickly. Check what the role pays on salary sites.
Offer arrived within hours of a brief interview
Real hiring processes take days to weeks and involve multiple people. An offer after one short call with no reference check is a signal.
Asked for upfront payment of any kind
Background check fees, equipment deposits, training materials, software licenses - none of these are ever charged to candidates by legitimate employers.
"This will be reimbursed in your first paycheck" - the first paycheck never comes.
SSN or bank details requested before start date
Employers need your SSN - but only after you've started, through official onboarding paperwork. Requests before your first day, via email or WhatsApp, are a strong warning.
Communication on WhatsApp or personal email
Real companies communicate via company email domains. A recruiter who moves you to WhatsApp or uses a Gmail address has no verifiable company identity.
Company profile is very new or thin
A LinkedIn company page created two months ago with three employees is not a company operating at the scale implied by the job offer.
Already paid a fee or shared personal information?
If you're in this situation right now
Stop contact, protect your identity, report it
What to do depends on what you handed over. Work through both tracks if you paid a fee and shared PII.
1
Stop all contact immediatelyDo not send any more money or information. Further contact gives the operation more opportunity to extract from you or apply additional pressure.
2
If you paid by card, dispute the charge nowCall your bank or card issuer and describe the payment as fraud. Credit card disputes have the best success rate. Debit card disputes are harder but possible within a short window. Bank transfers and crypto are largely irreversible.
3
If you shared your SSN or ID documents, act on identity theft immediatelyPlace a fraud alert or credit freeze with Equifax, Experian, and TransUnion. Go to IdentityTheft.gov to create a recovery plan. Monitor your credit reports and check whether fraudulent tax returns have been filed in your name (IRS.gov/identity-protection).
4
If you shared bank account details, contact your bankAsk to change account numbers and set up transaction alerts. The attacker may attempt direct withdrawals or use the routing number to set up fake payees.
5
Report to the FTC and FBI IC3File at reportfraud.ftc.gov and ic3.gov. These reports are used by investigators to identify and disrupt the operations behind these scams. Include screenshots of all messages and emails.
6
Ignore anyone who offers to recover your moneyPeople who have lost money to job scams are frequently targeted by a follow-up money recovery scam. No legitimate service charges upfront to recover fraud losses.
You can also report to your state attorney general. If the job was posted on LinkedIn or Indeed, use their platform reporting tools - they investigate and remove fraudulent listings.
Job scam losses have grown faster than almost any other fraud category tracked by the FTC. The pattern covers a broad range of variations - from task scams and reshipping operations to the fake-recruiter model described here - and the official figures capture only a fraction of actual cases.
$501M
Reported job scam losses to the FTC in 2024, up from $90 million in 2020 - more than a 5x increase in four years1
3x
Increase in job scam reports to the FTC from 2020 to 2024, with losses growing faster than report volume1
$2,000
Median loss reported to job scams in 2024 - with identity theft losses (fraudulent tax returns, opened credit lines) often running much higher1
<5%
Estimated share of fraud victims who file a report - real losses are far higher than official figures1
Job scams now spread through every channel job seekers use: LinkedIn DMs, Indeed messages, email, WhatsApp cold contact, and targeted text messages. The identity-theft variant is particularly damaging because the financial loss often doesn't appear for months - by the time a fraudulent tax return or new credit account surfaces, the scammer is long gone. Some operations also redirect victims into reshipping scam roles - where the "job" involves receiving and forwarding packages, making the victim unknowingly complicit in handling stolen goods.
Frequently asked questions
Is this job offer real?
Key signs it's fake: the recruiter contacted you unsolicited, the offer arrived within hours of a brief interview, the pay is unusually high for the role described, or you're being asked to pay anything upfront. Legitimate employers never charge candidates for background checks, equipment, or training. If unsure, search the company's official website independently and call the main listed number.
Is it ever legitimate for a recruiter to ask for a background check fee?
No. Legitimate employers pay for background checks themselves and never ask candidates to fund them. Any request for upfront payment - background check, ID verification, training materials, or equipment deposit - is a scam. This is true regardless of how professional the job listing looked.
I already gave my SSN to a fake employer - what should I do?
Act quickly. Place a fraud alert with the major credit bureaus (Equifax, Experian, TransUnion) and consider a full credit freeze. File an identity theft report at IdentityTheft.gov - it creates a recovery plan and helps you dispute fraudulent accounts. Monitor your credit reports and tax filings for unauthorized activity. Report to the FTC at reportfraud.ftc.gov.
I paid a fee and never heard back - can I get my money back?
If you paid by credit card, dispute the charge immediately as fraud. Bank transfers and wire payments are very difficult to reverse once sent. Crypto payments are essentially irreversible. Report to the FTC at reportfraud.ftc.gov and the FBI's IC3 at ic3.gov regardless of payment method.
How do I verify that a recruiter or company is legitimate?
Search the company name independently on Google - don't use links the recruiter sent. Verify the recruiter on LinkedIn by searching their name separately. Call the company's main published phone number and ask to confirm the role and recruiter's name. A real hiring manager will be able to confirm immediately.
We document recurring online scam patterns using primary sources - government agencies, law enforcement, and security researchers. We do not accuse named businesses, and ads on this page do not influence our reporting. Read about how we research or who we are.
Last verified: June 2026·Reviewed against FTC 2024 job scam data