• Overview
    • Scam Map
    • Kill Chain
Recents

    Conversations will appear here

Technique

Employment Scam

Also known as: Job Scam, Task Scam, Work-From-Home Scam, Fake Job Offer, Employment Fraud, Recruitment Scam, Remote Job Scam, Hiring Scam

DELIVERY

Fake job offers used to harvest personal information, recruit money mules, or extract fees for non-existent positions.

Common attack flows

How it fits in a scam

This technique shows up duringDELIVERY

Before

This is often where the scam begins.

After

  • Wire Transfer RedirectMONETIZATION
  • Identity TheftEXPLOITATION
  • Credential TheftCOMPROMISE

Defense

How to defend against this

How to spot it

  • Unsolicited job offers via text email or social media from unknown contacts
  • Requests for upfront payment for equipment training or processing fees
  • Too-good-to-be-true compensation for minimal work hours
  • Vague job descriptions using terms like optimization or quality control manager
  • Rapid hiring with no interview references or formal application
  • Requests for SSN bank details or ID before formal hire
  • Employer uses personal email domain instead of corporate
  • Job listing cannot be verified on official company website
  • Pressure to respond or accept immediately
  • Job involves receiving or forwarding packages or money
  • Cryptocurrency payment required to unlock earnings or tasks

Tools you can use

  • Scam ScannerCost low · Effect medium

Steps you can take

  • Official Channel VerificationCost low · Effect high
  • Employer VerificationCost low · Effect high
  • Never Pay for EmploymentCost low · Effect high

Further reading

  • FTC Consumer Advice

    Warning signs and how job scammers operate

  • FBI IC3

    Task scam alert with cryptocurrency schemes

  • Malwarebytes

    Remote online evaluator text scam

  • Malwarebytes

    LinkedIn bot and spear phishing job scam tactics

  • Malwarebytes

    FBI warning on fake job postings

Related techniques

Same stage

  • Phishing Email
  • Smishing
  • Vishing
  • Deepfake Voice Call
  • SEO Poisoning
  • +16 more

Similar defense

  • Remote Access Tool
  • Social Media Reconnaissance
  • Authority Impersonation
  • Authorized Push Payment Fraud
  • Crypto Wallet Drain
  • +7 more