What is changing now
The current pattern.
A 2026 FTC alert describes generic recruiter texts that ask recipients to reply “YES” or “INTERESTED” before providing meaningful job details. Other current variants use messaging apps, simple rating tasks and dashboards that show invented earnings before demanding a deposit.
How it works
Confidence first, then pressure.
The contact promises flexible remote work, unusually high daily pay or simple online tasks. The recruiter may borrow the name and branding of a real company while using a personal email address, phone number or messaging account.
After a quick text-only interview, the scam moves toward money or identity. A fake cheque may supposedly pay for equipment, followed by instructions to send part of the money elsewhere. A task platform may show early rewards, then require a deposit, cryptocurrency purchase or fee to continue or withdraw.
Some fake employers collect identity documents and bank information through convincing onboarding forms. Real employment paperwork exists, but it should follow a vacancy and hiring process that you have independently verified with the employer.
Worked example
A realistic pattern, separated into evidence.
This composite example is educational. It does not describe a real person or reproduce a live malicious message.
Simple tasks turn into a negative balance
- 01The opening
An unexpected message offers flexible remote work rating products. A recruiter moves the conversation to a messaging app and provides a dashboard that credits a small welcome bonus.
- 02The escalation
Early tasks appear to produce earnings. A later ‘combination task’ pushes the balance below zero, and the worker is told to deposit cryptocurrency to finish the batch and unlock a larger commission.
- 03The decision point
The dashboard is controlled by the recruiter and is not proof of employment or earnings. Paying to remove a negative balance reverses the normal employer–worker relationship.
Warning signs
Reasons to stop and verify.
- A generic unexpected text with no specific role, location or relevant experience
- An interview conducted only by text on WhatsApp, Telegram or another messaging app
- Payment for liking, rating, reviewing or ‘optimising’ products
- A cheque for equipment followed by instructions to pay a supplier or return money
- A deposit, training fee, crypto payment or negative task balance
- Requests for identity or banking information before the employer is independently confirmed
Independent verification
Test the request without using its evidence.
These checks deliberately move the decision away from the person, link, number or account that introduced the request.
- 01
Locate the vacancy independently
Find the organisation’s real careers page and search for the exact role. A company name in a message is not proof that the recruiter represents it.
- 02
Verify the recruiter’s route
Match the email domain and contact process to the organisation’s published recruitment information. Personal email and messaging-only interviews require extra caution.
- 03
Map the money direction
List every requested payment, deposit, cheque, purchase or transfer. If applicant money must flow toward the employer or a nominated supplier, stop.
- 04
Delay sensitive onboarding
Provide identity, tax and bank details only after the employer, vacancy, contract and secure onboarding system have all been verified separately.
Safer response
Move the decision outside the contact.
- 01
Do not engage with the text
Unexpected recruiter messages often begin by testing whether a number is active. Do not reply merely to ask for details.
- 02
Find the vacancy yourself
Go to the company’s official careers page and search for the role. Contact its published recruitment team if needed.
- 03
Never pay to get paid
A legitimate employer does not require a deposit to unlock tasks, earnings, training or a withdrawal.
- 04
Delay identity paperwork
Provide tax, identity and bank information only after verifying the employer, role, contract and secure onboarding system.
If you already acted
Protect access and contact the real provider.
- Tell your bank that a deposited cheque or transfer may be connected to a job scam.
- Stop adding money to a task platform, even if its dashboard says a larger payment will unlock everything.
- Change exposed passwords and monitor accounts if identity or banking information was submitted.
- Contact the real company whose name was used so it can warn applicants.
- Expect recovery offers or new job messages after disengaging; do not pay anyone who promises to retrieve funds.
Sources
Official guidance used for this article.
Stop & Verify summarises these sources for general education. Reporting routes and legal protections vary by location.