Job scam losses hit $501 million in 2024, up from $90 million in 2020. The FTC received over 105,000 reports in that same year – roughly three times the 2020 total. And the FTC’s Labor Task Force, formed by Chairman Andrew Ferguson in 2025, has been ramping up enforcement to deal with the scale of the problem, because the old approach of flagging individual scams wasn’t keeping pace.
The reason losses have climbed isn’t that people are getting less careful. It’s that the scams have gotten significantly better. AI-generated job postings now use polished corporate language and professional formatting that’s hard to distinguish from real listings at a glance. Fake recruiter profiles on LinkedIn look credible because they’re pulling from real company data and real people’s photos. The era of poorly-written scam emails with obvious errors is largely over.
What hasn’t changed is the underlying playbook. Here’s what it looks like and where it still falls apart.
How the scam actually works
Most fake job offers follow one of three paths, depending on what they’re after.
Identity theft. The goal is your personal information – Social Security number, driver’s license image, bank account details, voided check. The scam runs you through what looks like a normal onboarding process, asks for documents that real employers do collect, and disappears with everything once you’ve provided it. The job never existed.
Fake check scam. They send you a real-looking check to deposit – often framed as a signing bonus, equipment fund, or advance on your first paycheck. You deposit it, they ask you to send some of it back or buy gift cards with part of it “for supplies.” The check bounces days later. You’re out whatever you sent, and you may owe the bank for the full deposited amount.
Task scam. You get paid small amounts for completing simple online tasks – rating products, liking posts, reviewing listings. The payouts are real at first, just enough to build trust. Then you’re told to deposit your own money to “unlock” a larger commission tier or access premium tasks. The deposit goes to the scammer, the platform disappears.
The FTC reported that task scams accounted for nearly 40% of job scam reports in the first half of 2024, with cryptocurrency losses to this type alone hitting $41 million in just six months.
The red flags that still give them away
Contact through the wrong channel. The FTC issued a specific alert on this in April 2026: real employers do not recruit through random text messages, WhatsApp messages, or Telegram. They use job boards, company career pages, or LinkedIn InMail from verifiable accounts. An unsolicited text or DM offering you a job – especially a remote one with flexible hours and above-market pay – is the single most reliable first indicator.
Pay that doesn’t match the role. Entry-level or no-experience-required positions offering $5,000-$8,000 a week don’t exist in legitimate employment. Inflated salary is the primary hook because it overrides skepticism. Always check the offered rate against Glassdoor, LinkedIn Salary, or Bureau of Labor Statistics data for that role and location.
Free email address for a corporate recruiter. Legitimate companies issue corporate email addresses to their employees. A recruiter claiming to represent a large company but emailing from @gmail.com, @yahoo.com, or @outlook.com is a red flag. Check that the domain matches the actual company website before engaging further.
The role isn’t posted on the company’s actual website. Go directly to the company’s careers page and search for the specific role. If it’s not there, the posting is fake, outdated, or a ghost job. Don’t rely on the link in the message – go to the company site independently.
Pressure to decide fast. Urgency is a deliberate tactic. “We need your decision by today” or “this position fills quickly” is designed to prevent you from doing the verification that would reveal the scam. Real hiring processes don’t work on same-day timelines for job seekers.
Requests for sensitive information before any real interview. No legitimate employer asks for your SSN, bank account details, or copies of ID documents at the application or first-contact stage. That information is collected after an offer is made and accepted, through official channels. Receiving those requests early is a hard stop.
Any request to pay anything. Real employers do not ask you to pay for training, equipment, background checks, or software subscriptions before starting work. The FTC’s rule on this is absolute: you should never pay to get a job. Not upfront fees, not deposits, not gift cards, not cryptocurrency.
The 2026 addition: AI deepfake recruiters
This is new enough to name specifically. Scammers are now using real-time face-swap filters to impersonate executives at real companies during fake video interviews. Industry estimates put the rise in deepfake hiring fraud attempts at roughly 1,300% from 2023 to 2024. The way to catch it: ask the person on screen to turn their head sideways or make an unusual gesture. Deepfake filters struggle with non-frontal angles and unexpected movements. If the video hesitates or the face distorts in a way that doesn’t match normal video compression, you’re looking at a filter.
The same AI tools that make job scams harder to spot at a distance still break down on direct, specific questions. A fake recruiter who can’t tell you who their manager is, what team you’d be joining, what tools the company uses, or what the actual responsibilities of the role look like in a typical week – those aren’t questions a language model handles well under real-time pressure.
What to do if you’ve already responded
If you replied to a message but haven’t provided documents or money yet, stop engaging and block the contact. No further action needed.
If you provided personal documents – SSN, driver’s license, bank account details – place a fraud alert and credit freeze with all three bureaus (Equifax, Experian, TransUnion) immediately. File a report at IdentityTheft.gov, which generates a personalized recovery plan, and file a complaint at ReportFraud.ftc.gov.
If you sent money – by wire transfer, gift card, or cryptocurrency – contact your bank immediately. Wire transfers and crypto are difficult or impossible to recover, but card charges can sometimes be disputed. Recovery isn’t guaranteed, but reporting quickly is the only chance you have.
If you deposited a check that hasn’t cleared yet, call your bank before touching any of the funds. Explain that you believe the check may be fraudulent. Banks can sometimes place a hold before the funds are accessed, which prevents you from becoming liable for the full amount when it bounces.
The same pattern that runs through affiliate program scams and credit repair scams runs through fake job offers: the scam works by looking almost exactly like the real thing, and by the time the difference is obvious, the damage is done. The defense is always the same – verify through independent channels, never pay, and treat urgency as the red flag it is.
Frequently Asked Questions
Yes. Scammers create fake recruiter profiles on LinkedIn and send InMail from accounts that appear credible. Always verify by going directly to the company’s official website and careers page. If the role doesn’t appear there, treat the approach with suspicion regardless of how professional the LinkedIn profile looks.
No. The FTC issued a specific alert in April 2026 warning that real employers do not recruit through random text messages. Replying – even just to say you’re not interested – confirms your number is active and makes you a target for follow-up scams. Ignore and block.
Call your bank before touching any of the funds. Explain you believe the check may be fraudulent and ask them to place a hold. If the check bounces, you can be held liable for the full amount – acting quickly before the funds are accessed is the only way to limit your exposure.
Ask them to turn their head sideways or make an unexpected gesture. Deepfake filters struggle with non-frontal angles and distort visibly under unexpected movement. Also ask specific questions about the team, the manager’s name, and day-to-day responsibilities – questions that require real knowledge of the company to answer.
Report to the FTC at ReportFraud.ftc.gov, on the platform where you received the contact, and to the company being impersonated if a real company’s name was used. If identity documents were shared, also file at IdentityTheft.gov for a personalized recovery plan.