Remote job scams

A conventional hiring process contains incidental verification. You visit an office, meet several people, see a building with the company’s name on it. None of that proves much individually, and together it made impersonation expensive.

Remote hiring is legitimately conducted entirely through messages and video calls, so a fraudulent process looks exactly like a real one. That is not a reason to avoid remote work; it is a reason to replace the checks you used to get for free with deliberate ones.

The economics changed too. Impersonating a company used to require a physical presence somewhere; now it requires a lookalike domain and a video call, which means the same operation can run against hundreds of candidates at once.

Several patterns recur often enough to recognise on sight. They differ in the story and converge on the same two requests: money, or documents.

The equipment scam is the most common and the most convincing, because buying your own kit is a normal remote-work arrangement. The difference is the direction of money and the insistence on a particular supplier.

The task-based variant is the one that catches people who are being careful. It begins as genuinely paid small work, pays promptly a few times to establish trust, then introduces a deposit required to unlock higher-value tasks — and the early payments are what make the deposit feel safe.

• Equipment purchase — you are sent a cheque to buy a laptop from a named supplier; the payment reverses and your transfer is gone
• Training or certification fees required before a start date
• Task-based "trials" that quietly become unpaid work, then escalate to deposits
• Onboarding packs collecting identity documents before any verified offer
• Payment-processing roles, which are money laundering with a job title

Roles described as payment processing, financial operations or transfer coordination deserve a separate warning, because the consequence is not only losing money. Receiving funds and forwarding them is money laundering.

Believing it was a legitimate job is not a reliable defence in most jurisdictions. People who took these roles in good faith have had accounts frozen, been refused banking services for years, and in some cases faced prosecution.

The recognisable shape is simple: any role where your own bank account is part of the workflow. No legitimate employer needs a new employee’s personal account as a channel for company money, whatever the explanation offered.

Individually each has an innocent explanation; together they are conclusive. The strongest single one is an offer arriving without meaningful assessment — organisations do not commit to employing people they have not evaluated, because hiring wrongly is expensive.

The second strongest is manufactured urgency. Real employers have deadlines; they do not require a decision tonight for a role advertised this morning. Urgency exists to prevent you verifying, so treat urgency itself as the signal, independent of what is being urged.

Interviews conducted entirely by text message are worth adding to the list. A hiring process that never involves a voice or a face, on any channel, is avoiding something — and it is now common enough that it has become one of the clearer tells.

This is the rule that makes all the others unnecessary. A fraudulent operation controls its own domains, phone numbers and references, so checking anything it gave you confirms nothing at all.

Search for the company independently, open the site from the search result rather than the email, call the number published there, and ask for the person by name. A real employer handles this every week. A fake one cannot survive it, which is why it will discourage you from trying.

Check the domain character by character rather than at a glance. A swapped letter, an added hyphen or a different suffix is designed to pass exactly the quick look most people give it, and reading it slowly once is the whole defence.

• Find the company yourself — never follow links you were sent
• Compare the sender domain against the official one, character by character
• Call the publicly listed switchboard and ask for your contact by name
• Check the legal entity on the company register
• Look up the recruiter independently and check account age

Move fast and do not let embarrassment delay you — speed is the only thing that makes recovery possible. If you sent money, contact your bank immediately and use the words "authorised push payment fraud", which triggers a specific process.

If you shared identity documents, treat it as an identity-theft risk rather than a near miss: alert your bank, monitor your credit file, and consider a fraud marker. Then report it — to your national cybercrime authority, the platform where you were contacted, and the real company being impersonated, which usually wants to warn others.

Be wary of what follows. People who have been defrauded are frequently approached again by "recovery" services promising to retrieve the money for an upfront fee, which is the same fraud a second time and often run by the same people.