The Job Offer That Steals Your Identity

INTERPOL warned in March 2026 that financial fraud is increasingly global, industrialized, and enhanced by AI. Recruitment scams fit that pattern: the message can look local while the people, payment route, and stolen identity cross several borders.^[6]

The message arrives at exactly the right moment.

A recruiter saw your profile. The role is remote. The salary is better than expected. The interview can happen today, over chat, and the hiring manager is impressed enough to move immediately.

That speed feels like relief when you have spent months waiting for employers to answer. It is also the mechanism of the scam.

The Federal Trade Commission recorded more than 105,000 job-scam reports and over $513 million in reported losses in 2024—nearly three times as many reports as in 2020.^[1] The FBI's 2025 Internet Crime Report separately recorded almost $13 million in losses from AI-involved employment scams.^[2]

Fake recruiting is no longer a badly spelled email from an obviously fake company. It can include a copied careers page, a real employee's name, a polished offer letter, a video avatar, and an interview script generated for your exact résumé.

The Scam Has Four Common Endings

Identity theft. The "onboarding" form asks for your Social Security number, driver's license, bank account, or tax documents before you have verified the company.

The equipment check. The employer sends a check and asks you to buy a laptop from an approved vendor. The bank may show the funds before the fraudulent check is finally reversed. You sent real money; the deposit was never real.

Paying to get paid. A task platform shows fake commissions, then requires crypto deposits to unlock the next batch or withdraw earnings. FTC data found task-scam losses exceeded $220 million in the first half of 2024 alone.^[3]

Money or package mule work. The "job" asks you to receive and resend packages, route payments, or move money through your account. You are not doing operations. You are becoming a layer between a criminal and a victim.

Verify Through a Second Door

Every scam controls the channel it used to reach you. Verification only works if you leave that channel.

If a recruiter emails you:

1. Find the company's website independently.
2. Confirm the exact role exists on its careers page.
3. Check the email domain character by character.
4. Find the recruiter through the company's public directory or a long-established professional profile.
5. Contact the company through a phone number or address you found yourself—not the one in the message.

Do not treat a real person's LinkedIn profile as proof. Impersonating a real employee is more convincing than inventing one.

The FBI lists non-company email domains, chat-only interviews, equipment purchases, upfront screening fees, credit-card requests, and listings missing from the employer's own site among the warning signs.^[4]

Information Has a Hiring Sequence

Real employers eventually need sensitive information. Timing is what separates payroll setup from identity harvesting.

Before an actual interview, a recruiter generally needs your name, contact information, work history, and perhaps work-authorization status. They do not need bank details for "direct deposit." They do not need a photo of your driver's license to schedule a call. They do not need your full Social Security number to tell you who the hiring manager is.

The FTC specifically warns about recruiters who rush applicants into financial paperwork before answering basic questions about the role.^[5]

If you are unsure, pause. Urgency is not evidence that the opportunity is rare. It is evidence that somebody does not want you checking.

If You Already Sent Something

Stop contact and preserve the messages, offer letter, payment instructions, phone numbers, domains, and transaction records.

Then act based on what was exposed:

• Contact your bank immediately for any payment or account disclosure.
• Report the incident at ReportFraud.ftc.gov and IC3.gov.
• Use IdentityTheft.gov for a recovery plan if identity documents or a Social Security number were shared.
• Tell the real company its employees or brand are being impersonated.
• Warn the job board or platform hosting the listing.

Shame is part of the scam's business model. It delays reports and gives criminals more time.

You were targeted at a vulnerable moment with a system designed to look like the process you were already navigating. Respond like an incident, not a personal failure.

- The Developer

Sources