If you’ve applied for a remote job in the last year, you’ve probably received at least one fake offer. The most common variant — the “$40 software fee” scam — is costing Americans hundreds of millions a year, and hitting new graduates and mid-career workers hardest. Here’s how it works, how to spot it, and what to do.
The setup
A “recruiter” messages you on LinkedIn. Their profile has a corporate headshot, a reasonable work history, and maybe even connections you recognize. Their company name is real — often a large company that was genuinely hiring recently. They say they saw your profile and think you’d be a fit for a remote entry-level or data-entry role. The pay is great. The hours are flexible. No experience needed.
You reply. They schedule an interview — often over Microsoft Teams or, more suspiciously, over Telegram. The interview is short. They ask a few generic questions. A day later you get an “offer.” Base pay: $35/hour, up to 40 hours/week. You’re thrilled.
The sting
Before you start, the “recruiter” says you need to install the company’s “internal productivity software” — or more recently, buy “training materials” or a “secure laptop kit.” The cost is modest: $40 to $150. They’ll reimburse you on your first paycheck. All you need to do is Zelle / CashApp / bitcoin the payment, or use a gift card.
You pay. Sometimes there’s a second payment a few days later for “additional software” or “hardware shipping.” Sometimes the recruiter then stops responding and disappears. Sometimes they ask for your bank details for “direct deposit setup” and drain your account.
The job was never real. The company name was stolen. The recruiter doesn’t work there.
The nine tells every fake offer shares
- Unusually high pay for an entry-level or no-experience role.
- “No experience required” — real companies want skills.
- Interview on Telegram, WhatsApp, or Signal instead of a standard video platform.
- Offer within hours of a brief conversation — real hiring has background checks and reference calls.
- Request to purchase software, training, or equipment before starting. Legitimate employers provide all of this. Always.
- Payment via Zelle, CashApp, bitcoin, or gift cards — never refunded, never recovered.
- Requests for banking details, SSN, or ID before a signed offer letter. Real onboarding requires these; real hiring doesn’t.
- Generic email domain (Gmail, Yahoo) when the “recruiter” claims to be at a large company.
- No LinkedIn connections at the target company even though they claim to work there.
Run any suspect recruiter message through our Fake Job Offer Detector — it scores the nine patterns in seconds.
How to verify a real recruiter
- Google the recruiter’s name + “LinkedIn.” A real recruiter has a history — multiple roles, endorsements, posts.
- Check the email domain. Is it @company.com or @company-recruitment.net? The second is a scam.
- Call the company’s main HR line (find the number on the company’s real website, not from the recruiter). Ask if the recruiter works there. Real HR departments confirm this in seconds.
- Look for the job on the company’s careers page. If it’s not there, it’s not real.
- Check the offer letter. Real offers are on letterhead, signed, with contractual terms. They are not Word docs with your name in bold.
If you paid the fee already
Most payment methods scammers prefer are non-recoverable. But try:
- Zelle: call your bank within 24 hours — some reverse it, most don’t.
- CashApp / Venmo: same as Zelle — fast call, low chance.
- Credit card: dispute the charge, high chance of refund.
- Gift cards: call the card issuer; if the card hasn’t been used yet it can sometimes be frozen.
- Bitcoin / crypto: unrecoverable. Do not engage with “crypto recovery services” that contact you afterward — they are a second scam layered on the first. See our Crypto Scam Detector.
Report the fraud to the FBI IC3 at IC3.gov and to LinkedIn (Report the profile). Freeze your credit using our Identity Theft Risk Score checklist if you shared PII.
FAQ
Is every remote job offer a scam?
No — most remote jobs are real. What’s almost always a scam is a remote job that DMs you first, pays unusually well, doesn’t require experience, and asks for any money before starting.
Should I report the recruiter’s LinkedIn profile?
Yes — LinkedIn removes reported scam profiles within a day or two typically. Report, then block. If the profile impersonates a real company, also notify that company’s security team so they can send takedown notices.
What about Indeed and other job boards?
The scam exists there too, though LinkedIn is the current hotspot. Same rules apply — real companies don’t ask candidates to pay anything, ever.