How to Spot a Fake Job Offer: 9 Red Flags

Fake job offers in 2026: the three things scammers want

Job scams have stopped looking like scams. In early October 2026, researchers at NordVPN linked 813 phishing domains to one operation impersonating recruiters from more than 75 major companies — Disney, Nike, Coca-Cola, Nvidia, Adidas, Adobe and Booking.com among them — in some cases using the name and photo of a real employee copied from LinkedIn. The same week, Turkish media reported scammers posing as company owners and HR managers on LinkedIn, with AI-written ads and corporate-looking documents. As one IT expert put it there: a well-written ad does not make it trustworthy.

However polished the wrapper, almost every fake job offer is after one of three things:

• Your money. Fees for training, equipment, insurance or "processing" — or the "task" scam, where you must deposit money to unlock paid tasks such as writing reviews or rating products. Early on you may even be paid a little, to build trust; then the deposits keep growing and nothing comes back.
• Your bank account. "Financial agent" or "payment processing" jobs that use your account to pass on stolen money. This makes you a money mule — and, in most countries, part of the crime.
• Your identity and logins. A copy of your ID, your bank details, your date of birth — or, in the newest wave, your Google, Facebook or work account password, captured on a fake interview-booking page.

The scale is real. In the United States, where the Federal Trade Commission publishes detailed figures, reported losses to job and employment agency scams rose from $90 million in 2020 to $501 million in 2024, while the number of reports tripled.

The 9 red flags of a fake job offer

One flag on its own can have an innocent explanation. Two or more together, and you should stop and verify before you reply again.

1. You are asked to pay anything — a fee, a deposit, training, a "starter kit" or equipment. As the US Federal Trade Commission puts it, honest employers never ask you to pay to get a job.
2. The job involves receiving money into your account and sending it on, or opening a new bank or crypto account for the employer. That is the definition of a money mule.
3. You are asked to sign in with Google, Facebook or Microsoft to book or join an interview. Real interview scheduling almost never asks you to log in — just to pick a time.
4. They want your ID, passport, bank details or national ID number before a formal offer and contract. LinkedIn lists early requests for banking details or ID photos as a scam sign.
5. The conversation is pushed off-platform to WhatsApp or Telegram, or starts with an unsolicited call or text — sometimes claiming to be Indeed or a temp agency — asking you to save a number and continue in a chat app.
6. The email comes from a free address (Gmail, Outlook, Yahoo) or a look-alike domain, not the company's own.
7. The pay is high for little work and the duties are vague: "€100–300 for 60–90 minutes a day", no qualifications needed, hired without a real interview.
8. You are pressured to hurry — accept today, pay today, the place will go to someone else.
9. You receive a cheque or transfer to buy equipment from a supplier they name, or are asked to send part of a payment back. The cheque bounces later, and the bank asks you to repay it.

How to check a recruiter and a vacancy

Five minutes of checking stops most of these scams, because the fakes are built to survive a glance, not a cross-check:

• Find the vacancy yourself. Go to the company's own website — by typing the address, not by clicking the link you were sent — and look for the role on its careers page.
• Compare the email domain letter by letter with the company's real domain. Scam adverts often copy a genuine company's website under a similar address.
• Look at the recruiter's LinkedIn profile: is it complete, does it have a normal number of connections, and is it connected to other people who work at that company? A thin or brand-new profile is a warning sign.
• If in doubt, contact the company through the phone number or address on its official website and ask whether the person and the vacancy are real.
• On LinkedIn, a verification badge on a job post means the company page is verified and the person who posted it has verified they work there. LinkedIn is still piloting these badges, though, so a missing badge does not prove a job is fake.

Money-mule "jobs": the scam that makes you the criminal

Europol defines a money mule as a person who receives money from a third party in their bank account and passes it on — by transfer or in cash — for a commission. Even if you never touched the original crime, Europol is clear that mules are accomplices: they launder the proceeds. More than 90% of the money-mule transactions identified in the European Money Mule Actions are linked to cybercrime such as phishing and online fraud.

The recruitment looks like ordinary job hunting. German police list the titles these offers use — "Financial Agent", "Finanzmanager", "Escrow Agent", "Projekt Koordinator", "Regional Manager für Zahlungsbearbeitung" — with a promised commission of 5% to 20%. Europol says the most likely targets are people under 35, and that criminal groups have started recruiting people as young as 12 to 21.

• The consequences are personal. In Germany, a financial agent is at least guilty of reckless money laundering, punishable by up to two years in prison or a fine, and banks routinely close the account.
• Enforcement is coordinated across Europe. In one 2023 round of the European Money Mule Action, police in 26 countries identified 10,759 money mules and 474 recruiters and arrested 1,013 people.
• Europol's advice is simple: ignore any job offer that involves moving money through your bank account, however authentic it looks.

Already replied, paid or shared details? What to do now

Act fast and in this order — the first hours matter most for stopping payments and locking accounts:

1. Stop all contact and stop transferring money immediately, including any money that has "arrived" in your account for passing on.
2. Call your bank or payment provider if you shared bank details, paid anything or received money you were told to forward.
3. If you entered a password, change it on that account and on every account that uses the same password, and switch on two-step verification.
4. If you sent a copy of your ID or passport, contact the authority that issued it and your bank, and keep an eye on accounts opened in your name.
5. Report it to the police. Europol keeps a list of each EU country's online reporting site; where there is none, go to your local police station. Report the fake profile or advert to the job site too.
6. Ignore anyone offering to "recover" your money for a fee — the FBI warns that these recovery services are often a second scam.