A work-from-home offer is likely a scam when it asks you to pay upfront, handle packages for an employer, or stay on WhatsApp or Telegram instead of moving to a verifiable company domain. That quick check matters because those three moves all aim to stop you from verifying the job independently before you share personal data or money.
According to current FTC guidance, a legitimate employer will never ask you to pay to get a job, and the Georgia AG lists being asked to pay money up-front as the number-one sign of a work-from-home scam. Scammers rely on urgency and off-channel contact — a random text about a remote assessor role that jumps immediately to WhatsApp — to keep you from doing a basic domain and money-flow check. The difference between a legit remote hire and a scam often shows in three verifiable details you can check before you apply — domain, contact method, and who holds the money — and each has a specific place to confirm.
How official guidance defines a work-from-home job scam
As of August 2026, federal and state consumer-protection guidance in the United States defines work-from-home scams around a small set of lures, not a long list of vague warnings. The FTC describes job scams as including phony business opportunities, fake employment listings, and requests that you pay for certification, training materials, or background checks, or that you handle money or packages for the employer. Legitimate employers do not charge you to get hired.
State guidance says the same thing in plainer terms. The Georgia Attorney General notes the number-one sign you are being scammed is being asked to pay money up-front for certification, training, or materials. Connecticut officials warn that a work-from-home opportunity like re-shipping packages opportunity is a common scam pattern, along with envelope stuffing, rebate processing, and medical billing.
The FTC explains the mechanism in its alerts: scammers send emails, texts, and ads promising you can make thousands for little effort, then use that promise to pull you off-channel. That is why the current FTC advice stresses two principles together — never pay to get a job and verify via a company contact you know is real, not the one the recruiter gave you. When you see a posting promise thousands a month with little time and effort and then ask for money to start, that pair is what makes it a scam, not just low pay or a slow response.
At the listing or policy, look for: any request for upfront payment, deposit for equipment, or fee for a background check before an interview. If present, compare it against the FTC rule that a legitimate employer never asks you to pay to get the job.
The three WFH patterns still showing up in 2024-2026: reshipping, fake check, and task/WhatsApp
Three patterns keep appearing in recent U.S. reporting. Each moves money or goods differently, which is why the verification check is slightly different for each.
1. Reshipping scam
You get a logistics or package-handler role that lets you work from home. The employer — who only texts — ships you high-dollar merchandise like electronics. Your job is to repackage and reship it. Per the USPS, reshipping fraud uses reshipping fraud merchandise bought via stolen cards and bogus job offers to move illegally obtained products. The BBB reports this work-from-home reshipping scam surging again in 2023-2024. You may not get a paycheck, and you may be handling stolen goods.
2. Fake-check scam
You are told you got the job and can earn top dollar from home. Then a big check arrives to buy supplies or equipment. The employer says deposit it and send part back, or buy gift cards. The FTC notes the check will bounce and the bank will want the money back. The FTC business guidance is blunt: an honest employer will never send you a check then tell you to send part of the money.
3. Task scams and WhatsApp-only recruiters
This one starts with a random text about a remote online assessor or optimization job, then moves immediately to WhatsApp or Telegram. The posting uses the term optimization, promises relatively simple tasks, and says no references are required — all flagged as red flags in the IC3 work-from-home alert. Then you are directed to make cryptocurrency payments to employer to unlock more tasks or higher pay. The FTC also warned that Telegram Messenger recruitment is a common channel for these scams, because it prevents you from verifying a company domain.
Each pattern uses the same pressure: you must act now. That pressure is the mechanism to interrupt, not just another red flag to list.
Why urgency and off-channel contact are the core mechanism
Scammers do not rely on a clever job description. They rely on stopping verification.
That is the mechanism the FTC calls out in its latest alerts: before giving details about the role, they ask for driver license, Social Security number, or bank account to fill out paperwork. A legitimate company will move you to a phone or website you know is real, not keep you in the same chat where you were contacted.
On the Glassdoor Forum, readers ask whether hiring via WhatsApp is normal, describing texts about interest in positions where the recruiter then wants to move to WhatsApp immediately and refuses to provide role details. As one poster described it, “wants to move to WA” and stay there.
Practitioners answering that thread advise checking for a company-branded email and requesting a corporate office number and video interview before continuing. That matches trade guidance that if a recruiter insists on staying in chat app instead of moving to company email, phone, or video, it is almost certainly fake.
The FBI frames it the same way: don’t accept work-from-home jobs from someone who randomly reaches out via text or social media. Off-channel contact means no verifiable domain to check. No verifiable domain means you cannot independently confirm the employer exists. Urgency then pushes you to share ID or deposit a check before that check happens. Break that chain and the scam loses leverage.
The practical risk if you do not break it is concrete. Sharing SSN or ID can lead to identity theft. Depositing a fake check can leave you owing your bank. Sending crypto to an employer is irreversible. Reshipping packages can mean handling stolen goods, which creates its own liability.
How to verify if a work-from-home offer is legit before you share anything
Use this 5-minute routine to interrupt urgency. Each step answers one verifiable question and tells you where to confirm it independently.
Step 1: domain check — does the recruiter match the company domain?
Look up the company on its official site, not the link the recruiter sent. Does the recruiter email match that domain, not gmail or outlook? Search the company name plus search company name plus scam, review, and complaint, as Georgia ConsumerEd recommends. If the only presence is a text number and no careers page, pause.
Step 2: channel check — did contact stay on WhatsApp or Telegram?
Did the offer start via unsolicited text or WhatsApp and stay there despite your request to move to company email or video? Per the FTC warning on Telegram Messenger recruitment, staying in the chat app is itself a signal. Real hiring moves to verifiable channels.
Step 3: money check — are you handling packages, checks, or crypto for the employer?
Ask: will I receive packages to reship, deposit a check then wire part back, buy equipment with a check they sent, or send cryptocurrency to the employer to unlock tasks? The FTC says an honest employer will never send you a check then tell you to send part back, and the FBI says do not make cryptocurrency payments to employer for a job. If yes to any, it is a defined scam pattern, not a new payment method.
Step 4: paperwork check — are they asking for SSN or bank before any real interview?
Before giving details about the job, are they asking for driver license, SSN, or bank account for paperwork? The FTC latest job scams alert flags this exact timing — ID requested before interview or offer on company domain. Legit remote hiring asks for sensitive data only after interviews and on secure, company-owned systems.
Step 5: independent contact — call a number you know is real
Call the company at a phone number you know to be real, not the one the recruiter gave you, to double-check the offer is genuine. The FTC college-student advisory recommends this as the final confirmation step. If you cannot find a public number or the person who answers has never heard of the role, stop.
Try this before you apply: open the official company site in a new tab, find its careers page and listed phone number yourself, and compare the recruiter email domain to that site. Document what you find — domain match, channel, money request, ID timing — before you reply.
For related guidance on building evidence once you have verified a remote role is real, see our guide on building a freelance portfolio with no clients, which shows how to turn legitimate postings into portfolio projects without sharing sensitive data early.
Why a too-good-to-be-true WFH posting without an interview is a trap
It sounds reasonable to think high pay for simple tasks is just how remote work works now. Many real remote jobs do pay well.
The trap is in what is missing. Per the FTC, scam postings claim you can make thousands a month with little effort and involve no real interview — just a quick chat on WhatsApp or Telegram and instant hire. The IC3 notes the same wording: job descriptions using the term optimization that involves relatively simple tasks plus being directed to make cryptocurrency payments to the employer.
A legitimate work-from-home hiring process usually looks different, even when remote. You apply on the company site, your resume is reviewed, you have one or more video or phone interviews, references may be checked, and the offer comes on company letterhead or via a company-domain email. You are never asked to make crypto payments to your employer to get work.
That contrast is why urgency matters. If you cannot point to an interview, a careers page, and a verifiable domain, the high pay is not evidence of a good market — it is evidence the posting is trying to bypass verification.
What to do if you already responded, sent money, or shared personal info
If you already replied, acted quickly to limit damage. Scammers count on you waiting for a paycheck that never comes.
Stop contact. Do not deposit any more checks. Do not forward packages. Do not send more crypto or gift cards, even if they say it will unlock pay.
If you shared bank account details, contact your bank the same day and tell them you may have deposited a fake check. The FTC notes the check will bounce and the bank will want the money back, so early notice matters.
If you shared your Social Security number, driver license, or other ID, go to IdentityTheft.gov — the FTC site for reporting identity theft flagged in its February 2024 job-scam alert — and follow the recovery steps. If packages arrived at your home, do not reship them. Contact USPS and the retailer whose name is on the label; per USPS, those goods were likely bought with stolen cards.
Report the job scam to the FTC at ReportFraud.ftc.gov and to the FBI Internet Crime Complaint Center at ic3.gov if crypto was involved. The FBI specifically asks victims of cryptocurrency job scams to report to ic3.gov with all messages, wallet addresses, and transaction details. Act the same day, not after waiting to see if the check clears.
Job-offer verification checklist you can run before you apply
This checklist is a self-authored practical guideline for interrupting urgency and off-channel pressure, not an industry standard hiring score or legal rule. Run it before you apply — if any check fails, stop and report.
Job-offer verification checklist — 8 checks before you apply
| Check | How to verify | Pass / Fail → Action |
|---|---|---|
| 1. Domain match | Recruiter email domain matches official company site careers page, not gmail/outlook | Pass if match; Fail = stop, search company name + scam |
| 2. Independent phone | Call company at from official site, not recruiter-given | Pass if staff confirms role; Fail = stop |
| 3. No upfront payment | Georgia AG: for training/cert/background | Pass if no fee; Fail = scam per FTC never pay to get a job |
| 4. No reshipping | USPS: — receiving & reshipping electronics from home | Pass if no packages; Fail = handling stolen goods risk, report |
| 5. No check-deposit-wire | FTC: then tell you to send part back | Pass if no check; Fail = fake check, bank will want money |
| 6. No crypto to employer | FBI/IC3: do not make to unlock tasks | Pass if no crypto request; Fail = irreversible loss |
| 7. No early ID/bank | FTC: before giving details they — ID only after formal interview/offer | Pass if ID after offer; Fail = identity theft risk |
| 8. Not WhatsApp-only | FTC Telegram alert + LinkedIn: recruiter instead of company email/phone/video | Pass if moves to company domain; Fail = cannot verify independently |
Checklist showing verification checks with how to verify and pass fail criteria
This framework is a practical evaluation tool created for this guide based on domain match, contact channel, money flow, and ID timing described above, not a published hiring standard.
Real examples to compare against: a legitimate posting lives on a company careers page with a company-domain email and interviews on video. A scam text says you are an online assessor, moves immediately to WhatsApp, promises high hourly for simple optimization with no references required, then asks you to repack electronics from Eastern Europe or deposit a check to buy supplies — both patterns described by USPS and the FTC You Got the Job alert. If any of the eight checks fails, stop and use the reporting steps in the next section.
Before you apply
A legit remote job will survive five minutes of independent checking, a scam will not. Before you share ID, bank info, or handle any package or check, verify domain match, move the conversation to a company email and phone number you found yourself, and confirm there is no upfront payment or money movement to the employer. Ignore those checks because the offer feels urgent, and you risk fake-check debt, irreversible crypto loss, or identity theft that takes far longer to fix than the job search itself.
Frequently Asked Questions
Is a recruiter contacting only on WhatsApp always a scam?
No, but it is a strong warning. Per the FTC Telegram Messenger recruitment alert and FBI guidance, a recruiter who staying in chat app only and refuses company email, phone, or video is almost certainly fake. Legit recruiters may message on WhatsApp for scheduling but will move to a verifiable domain and corporate contact you can confirm independently.
How does the reshipping work-from-home scam work and why is it risky?
Scammers post fake logistics jobs, buy goods with stolen cards, then have you re-ship them. The USPS calls this reshipping fraud, and the BBB notes the reshipping scam is surging. Risk includes no paycheck, possible handling of stolen goods, financial loss, and identity theft.
What is the fake-check job scam and what should I do if I deposited one?
The employer sends a big check to buy supplies and tells you to wire part back; the check will bounce and your bank will want the money back. Per FTC, an honest employer will never send you a check then tell you to send part. If deposited, contact your bank immediately, stop sending money, and report to ReportFraud.ftc.gov and ic3.gov.
How do I report a work-from-home job scam to the FTC and other authorities?
Go to reportfraud.ftc.gov, answer the questions, and include recruiter contact, posting URL, and messages. Also file with your state AG — for example, the Georgia Attorney General complaint division — and FBI IC3 at report to ic3.gov for crypto losses. If ID was shared, also report at IdentityTheft.gov and you can call FTC at 1-877-FTC-HELP.
https://consumer.georgia.gov/work-home-scams
https://www.uspis.gov/news/scam-article/work-from-home-scams-and-reshipping-schemes-2
https://consumer.ftc.gov/consumer-alerts/2023/12/how-spot-latest-job-scams
https://consumer.ftc.gov/consumer-alerts/2023/12/how-spot-latest-job-scams
https://www.linkedin.com/pulse/spotting-fake-remote-jobs-whatsapp-telegram-victoria-connour
