Last verified by our editorial team: April 2026
Every job scam leaves the same fingerprints. Once you know the 12 signs, you can spot a fake offer in under a minute — even sophisticated ones that look professional at first glance. This guide is the quickest reference available: the signs, why they work, and how to combine them into a fast filter for any suspicious job offer.
The 12 most reliable job scam signs: unsolicited WhatsApp/Telegram contact, free-email recruiter, no video interview, hired within hours, any fee request, crypto payment, SSN request before signed offer, pressure phrases, mismatched sender name, no company careers-page listing, generic offer letter, and post-hire equipment purchase demands.
Sign 1: Unsolicited message via WhatsApp or Telegram. Sign 2: Recruiter uses a free email (Gmail, Outlook, Yahoo). Sign 3: Sender's LinkedIn is new or has under 100 connections. Sign 4: 'From' name and Reply-To address do not match. Any two of these together = high-confidence scam.
Sign 5: No real interview, only text chat. Sign 6: Hired within hours of first contact. Sign 7: Role is not listed on the company's official careers page. Sign 8: Recruiter refuses a video interview. Real hiring takes weeks and involves multiple named humans. Same-day hires for white-collar roles do not exist.
Sign 9: Any upfront fee (training, equipment, activation, background check). Sign 10: Salary paid in crypto/USDT. Sign 11: SSN or bank details requested before a signed offer. Sign 12: Post-hire equipment purchase from a specific vendor. Signs 9-12 are the strongest single indicators — one of these alone confirms a scam.
Score any suspicious offer against the 12 signs. Zero signs → likely real. One sign → proceed with full verification. Two or more signs from different categories → strongly likely a scam. Any single sign from 9-12 → confirmed scam regardless of others. This filter takes 60 seconds and catches nearly every fake offer in circulation in 2026.
The 12 signs are derived from over 100,000 documented job-scam reports collected by the FTC, FBI, and consumer protection agencies between 2022 and 2025. Every major scam pattern — brand impersonation, task job traps, money mule recruitment, crypto payment schemes, fake recruiter clones, overpayment cheque scams, reshipping fraud — triggers at least three of these signs. Because scammers optimise for speed and scale, they cannot afford to eliminate all the tells. Even sophisticated variants that copy real company branding and use professional language still request money, still avoid video interviews, or still push you to WhatsApp. The signs work because they identify the underlying scam mechanics, not the surface presentation.
A real job offer never triggers Signs 9-12. Real hiring uses regulated payroll (never crypto), collects SSN only after signed offer (never during interviews), pays for all training and equipment (never charges candidates), and involves multiple interview rounds with named humans (never same-day hires). Real recruiters have long-tenured LinkedIn profiles with connections to their company's employees, use company email exclusively, and welcome verification questions rather than resisting them. If you cannot find a role on the company's official careers page, the role does not exist. Trust the process, not the offer letter's visual quality.
Two edge cases weaken the signs slightly. First, some legitimate small startups genuinely use Gmail (Sign 2), especially in the first year. In these cases, the founder is verifiable via LinkedIn and company registration, and the role still passes Signs 5-12. Second, executive recruiters at small agencies occasionally contact via LinkedIn without a listed job (Sign 7 partial). These are legitimate when the agency has real clients, a public website, and verified LinkedIn presence. When in doubt, run full verification instead of relying on the signs alone. See our Is This Job Real? guide for the complete five-stage verification process.
Any request for upfront payment. Sign 9. Real employers do not charge candidates for training, equipment, background checks, or anything else. A fee request alone confirms a scam.
Rarely. Small startups occasionally trigger Sign 2 (Gmail recruiter). Contract recruitment agencies may trigger Sign 3 (limited LinkedIn). But real companies never trigger Signs 9-12. Multiple signs across categories are the reliable signal.
Run full verification: find the role on the company's official careers page, verify the recruiter's LinkedIn and company email, and call the company's main phone number to confirm. If the company confirms, the single sign was a false positive.
Almost all unsolicited WhatsApp job offers are scams. Real recruiters use company email or LinkedIn InMail. WhatsApp-only contact is Sign 1, itself a strong scam indicator.
Because legitimate employers use regulated payroll with tax withholding. Crypto bypasses regulation and is irreversible. No global company in 2026 pays salaries in crypto.
Signs 5-6 are hard to fake because they need visible time investment. Sign 7 is easy to check independently: search the role on the company's careers page. If it is not there, the offer is fake regardless of what the recruiter claims.
Yes. Real recruiters have long-tenured profiles with connections to their company's employees. New profiles or profiles with few connections are common in cloning-based scams.
FTC at reportfraud.ftc.gov, the platform where contact happened (WhatsApp, LinkedIn), and if a real company was impersonated, that company's brand-abuse address (stop-spoofing@amazon.com, etc.). See our Job Scam Report guide.