The offer arrives fast, sometimes within a day of applying, sometimes out of nowhere on a messaging app. The pay is generous for remote work, the interview happens entirely by text, and the hiring manager is friendly and eager. Then comes the paperwork, and buried in it is a request no legitimate employer makes: your online banking username and password, supposedly to “set up direct deposit” or “verify your account for payroll.”
Stop right there. Real payroll setup needs your routing number and account number, the same information printed on the bottom of a paper check, and nothing more. Nobody who actually intends to pay you needs the credentials that let them log in as you. The Federal Trade Commission’s guidance on job scams flags requests for personal financial information early in the process as one of the clearest signs the “job” is a con.
Why scammers want the login itself
With your username and password, a criminal is not limited to depositing your paycheck. They can drain the account, open payment app connections, order transfers, and harvest the personal details stored in your profile. Some use hijacked accounts to move stolen money through them, which brings the bank’s fraud team, and sometimes law enforcement, to your door instead of theirs. Handing over a bank login is closer to handing over your keys and mailbox than sharing a routing number.
The same logic applies to other early asks. A real employer does not need your full Social Security number, a photo of your driver’s license, or your mother’s maiden name before you have signed anything, met anyone, or verified the company exists. Onboarding paperwork comes after a real offer, through systems you can check, not through a chat thread.
The fake check that comes with the fake job
The other classic move in this genre is the equipment check. Your new “employer” sends a check for a few thousand dollars and instructs you to deposit it, keep a portion as your first payment, and send the rest to a “vendor” for a laptop and software, usually by wire, payment app, or gift card. The check looks real. Your bank will even make some of the funds available within days, because federal funds-availability rules require it.
Here is the trap: available is not the same as cleared. When the check eventually bounces, and counterfeit checks can take weeks to unwind, the bank removes the full amount from your account. The money you forwarded to the vendor is gone, and it was your money all along. The FTC’s fake check scam guidance describes this mechanic in detail, and it underpins job scams, overpayment scams, and mystery shopper cons alike. No honest employer pays you first and asks you to pass money along to someone else.
The reshipping and money mule variations
Some fake jobs skip the check and simply make you the infrastructure. “Package inspectors” receive goods bought with stolen cards and reship them overseas. “Payment processors” receive deposits and forward them onward, minus a commission. Both jobs are real crimes with your name on the shipping labels and account records. If a job consists mostly of receiving money or merchandise and sending it somewhere else, that is not logistics work. That is laundering, and the person recruited to do it takes on real legal risk.
How to vet an offer in fifteen minutes
A few habits catch most of these schemes before any damage. Look up the company independently: type its name into a search engine with the word “scam,” find its official website yourself, and call the number listed there (not a number from the recruiter) to ask whether the position and the recruiter exist. Real companies’ HR departments answer that question all the time.
Check the email domain. Legitimate recruiters for an established company write from the company’s domain, not from a free webmail address or a lookalike domain with an extra letter. Be skeptical of interviews conducted entirely over text or chat apps, offers extended without any interview at all, and pressure to accept and submit personal information the same day. Genuine hiring is almost never that desperate, and urgency is the scammer’s oldest tool.
And hold the line on the two absolutes: never share a bank login, and never send money, in any form, to get a job. Fees for equipment, training, background checks, or “account verification” paid by you to them reverse the direction employment is supposed to work.
If you already handed something over
If you shared a bank login, call your bank immediately, change the password, and ask the fraud department to watch or freeze the account. If you deposited a check and sent money, contact the bank right away as well; speed occasionally stops a transfer in flight. If you gave up a Social Security number, consider placing a fraud alert or credit freeze with the credit bureaus so no one can open accounts in your name.
Then report the scheme to the FTC at ReportFraud.ftc.gov and to the job platform where the listing appeared, which can pull the posting before it hooks the next applicant. Job scams thrive on the fact that looking for work already involves handing strangers your resume and your hopes. The fix is not suspicion of everything. It is a short list of things no real employer will ever ask for, kept firmly in mind on the days you want the offer to be real.
