Assess the role using specific evidence, not one awkward moment. Look for inconsistent job details, pressure to pay or share sensitive data unusually early, evasive answers about responsibilities, and unsafe or disrespectful conduct; verify concerns before deciding.
A decision process you can repeat
Separate an uncomfortable signal from a verified risk. Record the exact request or inconsistency, then verify the company and role using contact details you find independently. Requests for payment, returned check funds, sensitive credentials, or pressure to act before you can verify deserve a pause; no single polished website proves legitimacy.
A recruiter requests a fee to secure an interview and sends a check for equipment with instructions to return the extra. The candidate pauses, contacts the company using the phone number on its official site, and does not deposit or send money. The offer is not verified by the recruiter’s message alone.
A complete worked example
- Starting task:Fictional applicant Sam receives a text-only offer from an unknown recruiter, is told to pay for “equipment shipping,” and is asked to deposit a check. Sam has already sent a photo of a driver’s license but has not paid.
- First output:“The offer letter looks official, so I’ll deposit the check and return the equipment balance.”
- Mistake or risk:A polished document does not verify the employer. Paying or forwarding money from a check can expose the applicant to loss; sharing identity data can create additional risk.
- Human correction:Pause all payments and contact. Verify the employer through a website or phone number found independently, not the message. Save the posting, sender details and payment instructions. Because identity information was shared, use the official identity-theft response resource and contact the issuing agency or financial institution for situation-specific advice.
- Quality check:Never rely on a check clearing or a logo as proof. FTC guidance warns about job fees, fake checks and personal-information risks; recovery steps depend on what was disclosed and where. This is a fictional example; no result is guaranteed.
- Final usable output:
“Sam does not deposit or forward funds, contacts the real company using its published number, and reports the impersonation. Sam freezes or replaces affected credentials/records as advised by official identity-protection guidance and documents what was shared.”
Illustrative resume bullet: “Verified an unsolicited job offer independently, stopped a payment request and documented a response to exposed identity data.” These are fictional scenario details, not claims about the reader’s work.
A reproducible job interview red flags exercise
Input: the exact message, job posting, sender address/number and any money or information request. Do not click suspicious links while collecting evidence.
- Write down the specific request and preserve messages. Do not confront the sender or provide more data.
- Find the employer's careers page and contact number independently—not through the message—and ask whether the recruiter and vacancy are real.
- Use a stop rule: do not pay to get hired, wire back a check, buy gift cards, transfer cryptocurrency or share bank credentials.
- If verified legitimate but still unclear, ask the employer to explain the role, pay, location, reporting line and process in writing. Evaluate ordinary workplace concerns separately from fraud indicators.
- If money or personal data was already sent, contact your bank/payment provider promptly, change compromised credentials and report through official local channels.
Keep: source URL, contact method, dates, message copies and unresolved facts; remove sensitive information from any public report.
Measure the work and the quality
For each concern, score evidence strength, independent verification, financial/identity risk and the next safe action. Do not create a numeric fraud probability from a checklist. Record time to verify, unresolved questions and any exposure; urgent money or identity risks should be handled before further interview preparation.
Decisions that change the outcome
- Start with the evidence: Record exactly what happened: the requested payment, the channel, the sender’s address, the name used, and the deadline they imposed. Do not conclude that a company is fraudulent from a single typo or awkward interaction; identify the behavior that must be verified.
- Choose the right channel: Find the company’s official website independently and look for the vacancy on its careers page. Contact the organization using a number or email published there, not a reply address supplied in the suspicious message. Ask whether the role and person are genuine.
- Make the request or decision clear: Never pay to get a job or return money from an employer check. Do not share bank details, identity documents, or login codes before you have verified the hiring process and have a legitimate reason to provide them. Stop if they insist on a payment method that is difficult to recover.
- Close the loop: If you have already paid or shared information, contact your bank or payment provider promptly, secure affected accounts, and use the appropriate fraud-reporting service. In the United States, the FTC accepts reports at ReportFraud.ftc.gov; other jurisdictions have their own agencies.
Failure modes to watch for
Never pay to get a job or return money from an employer check. Do not share bank details, identity documents, or login codes before you have verified the hiring process and have a legitimate reason to provide them. Stop if they insist on a payment method that is difficult to recover.
A final situation to consider
A genuine employer may use third-party platforms or request documents at a lawful stage, so verify rather than relying only on a list of visual clues. The decisive check is whether the organization confirms the person, role, channel, and requested action through independently located official contact information.
Frequently asked questions
Is every vague job description a scam?
No. Vague or inconsistent information is a reason to verify the role and ask questions, not proof by itself. Requests for money or returned check funds are much stronger warning signs.
What if they send a check for equipment?
Do not deposit it or send money back. The FTC warns that fake checks may appear available before the bank discovers they are counterfeit; verify independently and contact your bank if you already deposited it.
What if I already shared my Social Security or bank details?
Contact your financial institution and relevant identity-protection or government service promptly, secure accounts and follow local reporting guidance. Do not continue the conversation to recover money.
Can I report a recruiter?
In the United States, the FTC accepts reports at ReportFraud.ftc.gov. Elsewhere use the appropriate local consumer agency or law-enforcement channel. Retain evidence without posting sensitive details publicly.
A stop/go check—and what to do if you already shared data
Practice with an offer message: list the sender, employer domain, requested action, requested payment/data and an independently sourced contact. Mark stop if asked to pay to get paid, deposit and forward funds, or surrender sensitive data before verified hiring. If exposed: preserve evidence; contact your bank/card provider if financial details were shared; follow IdentityTheft.gov’s personalized recovery plan for identity information; report through FTC ReportFraud. This is U.S.-specific guidance. See job-scam prevention and how to verify a recruiter.
What if I already sent a photo of my ID?
Do not continue sharing information or paying money. Save the message and record exactly what was disclosed. Contact the relevant financial institution or issuing agency if applicable, use the official identity-theft service for your country, and report the impersonation through the appropriate consumer-protection route. Steps vary by exposure and jurisdiction.
Sources
- FTC: Job Scams — FTC describes fake job listings, candidate fees, fake checks, personal-information risks and verification steps.
- FTC: That job offer text is probably a scam — The FTC's April 30, 2026 alert describes unsolicited recruiter texts, task scams, fake checks and requests to pay to get paid.