Ask A DeleteMate: About those job offers….

Welcome to “Ask a Delete-Mate,” our new blog series where we tackle questions from DeleteMe employees about cybersecurity and data security! In this series, we’ll demystify complex concepts, share best practices, and address the everyday security challenges we all face. We’re turning those internal emails and DMs into easy-to-understand answers, helping all of us build a safer, more secure environment.

Q: I get a few of these job offer texts a week. What kind of scam is this?

A: This phishing exploit is called an employment scam or a phony job offer and (not to confuse things) it most often leads to fake check scams.

How It Works: 

The goal is to trick you into providing highly sensitive personal data. If you’re receiving a few of these a week, it means your email address or phone number is on a list targeted by scammers using automated tools. Here’s the really scary part: Those automated tools are from a family of tech called “malware as a service.” Basically, it’s software sold by criminals to criminals.

Hello, my name is Isabella and I’m a recruiter at Warner Bros. We saw your profile on several online recruitment platforms and were impressed by your background and experience. We are currently offering a flexible part-time opportunity where you can work in your free time. This position is responsible for assisting YouTubes and major brands to increase data traffic. The work content is simple and we will provide free training to help you get started quickly. The daily salary ranges from US$50 to US$3000. When you work 3 days, you can get an additional salary of US$300, and when you work 4 days, you can get an additional salary of US$1000. You can get your salary immediately after the work is completed. All payments are made on the same day. If you would like to join us, please send a text message to this cell phone number:16282808185

Here’s a breakdown of how the scam works and what the scammers are targeting:

1. The Hook: An unlikely offer

The scammer sends out mass emails (or messages via job boards/LinkedIn) with a few key features:

• High Pay, Low Effort: The job usually sounds easy (e.g., Virtual Assistant, Data Entry, Remote Coordinator) and offers an unusually high salary or hourly rate for the simplicity of the work.
• Vague Details: The company name might be unfamiliar, or they may use the name of a real company but with slightly altered email addresses or logos.
• Urgency: They often suggest the position needs to be filled immediately, pressuring you to respond quickly before you have time to research.

2. The Goal: Identity Theft and Financial Fraud

The scammer is using the job offer to get you to hand over the information needed for two main types of fraud:

• Identity Theft: They’ll be looking for your Social Security Number (SSN) or some other form of official ID, date of birth, and full name, photo of your driver’s license or passport.

With this data, they can open lines of credit, take out loans, or file fraudulent tax returns in your name.

• Financial Fraud: They may ask for your bank information to set up direct deposit. Another common exploit is a fake check or payment for equipment costs. They tell you to deposit the check and then immediately wire a portion of the money back. The check bounces a few days later, and you are responsible for the money you wired. You can read about it here.

3. The Critical Step: Your Response

As soon as you reply to the initial email or text message, the game is on. Scammers treat your response as a confirmation of interest as well as the fact that they have a responsive person on the other end of a valid email address.

• Your email address is now confirmed as “active” and “responsive” to this type of fraud, making you a higher-value target that can be added to or sold on other scammer lists.

• They will use sophisticated social engineering tactics to build trust before asking for the critical information under the guise of “onboarding paperwork” or a “background check.”

DeleteMe’s Best Advice: You guessed it–Delete the message immediately

The best defense against this scam is to treat every unsolicited job offer with extreme skepticism.

1. Do not respond. Replying only confirms your email or phone number is active.
2. Do not click on any links in the email, as they could lead to a phishing site designed to look like a real job portal.
3. Research the Company. If the offer seems legitimate, independently search for the company’s official website and look up their career page. If the job is not listed there, it’s fake.
4. Mark it as Spam. This helps your email service filter out future attempts.

Remember: A legitimate company will never ask for your Social Security Number, bank details, or copies of your ID before a formal interview process, and usually only after you’ve signed an official offer letter.