Fell for a Fake Job Offer? How to Find the Scammer
A fake job offer is not a clumsy email you should have caught. It is a polished operation that borrows a real company’s name, runs a believable interview over chat, and times its move so the trap springs days after the money is already gone. If you deposited a check and sent part of it back, bought equipment from a vendor they named, forwarded packages, or moved funds through your own account, you are not foolish; you were targeted by people who do this full time. This guide walks through exactly how the check, equipment, reshipping, and overpayment variants work, where to report them, and how the real people behind the spoofed recruiter and the payment trail actually get traced.
The Short Version
If you were just hit, move in this order: stop all contact with the recruiter, but save every message, email header, phone number, profile, check image, and transfer receipt first; tell your bank and any payment app immediately so they can try to stop or flag a transfer and document the fake check; then report the job scam to the FTC and the FBI Internet Crime Complaint Center. Recovery is never guaranteed, but the same identifiers that scammers think hide them, the spoofed email domain, the recruiter phone number and handle, the vendor site they sent you to, and the account that received your money, are exactly what lawful research can use to surface a real name. People Locator Skip Tracing works the side most guides ignore: tracing the people behind the spoofed recruiter and the payment trail, so your report and any civil claim carry more weight. And never pay anyone who promises to recover your money for an upfront fee. That is a second scam built for victims.
Watch: Finding a Fake Job Offer Scammer
What to do first, and the lawful path to identifying them.
Watch Overview
What a Fake Job Offer Scam Actually Is
One recruiter playbook, several payoffs. Knowing the structure is how you fight back.
A fake job offer scam is an identity-borrowing fraud dressed up as hiring. The criminals rarely invent a company from scratch. Instead they wrap themselves in something that already looks legitimate: a real employer’s name and logo, a posting cloned onto a real job board, or the identity of an actual recruiter whose details they lifted from a professional network. The interview feels real because it is built to. It happens over text, a chat app, or email, the questions sound routine, and the offer arrives fast with pay that is a little better than the role should command. Everything up to that point exists for one reason, to get you past the moment of doubt so that when the financial ask comes, it lands inside a relationship you already trust.
The ask is where the money is made, and it takes a handful of recognizable shapes. You may be sent a check to deposit and told to forward part of it. You may be told to buy your own equipment from a vendor the company names. You may be hired to receive and re-ship packages, or to move funds in and out of your own bank account as a “payment processor.” Each of these turns you into the person standing between the criminal and the loss, which is exactly the point. If this happened to you, the same lawful research that helps people find someone who scammed them applies here, because behind the borrowed company name there are still real identifiers, and identifiers can be traced. Feeling embarrassed is normal and it is the reaction the crews count on to keep you quiet. Silence is the only thing that protects them.
The Variants, and How Each One Pays Off
Different stories, the same goal: make you the one who loses the real money.
The fake-check and overpayment trap
This is the most common version, and it relies on a quirk of how banks work. After you are “hired,” a check arrives, often for more than expected. You are told to deposit it, keep your pay, and forward the rest, whether that is framed as covering equipment, paying a “vendor,” or returning an “overpayment.” Your bank makes the funds available within a day or two, which feels like the check cleared. It did not. Banks make funds available long before a check is fully verified, and uncovering a forged or worthless check can take weeks. By the time it bounces, the money you wired or sent by app is long gone, and the bank holds you responsible for the full amount of the bad check. You are out both the cash you forwarded and the deposit the bank claws back.
The equipment-purchase angle
Here the “employer” insists you buy your home-office gear, a laptop, software, or a security package, from a specific vendor they recommend, with a promise to reimburse you. The catch is that the scammer controls or is paid by that vendor, so your real money goes to them and the reimbursement check is either fake or never comes. A close cousin asks you to buy gift cards for “equipment” or “training” and read off the codes, which is simply handing over cash that cannot be recalled.
The reshipping and money-mule versions
In a reshipping scheme you are hired to receive packages at home and forward them elsewhere. Those goods were usually bought with stolen card numbers, and routing them through your address puts distance between the criminals and the fraud, with your name on the trail. In the payment-processing or money-mule version, you move “company funds” through your own account, which launders stolen money and can expose you to serious legal trouble even though you were deceived. Both are designed so the visible footprints, the shipping address, the bank account, belong to the victim and not the criminal.
The Red Flags in Hindsight
If several of these fit what happened to you, treat it as a scam and start documenting.
A Check, Then Send Money Back
You were told to deposit a check and forward part of it for equipment, a vendor, or an “overpayment.” No real employer pays this way.
Pay to Get Paid
You had to spend your own money first, for gear, software, training, or gift cards, with a promise of reimbursement that did not arrive.
Hired With No Real Interview
The whole process ran over text or a chat app, with no video, no phone call to a real office, and an offer that came unusually fast.
A Lookalike Email Domain
The recruiter wrote from a free inbox or a domain that was close to, but not exactly, the real company’s address.
Personal Data Up Front
Your Social Security number, driver license, or bank login was requested before any genuine hiring step, often on a “fast onboarding” form.
Receive and Forward
The “job” was to receive packages or move money through your own account and pass it along. That is a reshipping or mule role, not employment.
The First 48 Hours
Speed decides whether a transfer can be stopped and how much evidence survives.
The window right after you realize what happened is the one that matters most. A wire or app transfer can sometimes be recalled if you reach your bank before it settles, and fake job postings, lookalike sites, and chat accounts tend to vanish once the money stops. Report the job scam to the FTC at ReportFraud.ftc.gov, which aggregates complaints to identify and shut down large operations, and file with the FBI as well. Do these in parallel with calling your bank, not after.
Stop Contact, Save Everything
Do not warn the recruiter. First screenshot every chat, email with full headers, phone number, profile, offer letter, check image, and transfer receipt, and capture the job posting and any vendor site before they disappear.
Call Your Bank and Payment App
Report the fake check and any transfer to your bank’s fraud team and the payment app at once. Ask them to attempt a recall or freeze and to document the bad check before it bounces.
Report to the FTC and IC3
File the job scam with the FTC and the FBI Internet Crime Complaint Center. Include the recruiter’s email, phone, the company impersonated, the vendor site, and every account your money touched.
Lock Down Your Identity
If you shared a Social Security number or bank details, place a fraud alert or credit freeze with the major bureaus, change passwords, and enable two-factor on affected accounts.
What to Gather Before You File
A complete file is the one investigators and our team can actually act on.
The difference between a report that sits in a queue and one that leads somewhere is detail. Before you file, pull the recruiter trail and the money trail into one place. On the recruiter side, save the exact email address and the full message headers, the phone number used to text or call, the chat-app username or handle, any LinkedIn or social profile, the name of the person and the company they claimed, the offer letter or onboarding form, and the address of any vendor site or application page they directed you to. On the money side, collect the check image front and back, the deposit record, every wire, app transfer, or gift-card receipt with dates and amounts, the name and account or routing details of whoever received your money, and any shipping labels or tracking numbers if you forwarded packages. Keep one clean, dated folder, because you will reuse it for the FTC, the FBI, your bank, and any attorney. The more precisely the identifiers and transfers are documented, the better the odds that the people behind the spoofed identity can be researched and named. If part of the contact was an email address, our guide on finding someone by an email address explains what that single identifier can reveal.
Where to Report Every Channel
File with all of these. Each one does something the others cannot.
| Where | What It Does | How to Reach |
|---|---|---|
| FTC | Aggregates job-scam complaints to spot and shut down large operations, and provides an identity-theft recovery plan if your data was exposed. | reportfraud.ftc.gov |
| FBI IC3 | The central federal intake for internet fraud, including recruitment impersonation, reshipping, and money-mule schemes that cross borders. | ic3.gov |
| Your Bank | May recall a recent transfer, freeze accounts, and document the fake check leaving your accounts. | Fraud department, in writing |
| Payment App | Can flag the recipient account and preserve transfer records under a law-enforcement request. | Support and fraud teams |
| The Job Platform | Takes down the fraudulent listing and the spoofed recruiter account, slowing the next victim. | Report-a-listing or trust-and-safety |
| The Impersonated Company | Confirms the recruiter was fake and may already track the lookalike domain abusing its brand. | Official careers or security contact |
Do not skip a channel because you assume nothing will come of it. Enforcement actions are built from large numbers of detailed complaints that let investigators connect one recruiter, one vendor site, or one receiving account to many victims. Your report may be the one that ties a cluster together. If a phone number was your main point of contact, our walkthrough on how to identify a scammer by a phone number shows what that detail can surface.
What Happens After You File
Set realistic expectations so you keep moving instead of waiting.
Filing a federal complaint does not trigger a phone call the next morning. The FTC and the FBI take in enormous volumes of reports and generally do not respond to each one individually; your complaint becomes data that analysts use to connect recruiters, vendor sites, accounts, and victims, and it becomes part of the record if an enforcement action or seizure later occurs. Save your reference numbers and every confirmation. Meanwhile, treat your case as active rather than closed. Keep your evidence folder current, watch for official notices, and be sharply skeptical of anyone who contacts you first claiming to have found your money or to represent an agency. Pursue the parallel tracks below instead of waiting on a single report to resolve, because the cases that go furthest are the ones where the victim kept building the file instead of going quiet. Identifying who was actually behind the offer is often the piece that turns a report into something a prosecutor or an attorney can use.
How the Recruiter and the Money Trail Get Traced
Two trails hide behind the borrowed company name. Both leave footprints.
The recruiter trail. A fake recruiter is never as anonymous as the spoofed company name suggests. The email they wrote from carries routing details in its headers, the phone number used to text and call is an identifier in itself, the chat handle and any social profile connect to other activity, and the vendor or application site they sent you to has a registration and hosting footprint. Even when a name is invented and a logo is stolen, those technical and contact identifiers are real, and they can be researched lawfully through public records and skip-tracing techniques to surface the person or operation behind them. That is the same investigative work behind our guides on how to investigate fraud and on locating the specific person who scammed you, applied to the recruiter instead of a wallet.
The money trail. Every variant of this scam ends with your funds moving to someone. A wire lands in a bank account opened in a real name. An app transfer credits a real recipient. Reshipped packages travel to a real forwarding address, and a “vendor” payment goes to a real merchant account. Many of these belong to money mules, people recruited the same way you were, but a mule is still a located, named individual with a footprint, and naming one can lead investigators a step closer to the organizers. Pulling the account, the address, or the merchant identity into a documented picture is where lawful skip tracing does its heavy lifting. A named, located individual changes the case: it strengthens your FTC and IC3 reports, gives a prosecutor or an attorney something concrete, and can open the door to a civil claim that a complaint number alone cannot support. If you only have a mailing address from the offer or the reshipping role, our guide on how to find someone’s address shows how that thread is pulled.
What Pursuing It Realistically Looks Like
Honest odds, and the legitimate paths that exist after a fake job offer.
It would be dishonest to promise a full refund, and anyone who does is lying. The truth sits between hopeless and easy, and it depends heavily on speed and documentation. The most reachable win is often a bank recall or chargeback when you act before a transfer settles, which is why the first forty-eight hours matter so much. Beyond that, a civil claim against an identified perpetrator, mule, or facilitator becomes possible only once you can name and locate a real person and any assets in their name, which is exactly where lawful skip tracing earns its place. Enforcement actions occasionally produce victim restitution long after the fact, built from the detailed complaints victims filed. And for some, a tax professional can advise whether a theft-loss treatment applies. None of these is guaranteed, all of them improve with a complete file and an identified individual, and several can run at the same time.
Don’t Get Hit Twice
The recovery scam targets people who already lost money to a job offer. Watch for these.
An Upfront Fee
Any service that wants payment before it returns a cent is a scam. Legitimate help is not pay-to-unlock.
A Guarantee
“We will get all of it back” is impossible to promise. Real outcomes depend on banks, the law, and the facts.
They Found You
Unsolicited contact from a “recovery agent,” especially one who already knows you were scammed, is a major red flag.
Another “Job” to Recoup
An offer to earn the loss back through a new gig, often paid by check again, is the same trap wearing a different hat.
Fake Government Ties
Claims of being “approved by” or “working with” a federal agency to recover funds for a fee are not how agencies operate.
Bank Logins or Gift Cards
No legitimate firm needs your online-banking password or asks you to “verify” by buying gift cards. Ever.
How People Locator Skip Tracing Helps
We trace the people behind the spoofed recruiter and the payment trail, lawfully.
Job Seekers
Identify the person behind the offer
Attorneys
Locate an identified mule or facilitator
Families
Help a relative who was targeted
Employers
Run down a brand-impersonation case
Fraud Teams
Tie an account to a real holder
Anyone Owed
Find a person before pursuing them
Fake job offers run on the same rails as other frauds, so the people behind them surface through the same lawful research that powers our full-spectrum skip tracing work. Send us what you have, even if it feels like nothing: a recruiter email, a phone number, a chat handle, the company they impersonated, a vendor web address, or the account or address your money or packages went to. We work strictly for lawful, permissible purposes, we never promise a recovery we cannot control, and we tell you honestly what the records can and cannot show. For a legitimate matter, an initial locate typically comes back within 24 hours.
Our Commitment
We do not sell false hope or “guaranteed recovery.” We do the lawful research most services skip: tracing the real people behind the spoofed recruiter, the vendor site, and the account that received your money, so your reports and any civil action carry weight. Honest, permissible-purpose skip tracing since 2004.
Frequently Asked Questions
I deposited a check and sent money back. What do I do first?
Contact your bank’s fraud department immediately, in writing, and report the fake check and any transfer you sent. Ask them to attempt a recall or freeze and to document the bad check before it bounces. Then save all your evidence and report the job scam to the FTC and the FBI Internet Crime Complaint Center. Speed is the biggest factor in whether a transfer can be stopped.
Can a fake recruiter actually be identified if the company was spoofed?
Often, yes. Borrowing a real company’s name does not erase the recruiter’s own identifiers. The email and its headers, the phone number, the chat handle, any social profile, and the vendor or application site all carry real footprints that can be researched lawfully through public records and skip-tracing techniques to surface the person or operation behind them.
Where exactly should I report a fake job offer scam?
Report it to the FTC at ReportFraud.ftc.gov and to the FBI Internet Crime Complaint Center at ic3.gov. Also notify your bank, any payment app you used, the job platform where you saw the listing, and the real company that was impersonated. Each channel does something the others cannot, and detailed reports help investigators connect victims to one operation.
Where did my money go, and can the recipient be traced?
Every variant ends with funds moving to a real account, a real merchant, or a real forwarding address, often belonging to a money mule who was recruited much like you. A mule is still a named, located individual with a footprint, and identifying one can move a case closer to the organizers and support a civil claim. Documenting the account, address, or merchant precisely is what makes that research possible.
Am I in legal trouble if I forwarded packages or moved money?
People who reship goods or move funds for a fake employer are usually victims who were deceived, but reshipping and money-mule roles can carry legal exposure. The safest step is to stop immediately, preserve everything, and report what happened to your bank and to law enforcement so the record shows you acted in good faith and came forward. This page is general information, not legal advice.
A company offered to recover my money for a fee. Is that legitimate?
Treat it as a second scam. Operations that demand an upfront fee, guarantee results, contact you out of the blue, want your bank logins, or pitch another “job” to earn the loss back are preying on victims. Legitimate help does not require pay-to-unlock, and no honest firm guarantees recovery.
What does People Locator Skip Tracing actually do on a case like this?
We work the human trail behind the offer. Using lawful public-records research and skip tracing, we help identify and locate the real people behind the spoofed recruiter, the vendor site, and the account or address your money or packages went to, producing a named, located individual that strengthens your report and any civil claim. We do not take custody of funds or promise recovery.
Is it too late if the fake job offer was weeks ago?
Not necessarily. Reporting is still worthwhile because enforcement actions and restitution can occur long after the loss, and identifying a perpetrator can support a civil claim or an active investigation. Acting sooner is always better, especially for stopping a transfer, but an older case is far from worthless.
Related Guides
More ways our investigation team can help.
- Is That Job Offer a Scam? How to Check
- How to Trace a Car-Deposit Scammer
- How to Identify a Fake-Check Overpayment Scammer
- How to Verify (or Unmask) a LinkedIn Recruiter
- How to Trace a Crypto-ATM Scammer
- How to Find a Rent-to-Own Scammer
- How to Track a Mystery-Shopper Scammer
- How to Trace a Task-Scam Recruiter
Hit by a Fake Job Offer? Start Tracing.
We trace the real people behind the spoofed recruiter and the payment trail, lawfully, so your reports and any civil case carry weight, typically with an initial locate within 24 hours. Contact us to get started.
Start Your Request →