How to Track a Mystery-Shopper Scammer

The pitch is built to look like easy, flexible income. You answer an ad, a text, an email, or a social-media post recruiting “secret shoppers” or “mystery shoppers” to evaluate stores, restaurants, or money-transfer counters. Soon a check arrives, usually for somewhere between two and four thousand dollars, with instructions that feel official: deposit it, keep a couple hundred as your pay, and use the rest to complete your first assignment. That assignment is almost always to wire money through a service like Western Union or MoneyGram and rate the experience, or to buy gift cards and report back the card numbers and PINs. Either way, you are told to act fast, because the “evaluation window” is short.

The entire trick rides on one piece of banking reality. Under federal funds-availability rules, your bank generally has to let you access a deposited check’s money within a day or two. But making funds available is not the same as the check clearing. A counterfeit or stolen check can take days or even weeks to be returned unpaid, and when it bounces, the bank reverses the full amount and holds you responsible, because you are the one who deposited it. The scammer is counting on you to wire the “extra” money or hand over gift-card codes during that gap, while the deposit still looks real. The hundreds you thought were your pay, plus whatever you forwarded, all come out of your own pocket. There is no employer, no store to evaluate, and no second assignment.

The single most important move is simple: do not send anything else. If you have not yet wired funds or bought the gift cards, stop there, and the scam mostly collapses. If you already have, the priority shifts to documenting everything and reporting fast. File a complaint with the Federal Trade Commission and, because these offers reach victims by email, text, social media, and job boards, file with the FBI Internet Crime Complaint Center as well. The FTC also publishes plain-language guidance on mystery-shopping scams that is worth reading so you know exactly what you are dealing with.

The document trail. A counterfeit check is not as anonymous as it looks. The routing and account numbers often belong to a real business whose account was compromised or whose checks were copied, and the printed company name, the envelope’s return address, and the postmark all narrow where the mailing originated. The bank named on the check can confirm it is being impersonated and may already be tracking a wave of fakes. None of this names the scammer by itself, but together it builds a picture of the operation, and our investigators organize and cross-reference those identifiers so your report carries usable structure rather than loose scraps. This is the same disciplined approach behind our broader guidance on how to investigate fraud.

The human trail. This is the part almost no one works, and it is where People Locator Skip Tracing fits. Behind the fake company are real people with real footprints: the person who collected the wire under a name and at a pickup location you can document, the individual whose phone number or email recruited you, and sometimes a domestic “money mule” whose account the funds passed through. Those identifiers can be researched lawfully through public records and skip-tracing techniques to surface a real name, current address, and known associates. If all you have is a phone number, the work mirrors our guide on identifying a scammer by phone number; if you only have an email, it tracks our approach to finding someone by their email address; and if money clearly moved, a lawful search for hidden assets can show whether a located person has anything worth pursuing. A named, located individual changes everything, because it gives your IC3 report, a prosecutor, or your attorney something concrete to act on, and it is the foundation any civil claim is built on. The same lawful methods sit behind our work on finding the person who scammed you.

The fake-check mystery-shopper scam runs on the same rails as many other frauds, so the people behind it surface through the same lawful research that powers our work on finding someone who scammed you, our handling of a phone-scam caller investigation, and full-spectrum skip tracing. When a located person matters for service of process or a demand, an accurate, current address located through public records is often the final piece. Send us what you have, even if it feels like nothing: a phone number, an email, a username, the name on the check, the company they claimed to be, or the name and location a wire was picked up. We work strictly for lawful, permissible purposes, we never promise a recovery we cannot control, and we tell you honestly what the records can and cannot show. For a legitimate matter, an initial locate typically comes back within 24 hours.