Fake Job Scams

Legitimate hiring is slow on purpose. A real company posts a role on a careers page you can type yourself, interviews on video or in an office, and pays you on a payroll system after paperwork that they already have a legal reason to collect. Fake-job operators invert that sequence. They skip the public posting, skip the company domain, and skip the delay — because delay is when you would search the firm and notice it does not exist. Speed is the exploit. "We need someone this week" is not urgency from a staffing crunch. It is a timer on your skepticism. The first product they sell is identity: you as someone who almost has a job. Once you are emotionally hired, the next asks feel like onboarding instead of theft. Buy software / a laptop / crypto "for client refunds" and we reimburse Friday. Send a passport photo and a selfie-with-ID over chat so HR can "start background." Pay a $90 training or uniform fee. Each ask is small relative to the fantasy salary. That is the mechanism — not a clever exploit against a careers site. You volunteer the loss because the story says you are already an employee.

Channel lock matters as much as the story. If the entire relationship lives on WhatsApp or Telegram with a personal number, there is no company mailbox to spoof-check, no calendar invite from a corporate domain, no switchboard you can call from the website. The scammer chose a chat app because it is hard for you to verify and easy for them to vanish. A Gmail or Outlook.com address claiming to be "HR at Northbridge Analytics" is the same lock with a different skin: anyone can register that mailbox. The careers page you type yourself is the control. If the role is not there, the recruiter is not HR. If the only "proof" is a logo in a chat header, that is clip-art, not a company.

Too-good pay: remote data-entry, "crypto clerk," "payment agent," or "reshipping coordinator" at several times local wages with no skills and almost no interview is not a hidden job board. It is priced to override doubt. Real junior roles are competitive and specific. Vague duties plus luxury pay is the tell. Interview on WhatsApp only: a first ping on LinkedIn can be real; a full hire that never leaves chat, never uses a company email, and never does a camera interview is not. "Camera is broken, we trust you" is not flexibility. It is hiding the face that would not match a stolen profile photo. "Buy a laptop / phone / software, we will reimburse": sometimes they send a fake check, you deposit it, you wire the leftover "vendor payment," then the check bounces and you owe the bank. Sometimes there is no check — they just want you to buy equipment from their "vendor" (them). Money leaves you first either way. Real employers issue equipment or expense after you are on payroll, through channels they already pay. They do not need you to purchase USDT gift cards for "client refunds" in week zero. If the job is moving other people's money before you have a signed offer and a real company identity, you are being recruited as a mule, not as staff. Refuse. That is not a task. It is a crime they want your name on.

ID photo over chat: a passport, national ID, or selfie-with-document sent to a stranger on WhatsApp is identity theft inventory, not HR. Real I-9 / KYC / right-to-work checks happen after an offer, on systems the employer can be sued over, not as a JPEG in a disappearing chat. If they need identity before you can even see a contract, they need your identity more than they need you. Check the careers page, not a random Gmail: type the company domain yourself (or search the official site, then type what you found). Find the role. Find a switchboard number on that same site — not a number the chat provided. Call and ask whether this recruiter and this req exist. LinkedIn "employees" with three connections and a stock photo are not corroboration. The page you typed is.

Copy the block onto paper or into a file you own. Score a fictional offer (the sample in the comments) or one unsolicited message already sitting in YOUR WhatsApp / email. You are naming flags and a refuse action. You are not messaging the sender to "play along," not sending a test ID, and not posting as a fake recruiter. If nothing in your inbox matches, still fill the sample lines — the skill is the pause, not a live sting.

mkdir -p "$HOME/cyberlium-lab"

{
  echo "date: $(date -Iseconds 2>/dev/null || date)"
  echo "=== channel ==="
  echo "whatsapp_or_telegram_only: yes/no"
  echo "company_email_domain_or_only_gmail: "
  echo "video_interview_happened: yes/no"
  echo "=== pay vs reality ==="
  echo "too_good_pay_flag: yes/no"
  echo "duties_specific_or_vague: "
  echo "=== money direction (must be IN to you, on payroll, after offer) ==="
  echo "asked_to_pay_fee_or_buy_gear: yes/no"
  echo "asked_to_move_client_funds_or_crypto: yes/no"
  echo "=== identity over chat ==="
  echo "id_photo_or_selfie_with_id_requested: yes/no"
  echo "=== verify path (you TYPE the site — you do not trust their link) ==="
  echo "careers_page_url_i_typed: "
  echo "role_listed_there: yes/no/company_does_not_exist"
  echo "=== refuse decision ==="
  echo "safe_action: stop / do_not_send_id / do_not_pay / report_in_app"
  echo "ethics: did not send documents, money, or run a fake job desk"
} > "$HOME/cyberlium-lab/fake-job-refuse.txt"
chmod 600 "$HOME/cyberlium-lab/fake-job-refuse.txt"

You now treat too-good pay, chat-only interviews, "buy gear we reimburse," ID photos over chat, and random Gmail "HR" as one funnel: hope, then money or documents out. The careers page you type is the gate. Next — Crypto & Investment Scams — the same trust-then-money pattern shows up as romance-to-invest, fake profit dashboards, withdrawal "taxes," and guaranteed returns that cannot exist.