high severityPrevalence · ~12% of high-volume fake postings
Data-Harvesting 'Jobs' That Steal Your Identity
A fake employer collects your Social Security number, ID scan, and banking info under the guise of onboarding.
Not all fake jobs aim for a one-time payment — many exist to harvest enough personal data to open credit lines, file fraudulent tax returns, or sell complete identity packages on the dark web. The 'job' may feel real for several days; the scam is the onboarding paperwork.
Red flags
- 01Full Social Security number requested before background check is run
- 02Government ID (driver's license, passport) requested as image attachments
- 03Banking info (account + routing) requested before signed offer letter
- 04I-9 / W-4 form sent as a PDF attachment from a personal email instead of a real HR system
- 05No company email account set up for you, but full personal documents requested
Real-world example
"Welcome aboard! Please email us scans of your driver's license (front and back), Social Security card, voided check for direct deposit, and a completed I-9. Use the attached PDF and return everything by EOD so we can finalize your start date Monday."
Why this scam works
These documents look identical to legitimate onboarding requests. Real companies use systems like Workday, Rippling, or Gusto with secure portals — not PDFs over email — but candidates often haven't seen enough real onboardings to know the difference.
What to do
- 01Never email Social Security numbers, ID scans, or banking info — real HR uses secure portals
- 02If you already shared this info, freeze your credit at all three bureaus immediately (Experian, Equifax, TransUnion)
- 03File an identity theft report at identitytheft.gov and with your local police
- 04Set up an IRS Identity Protection PIN to prevent fraudulent tax returns
Run any suspicious posting through Sentari.
Free risk score in 12 seconds. No signup required.
Related scam patterns
Fake Recruiters on Telegram, Signal & WhatsApp
A scammer impersonates a recruiter from a real company and moves the conversation to encrypted messaging within minutes.
Company Impersonation: Fake Postings on Real Brand Names
A fraudulent posting uses a real company's name, logo, and JD format to lend legitimacy to a scam.
Fake Interview Apps That Install Malware
You're asked to install a 'proprietary interview platform' that turns out to be cryptominer or info-stealer malware.