Anatomy of a scam: the "we saw your resume" job text, dissected line by line
A cheerful text offers a remote job at $300–$700 a day, no experience needed — just reply YES. It is one of the most commonly reported job scams there is. We take one apart line by line, and show where the trap actually springs.
This is the next in our series taking a single scam apart line by line. Our subject is one of the most commonly reported job scams there is: the unsolicited job-offer text. It arrives sounding like good news — a real company, real money, a job you can do from your couch — which is exactly the disguise. Here’s a representative example; the company is invented.
+1 (415) 555-0148: Hi! I’m Megan with TalentBridge Recruiting. We saw your resume and you’re a great fit for a remote Online Assessor role — $300–$700/day, flexible hours, no experience needed. Interested? Reply YES to begin onboarding on WhatsApp.
One friendly message. Five separate hooks. Let’s mark each.
An unknown number, a job you never applied for
It comes out of nowhere, from a number you don’t know, about a job you never sought. That alone is the tell. The FTC’s guidance is unambiguous: “Real employers will never contact you that way” — meaning unprompted by text, WhatsApp, or Telegram. Legitimate hiring starts with you applying; a job that finds you first, cold, on your phone is running the script backwards.
”We saw your resume” — borrowed legitimacy
This line does the emotional work. It reframes a mass text as a personal, earned approach — they sought you out. In reality it’s sent to thousands of numbers at once. The FBI notes scammers “impersonate personnel from different departments, including recruiters, talent acquisition, human resources,” often hiding behind a company name or a look-alike domain. The name you recognize is the costume, not the caller.
”$300–$700/day, no experience needed” — pay with no job
Notice what’s missing: any description of the actual work. The FTC points out that fake recruiters “mention pay (sometimes daily or weekly rates) without any details on the actual job.” High, specific pay for vague, easy, no-experience work is the bait — generous enough to be tempting, hazy enough that there’s nothing concrete to check. (It’s the too-good rule in a recruiter’s voice.)
”Reply YES to begin onboarding” — the engagement hook
There’s no link here, and that’s on purpose. The FTC explains scammers “ask you to reply with YES or INTERESTED” precisely because “they want you to engage so they can scam you.” Replying does two things: it confirms a real person is on the line, and it pulls you off SMS into a private chat — the staging ground for everything that follows.
”on WhatsApp” — moving you somewhere private
The shift to an encrypted chat app is where the trap actually springs. Out of sight, the “onboarding” turns into the ask. The FBI describes how these fake employers get victims “to provide them with personally identifiable information (PII), become unwitting money mules, or to send them money,” at an average loss near $3,000. Some send a check to deposit and ask you to wire part back; some hand you “tasks” that eventually require you to deposit your own money. Different scripts, same destinations: your money, your identity, or your bank account used to move someone else’s crime.
How to spot it
The tells are in the box below, but the engine is constant: an unrequested offer + great pay for vague work + a nudge to engage + a move to private chat. Swap the role, the rate, or the app, and it’s the same machine. Learn the machine and you don’t have to assess each cheerful new pitch on its merits.
What to do instead
The free move comes first (see the defense box). The habit is Never Pay to Get Paid: a genuine job, prize, or role never needs your money first, so the moment “onboarding” involves a fee, a check to deposit, or your own deposit to “unlock” pay, it’s a scam. Don’t reply — not even “YES” or “STOP” — because any response confirms your number is live. If a real company is named, go to its official site yourself and apply there. The “deposit this check” version is dissected in the fake-check job scam, the “do tasks to earn” version in task scams, and the “forward packages” version in reshipping and money-mule jobs. For more, see our defense moves and the 60-second quiz.
- An unexpected text, WhatsApp, or Telegram message offers a remote job you never applied for, often claiming "we saw your resume".
- It promises high daily or weekly pay for easy, no-experience work — but gives no real detail about the actual job.
- It asks you to reply "YES" or move to a chat app to "start onboarding", and later steers toward sending money or sharing personal details.
- Don't reply — not even "YES" or "STOP". Any response tells the scammer a real person is reading.
- Real employers don't hire through random texts or chat apps; treat an unsolicited job text as a scam by default.
- Never pay a fee, buy "equipment", or deposit a check and send part back. A real job never needs your money first.
- If a company name is mentioned, verify it yourself through its official website and apply there — never through the text.
These texts land hardest on the people least able to shrug them off — someone between jobs, a student, anyone hoping the next message is the one that changes things. That hope is precisely what’s being farmed. What steadies me is remembering the shape of real hiring: companies make you chase them, not the other way around. A genuine, well-paid, no-experience job does not arrive unrequested on your phone with a smiley face. The instant a job ’offer‘ shows up before any application, I treat the enthusiasm itself as the warning — and I don’t reply, I delete.
Sources
Frequently asked
They said they saw my resume on a job site. Doesn't that mean it's real?
"We saw your resume" is a standard opening line, not proof of anything — it's designed to make a cold, mass text feel personal and earned. The FTC is blunt that "real employers will never contact you that way," meaning out of the blue by text, WhatsApp, or Telegram. A genuine recruiter who found your resume can be verified through the company's official site; a scammer needs you to take their word for it.
It just asked me to reply "YES" — there was no link. How is that dangerous?
Skipping the link is deliberate. The FTC notes scammers "ask you to reply with YES or INTERESTED" because "they want you to engage so they can scam you." Replying confirms your number is live and moves you into a private chat where the real asks happen — sending money, depositing a fake check, or handing over personal details. The danger isn't in that first text; it's in the conversation it opens.
What are they actually after?
Usually your money, your identity, or both. The FBI warns that fake "employers" persuade victims "to provide them with personally identifiable information (PII), become unwitting money mules, or to send them money" — with PII used to open accounts or commit further fraud, and — in the FBI's 2020 alert — an average reported loss of nearly $3,000 per victim. Whatever the cover story, it ends at one of those three doors.