When the "job" is the scam: fake hiring that steals your identity, not your money

We usually picture a job scam as a fake check you deposit, or a fee you’re asked to pay to start. But there’s a version where no money moves at all — at least not yours, not yet. The entire “job” exists to collect your identity. You apply, you interview, you’re hired, you fill out the paperwork — and the only real transaction was you handing over the keys to your financial life.

How the scam works

The mechanics are well documented by the FTC and FBI:

• The unsolicited offer. It often arrives through LinkedIn, Indeed, or a text — frequently in the name of a real, well-known company. The FBI describes criminals exploiting recruitment sites to “impersonate legitimate businesses” and defraud job seekers, and the FTC has seen scammers who “take outdated ads from real employers, change them,” and repost them.
• The paperwork-first ask. Instead of selling you on the role, they ask for sensitive data up front. The FTC warns they’ll “ask for your personal information, like your driver’s license, Social Security, or bank account number, to fill out employment paperwork. And they want it before they’ll answer your questions about the job.”
• The elaborate stage set. This isn’t always a sloppy email. Scammers “go to elaborate lengths,” the FTC notes, running “fake online job interviews” and “phony onboarding portals where they ask new hires for Social Security numbers and bank account information, supposedly for direct deposit of paychecks.” The FBI has found fraudulent postings using “a spoofed website domain,” “intended to steal Personally Identifiable Information.”
• The payoff. With your SSN, ID, and bank details, a thief can open accounts, file fraudulent tax returns or unemployment claims, and more — often long before you realize the “job” was never real.

Why this one slips past us

The reason it works is that it doesn’t feel like a scam in the moment. No check bounces, no fee is charged — you think you got hired. The harm is deferred, surfacing weeks or months later as accounts and debts in your name. That delay is exactly what makes the up-front habit so important: by the time the consequence appears, the data is long gone.

How to spot it

The cluster to recognize: an unsolicited offer (often a big-name company) + a request for SSN, ID, or bank details before a real interview or offer + a slick portal that resists basic questions. Legitimate hiring runs the other way around — questions and an offer first, sensitive paperwork only after you’ve accepted.

What to do instead

The move is Go Direct: don’t trust the recruiter who contacted you — verify the employer through channels you find yourself. The FTC’s advice is concrete: “never give out personal information before doing some research,” and “contact the company directly using a phone number you know to be legitimate — not one you got from the recruiter,” or go to the company’s real website. Confirm the role and the recruiter actually exist there before anything sensitive leaves your hands.

And hold the line on the core rule: your Social Security and bank numbers are onboarding details for after a confirmed offer — never a screening step. If you’ve already shared them, treat it as a breach: this is where Lock the Front Door and a recovery plan at IdentityTheft.gov come in — see what to do after a data breach and the free credit freeze.

This is the identity-theft cousin of the money-out job scams: the fake-check overpayment, the task “pay to get paid” scam, and the recruiting text decoded line by line. For more, see the named defense moves or test your eye on the 60-second quiz.