“Congratulations! $45/hr data entry, work from home, start Monday.” Sounds great — especially on LinkedIn, Indeed DMs, or WhatsApp. But legitimate employers never ask you to receive a check and forward money to a vendor via Zelle. That pattern is a classic fake job / overpayment scam.
How the overpayment scam works
- Fake employer sends a check (often for too much)
- You deposit it — bank may show “available” funds temporarily
- They ask you to Zelle or wire part to a “vendor”
- The check bounces. You're out real money.
Red flags
- Job found you — you didn't apply through official careers page
- Interview was only over text or Telegram
- Pay seems too high for simple work
- Equipment purchase required before day one
- Any mention of Zelle, gift cards, or crypto for “vendors”
Paste the whole conversation into Job Overpay Check (built for paid-twice / equipment-check scripts) or ScamCheck for a full-message score.
Recruiting only over text is a warning
Real employers can message you—but serious roles still leave a trail: a company domain email, a careers page you can find yourself, video interviews, and paperwork that does not require you to buy equipment with your own money. A role that exists only inside WhatsApp, Telegram, or a random SMS is already on thin ice.
The fake check timeline (day by day)
- Day 0: Too-good offer, minimal interview
- Day 1: “Equipment check” or “client payment” arrives
- Day 1–2: Funds look available; they urge you to Zelle a vendor now
- Days later: Check bounces; bank reverses the deposit; your Zelle is gone
That delay is intentional. Scammers need you to move real money before the bank finishes processing a bad instrument.
What legitimate remote hiring usually looks like
- You can verify the company on a site you navigated to yourself
- Pay and role match public market norms for the work described
- Nobody asks for gift cards, crypto, or Zelle to a private person for “supplies”
- You are not told to keep the hiring secret from your bank or family
If you already sent money
Contact your bank immediately and explain a job-overpayment scam. Save messages and names. Do not send more funds to “unlock” a refund. Report the account on the platform where you were recruited.
Quick checklist before you deposit anything
- Can you find the company careers page yourself (not a link they texted)?
- Did hiring skip every real interview step?
- Are you asked to move money, buy gift cards, or “keep a cut” of a check?
- Does the contact only live on WhatsApp, Telegram, or SMS?
Any “yes” on the money-moving questions is a hard stop. Paste the conversation into a free checker below before you reply again.
How do you know if a job offer is a scam?
Use this 2026 checklist. One “yes” on the money questions is enough to stop:
- Hiring lived only in SMS, WhatsApp, or Telegram — no company-domain email you can look up yourself
- They send a check for equipment, a client, or a “signing bonus” and tell you to keep a cut
- You must Zelle, wire, gift-card, or crypto a vendor, trainer, or “HR”
- Pay is far above the work ($40–$60/hr for simple data entry, no skills check)
- They found you — you never applied on a careers page you opened yourself
The U.S. Federal Trade Commission and banks have warned about fake-check job overpayments for years. The script has not gone away; it moved onto LinkedIn DMs and WhatsApp. Report attempts at ReportFraud.ftc.gov.
I got paid twice from my job
Sometimes the same scam hits people who already have a real job: a “payroll error” or second deposit, then a rush to refund extra by Zelle. Do not send that money back on their instructions. Call payroll or your bank using a number you already trust. For that exact script, use free Job Overpay Check or the longer “I got paid twice” guide.
FAQ
- How do you know if a job offer is a scam? Text-only hiring plus a check you must forward is the tell. Real companies do not need your personal Zelle to pay their vendors.
- I got paid twice from my job. Treat “refund the extra by Zelle” as a scam until payroll confirms it on an official channel.
- The check had a real bank logo. Logos are easy to copy. Clearing is what matters—and scammers exploit temporary availability.
- They video-called with a filter / bad camera. Still verify the company independently. Deepfakes and stolen headshots exist.
- Is every high-paying remote job fake? No—but payment instructions that make you forward money are a hard stop.
- They said the check is for equipment I get to keep. Real employers ship gear or reimburse with receipts. They do not need you to Zelle a stranger first.
- Where do I report this? Report the account on the platform where they recruited you, tell your bank if money moved, and file at ReportFraud.ftc.gov.