Job scams: fake offers, task scams and money mule recruitment

A job scam is a fake job offer. It usually promises easy work, good pay and flexible hours, often from home. The real goal is something else: to take your money, collect your identity documents, or use your bank account to move criminal funds.

Job scams work because job hunting is already a process of trust. People expect to share a CV, answer messages from strangers and fill in forms with personal details. Scammers borrow that normal process and bend it.

This guide explains the main types, walks through a fictional example, and sets out how to check an offer and what official services say to do if something has already gone wrong.

How job scams work

There are four common shapes. Some scams mix more than one.

Task scams

Task scams are built like a game. Scamwatch’s job scam alerts and factsheet (2023 and 2024) describe the pattern:

1. Someone contacts you directly on an encrypted messaging app, or you reply to a job ad on social media.
2. A “trainer” helps you set up an account with the “company”, and often a cryptocurrency account.
3. You’re given “tasks”, such as rating products, boosting sales or leaving five-star reviews for hotels or tours. Small early earnings appear.
4. You’re then told to “recharge”, “purchase” or “top up” your account with your own money to finish a set of tasks, unlock higher commission or reach a new “level”.
5. You may be asked to recruit friends for bonuses.

The early payments are bait. They make the job feel real, so the later deposits feel like an investment in income that’s already arriving. The balance on screen keeps growing, but it’s only a number on a website the scammer controls, much like the dashboards on fake investment trading platforms. IDCARE says people may be told to pay fees before they can withdraw, and that group chats where members boast about their earnings may be run by scammers posing as workers.

Pay-to-start jobs

A simpler version asks for money before any work begins: a “starter kit”, training fee, equipment deposit or registration charge. Scamwatch’s 2024 alert describes work-from-home roles where people must pay upfront, with promises of a refund plus “commissions”. The AFP is blunt about this: legitimate employers “never ask for money upfront”.

Fake recruiters and identity theft

Some fake jobs don’t want money at all. They want your identity. IDCARE describes fake ads that use the name of a real business to advertise a job that doesn’t exist, on genuine job websites and social media. The “recruiter” asks for a driver licence, passport, tax file number or bank details, presented as “onboarding” paperwork. IDCARE says the recruiter may go silent once the documents are sent. Those details can then be used to open accounts or apply for credit in the person’s name. See identity theft explained.

Money mule recruitment

A money mule is someone who moves money through their own bank account on behalf of others. The AFP says mules may be recruited “knowingly or unknowingly”, and that employment scams are one route: they offer “quick and easy money for little work”, ask for an Australian bank account and promise commission. A 2020 AFP release described fake “local representative” roles involving invoicing or accounts processing, where money arrives in the person’s account and is sent on.

Romance scams are another route the AFP describes; see how romance scammers ask people to move money.

From the inside, this can look like an ordinary admin job. The money that arrives is usually stolen from someone else, and passing it on helps hide where it went.

The legal risk. The AFP says: “It is illegal to rent, buy or sell bank accounts.” It describes money laundering as a serious offence, and warns that people who act as mules, even unwittingly, may be committing offences. Whether any law applies in a particular case depends on the circumstances, and this guide can’t assess that.

A fictional example

This example is fictional. Names and the website are invented.

Aisha has been applying for part-time jobs online. A few days later, a message arrives on a messaging app from “Grace”, who says she recruits for an online review company and found Aisha’s profile. The company’s site, brightreview-jobs.example, looks polished, with staff photos and a careers page.

Grace explains the job: rate hotels online for about an hour a day, paid per task. There’s no interview. A “trainer” walks Aisha through creating an account on the site and a cryptocurrency wallet “for faster pay”. Her first set of tasks pays a small amount, and she’s added to a group chat where other “staff” post screenshots of big earnings.

On the third day, Grace says Aisha has been selected for a “premium” set. To unlock it, she has to deposit money, which will be returned with extra commission. Aisha deposits a modest amount. Her balance jumps. The next premium set needs a larger deposit. When she asks to withdraw, she’s told her account is “frozen” until she pays a “tax”. Grace also mentions a bonus for inviting friends.

Looking back, almost every step matches a warning sign official sources describe: contact out of the blue on a messaging app, no interview, a crypto account, small early payouts, deposits to “unlock” work, a withdrawal fee, and pressure to recruit.

Warning signs of a job scam

The details change, but the shape is familiar. Scamwatch and IDCARE describe these signs:

• The job finds you. An unexpected “work from home” offer, especially through an encrypted messaging app or a social media ad.
• Too easy, too good. Scamwatch lists good pay, “guaranteed income”, flexible hours and “no experience needed” among its signs.
• You pay before you earn. Any request for money for applications, training, kits, tasks or to “unlock” work.
• Hiring at high speed. Very fast recruitment with no interview, contract or reference checks.
• Paperwork too early. Requests for identity documents or bank details before a genuine offer or contract.
• It feels like a game. Scamwatch describes “levelling up” by completing tasks and paying more, often in cryptocurrency.
• Recruit your friends. Pressure to bring in others for a bonus.
• The website is slightly off. A site for a well-known brand that uses a different address from the brand’s real one.
• Your account as the job. An offer to receive money into your account and pass it on for a commission.

One sign on its own doesn’t prove a scam. Several together are a strong pattern. The general scam red-flag checklist covers signs that apply to any contact.

How to check a job offer

These checks come from what Scamwatch, IDCARE and the Australian Business Register (ABR) describe. None of them can prove a job is genuine on its own, but each one makes a fake harder to sustain.

Contact the employer independently

Based on Scamwatch’s and IDCARE’s guidance (checked October 2026):

1. Don’t use the links, phone numbers or email addresses in the message or ad.
2. Find the company’s official website yourself, for example by typing the name into a search engine and checking the address carefully, or by using an address you already know.
3. Look for the job on the company’s own careers page.
4. Call the company on a number you found yourself and ask whether the role and the recruiter are real.

Our phishing guide shows how to check a link before you open it, which helps when comparing a recruiter’s link with the company’s real address.

IDCARE also mentions running a reverse image search on recruiter or staff photos, which can show whether the same photo appears under other names.

Check the business on ABN Lookup

IDCARE suggests checking business registration and ABN status. The Australian Business Register’s ABN Lookup tool is free. Based on the ABR’s ABN Lookup FAQ (checked October 2026; the ABR’s site has the latest details):

1. Go to abr.business.gov.au.
2. Search by ABN, ACN or business name.
3. Check the ABN status. The ABR says “active” means the registration is current, and “cancelled” means it has been deactivated and is no longer valid.
4. Compare the entity name and any business or trading names with the name the recruiter used.
5. Note the state and postcode shown. ABN Lookup shows only the state or territory and postcode of the main business location, not a full address.

A real ABN doesn’t prove the job is real. IDCARE warns that scammers use the names of real businesses, so ABN Lookup is most useful alongside independent contact with the business.

Look at what you’re being asked to do

A quick test: does the “job” involve paying money, buying crypto, sending identity documents before an offer, or receiving and forwarding money? Scamwatch, IDCARE and the AFP each describe these as signs of a scam rather than employment. IDCARE also suggests talking an opportunity over with trusted family or friends before applying.

Common questions

I was paid for the first tasks. Doesn’t that mean the job is real? Not necessarily. Scamwatch describes small early earnings as part of the task scam pattern. The payments build trust before the deposits begin.

Is a job offer through a messaging app a scam? Not always, but Scamwatch lists unexpected job offers through encrypted messaging apps among its warning signs, and describes task scams that start this way. Contacting the company on details you find yourself is the check official sources describe.

Is it normal to give my tax file number when I apply? IDCARE warns that fake recruiters ask for identity documents such as a tax file number before any genuine hiring step. If you’re unsure whether a request is genuine, contacting the business on details you find yourself is the check official sources describe.

Can I get money back from a task scam? Scamwatch says upfront payments by bank transfer, PayID or cryptocurrency are unlikely to be recovered. Your bank is the place official sources point to first. Be wary of anyone who offers to recover it for a fee; see money recovery scams.

I think money went through my account for a “job”. What now? The AFP points to contacting your bank and reporting through ReportCyber. Whether any legal issue arises depends on the circumstances, and independent legal advice may help.

If it’s already happened

Scamwatch’s steps (from its job scam alerts):

1. Contact your bank or card provider immediately to report it and ask them to stop any transactions.
2. If you’ve shared personal details, contact IDCARE on 1800 595 160.
3. Report the scam to Scamwatch, and to the platform where you were contacted.

IDCARE also describes stopping all contact, contacting the issuers of any identity documents you sent, and checking your credit reports. Our identity theft guide explains how to get your free credit report.

The AFP says that if someone asks to use or “borrow” your bank account, say no, and that suspected money mule activity can be reported to police through ReportCyber. If money has passed through your account, the AFP points to contacting your bank.

Support. Scamwatch’s 2023 job scam alert points to the National Debt Helpline for financial hardship; Lifeline’s directory lists it on 1800 007 007 as a free, confidential financial counselling service. The AFP lists Lifeline (13 11 14) and Beyond Blue (1300 22 4636).

Where to report

Scamwatch takes reports of job scams at scamwatch.gov.au/report-a-scam. Cybercrime, including suspected money mule recruitment, can be reported to police through ReportCyber at cyber.gov.au. See where to report scams and cybercrime in Australia and first steps after a scam.