“A few clicks, great daily pay”: the fake job that asks you to deposit money

The message is often brief: “We are hiring remote workers. Flexible hours, daily pay.” There is no CV, interview or difficult assignment. You only have to like some videos, rate products or press an “optimise” button. The first commission appears on screen immediately. That small success is what makes the story begin to feel real.

This is a task scam. Its purpose is not to obtain free work from the victim. It is to persuade them to deposit their own money into a system that merely pretends to be an earnings platform.

How an apparent job turns into debt

The US Federal Trade Commission describes a recurring pattern. An unexpected message offers work rating or “boosting” products. A dashboard shows earnings rising. After a few tasks, a condition appears: to unlock the next set or withdraw the balance, the worker must deposit their own money, often in cryptocurrency.

The first amount may be small. A criminal may even permit a modest withdrawal because a successful payment buys trust. Later comes a “premium task”, negative balance, tax or verification fee. Every new payment is said to be the last. The number in the app keeps increasing, but it is only a display controlled by the scammer.

The FBI has also warned about work-from-home offers that combine simple clicking, a confusing commission structure and cryptocurrency payments. The absence of a normal hiring process is not convenience; it prevents the questions that a genuine interview would produce.

Why a sensible person can get drawn in

The scam does not begin by asking for a life-changing sum. It begins with an easy action and a reward visible on screen. Several ordinary human reactions do the rest:

• a small successful withdrawal makes the system feel proven;
• after completing twenty tasks, losing the displayed “earnings” feels wasteful;
• a group full of success messages creates a false sense of community;
• a handler says there is only one missing step;
• embarrassment after the first deposit makes it harder to ask someone else for a view.

This is not an intelligence test. It is a designed journey that builds commitment and moves the boundary one small step at a time.

Five questions before accepting a job from a message

Before sending a document or opening the work panel, ask:

1. Is the vacancy listed on the company’s official website?
2. Does the recruiter use a company domain, and can the main office confirm them?
3. Was there a normal discussion of the role, contract, pay and manager?
4. Does the “employer” want the candidate to pay first, buy cryptocurrency or receive and forward someone else’s money?
5. Does the reward make economic sense for the effort involved?

One rule closes most of the trap: an employee does not pay an employer to unlock wages. A request to route funds through a personal bank account is equally dangerous. It may draw the recipient into moving money taken from other victims.

What to do if you are already involved

Do not pay the “final fee”, and do not hire a service promising to recover cryptocurrency for an advance payment. The FBI notes that recovery offers can be another scam. Capture the conversation, profile, website, wallet addresses and transaction records. Preserve the evidence before telling the scammer what you intend to do.

Contact the bank, exchange or payment provider used for the transfer immediately. Ask whether the transaction can be stopped or flagged, although recovery is not guaranteed. Report the matter to the police and to the platform where contact began. A fraudulent link or page can also be reported to CERT Polska when the incident concerns Poland.

If you shared an identity document, bank details or a password, treat this as an identity-theft risk too. Change any reused passwords, add a second factor to email and monitor accounts and follow-up messages closely. The same group may return as a “lawyer”, “police officer” or fund-recovery specialist.

Source facts and Breachroad’s conclusion

The mechanics of simple tasks, a fictitious balance and a required deposit are documented by the FTC and FBI. Breachroad’s recommendation is to discuss an offer with another person before transferring money: a short conversation breaks the isolation on which the scam depends.

Remote work itself is not suspicious, and a recruiter’s LinkedIn message or phone call can be genuine. The hard boundary is an employer that cannot be verified and asks for money, cryptocurrency, codes or use of a personal account to move funds.

Pair this guide with our advice on recognising phishing and the case study of fake recruitment that installed macOS malware. We also offer decision-based cybersecurity training for HR teams and staff, without technical scare tactics.