Scam library · Jobs · Banking & payment apps
Fake check job scam: buy equipment from our vendor
You've landed a remote job, maybe after a chat interview. Your new manager says they'll send a check to cover a laptop and software. Deposit it, then pay their approved vendor through Zelle, a payment app or crypto.
The check is fake. It can look like it cleared, then bounce days later. You're left owing your bank the money you sent to the 'vendor'.
What the message looks like
From: HR Department <onboarding.hr.team@outlook[.]com>
Subject: Welcome aboard: equipment check enclosed
Congratulations on your new role as Remote Data Entry Clerk! Attached is a mobile check for $3,850 to purchase your work station.
Please deposit via mobile banking, then send $3,400 to our certified equipment vendor via Zelle today so your laptop ships in time for training.
How this scam works
By law, banks have to make deposited funds available quickly, often within a day or two. That doesn't mean the check is good. Fake checks can take weeks to be discovered, and the FTC warns that you're responsible for the full amount when they bounce.
The same scam appears in overpayment schemes, 'mystery shopper' jobs, and as a 'car wrap' offer. Anything that asks you to deposit a check and send part of the money somewhere else follows the same pattern.
Red flags
- You're paid before you've done any work, by check.
- You must send part of the money to someone else.
- A 'vendor' that only takes Zelle, gift cards, crypto or wire.
- Free email addresses for HR or hiring managers.
- Pressure to send the money the same day.
How to tell it’s fake
- Never send money from a check you just deposited, no matter what the bank app shows.
- Call the employer through the number on its official website and ask HR whether the job exists.
- Ask your bank to verify the check with the issuing bank, not just to deposit it.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- If you haven't deposited the check, don't. Report the job to ReportFraud.ftc.gov.
If you paid
- Call your bank immediately and ask them to stop or recall the payment. Report the check to the bank whose name is printed on it.
If you shared personal info, a password or a code
- If you gave your Social Security number or bank login, place a credit freeze and change your banking password.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
Scam Guard reads job emails and messages you have open in Chrome or Edge on your computer and recognizes the fake check pattern: a check for equipment, a vendor to pay, pressure to act today. It warns you before you send a cent. A job that seems legit is exactly when an expert second look is worth it.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Questions people ask
- The check cleared. Is it safe to spend?
- Not necessarily. 'Available' funds aren't the same as a check that's been verified. Fake checks can bounce weeks later.
- Will I have to pay the bank back?
- Usually yes. When a fake check bounces, the bank takes the full amount from your account.
- Do real remote jobs send equipment checks?
- Real employers ship equipment or reimburse you after you buy it through normal payroll. They don't ask you to forward money.