If you just realized the "job" was a scam, do three things first: stop all contact and don't send another dollar or document; if you gave up your Social Security number, place a free credit freeze at all three bureaus today; and if you deposited a check the "employer" sent you, call your bank before you spend or move a cent of it. The rest of this guide walks through each move in order, plus how to report it so you're on record. One rule exposes every version of this con: a legitimate employer never asks you to pay them, buy gift cards, or push money through your own bank account. If that happened, it was a scam, and what you do in the first 24 to 72 hours is what limits the damage.
First, pin down exactly what the scammer got
Your next steps depend entirely on what you handed over, so take two minutes and write down precisely what the scammer received. Each item triggers a different fix, and the order matters. Be honest with yourself here. People tend to downplay it ("I only sent a photo of my license"), and that's how a one-week annoyance turns into a year of cleanup.
What did they actually get?
- Your Social Security number, or full date of birth plus address — highest risk; go straight to the credit-freeze steps below.
- A deposited check, or money you wired or sent — a financial-loss scam; your bank is the priority call.
- Bank account or routing numbers — treat the account as compromised and ask the bank to monitor it or reissue the account number.
- A photo of your driver's license or passport — these get reused to open accounts; flag it and watch for new-account fraud.
- Gift card codes, crypto, or Zelle/Cash App/Venmo payments — usually unrecoverable, but still worth reporting (details below).
- Just your name, email, and resume — low risk; expect more phishing, so stay alert but don't panic.
If you gave a scammer your Social Security number
An exposed SSN is the one that keeps people up at night, because criminals use it to open credit cards, take out loans, or file a tax return in your name before you do. A credit freeze is your best defense and it's free, takes about 15 minutes total, and blocks the most common abuse: opening new accounts. A freeze does not lower your credit score and doesn't touch your existing cards or loans. You simply unfreeze (also free, usually instant online) whenever you legitimately apply for credit.
Freeze your credit at all three bureaus
You have to do this at each bureau separately — a freeze at one does not carry to the others:
- Equifax — equifax.com/personal/credit-report-services, or call 1-800-685-1111.
- Experian — experian.com/freeze, or call 1-888-397-3742.
- TransUnion — transunion.com/credit-freeze, or call 1-800-916-8800.
- Create an account or use the freeze portal at each, and save the PIN or login they give you — you'll need it to lift the freeze later, and re-proving your identity is a hassle if you lose it.
- Consider adding a free fraud alert, which tells lenders to verify your identity before issuing credit. Unlike a freeze, you only request it at one bureau and that bureau notifies the other two. It's a lighter layer, not a replacement for the freeze.
After freezing, pull your reports at annualcreditreport.com (the only federally authorized free source) and scan for accounts or hard inquiries you don't recognize. As of 2026 you can get reports from all three bureaus for free every week, and Equifax offers extra free reports through 2026 — check the site for current terms. If the scammer mentioned tax forms, payroll, W-9s, or "onboarding paperwork," request an Identity Protection PIN from the IRS at irs.gov/ippin; it blocks anyone from e-filing a federal return under your SSN. Anyone with an SSN who can verify their identity can opt in. Then set a reminder to re-check your reports at 30 and 90 days, since stolen data sometimes surfaces months later.
If you deposited a fake check
This is the classic overpayment trap: the "company" mails or emails a check to "buy equipment" or "process payments," then tells you to deposit it and wire part of it back or buy gift cards with it. The check looks real, and your bank may show the funds as available within a day or two. That is not the same as the check clearing. When it bounces, often a week or two later and sometimes longer, the bank reverses the full amount, and any money you already sent is gone. Federal funds-availability rules require banks to release deposited money fast, but quick access never means the check is good.
Do this immediately, in order:
- Do NOT spend, wire, Zelle, or buy gift cards with any of it, even if your balance shows the money sitting there.
- Call your bank's fraud line now — the number on the back of your card — and say you deposited a check you believe is fraudulent.
- Ask them to flag the deposit and tell you the exact date the check is expected to fully clear, so you know when you're truly in the clear.
- If you already sent money back, report it to the bank the same day. A wire recall occasionally succeeds if you act within roughly 24 to 72 hours.
- Keep the physical check, the envelope, and every message — they're evidence for your bank and for the reports below.
If you only deposited the check and sent nothing back, your loss may be zero once it's reversed. If you already forwarded funds, you'll likely owe your bank that amount. Either way, tell them the truth; pretending it was an ordinary check only makes the conversation worse and can complicate any claim.
If you wired money, sent crypto, or bought gift cards
Scammers love these methods precisely because they're hard to reverse — that's the entire point. Speed occasionally helps, so act anyway, but set your expectations accordingly.
Try recovery by method:
- Wire transfer — call your bank and request a recall immediately; the sooner you call, the better the odds.
- Gift cards — call the issuer (number on the back), report it as used in a scam, and ask whether any unspent balance can be frozen. Keep the card and your receipt.
- Zelle / Cash App / Venmo — report the transaction in the app and call your bank. Once a payment is accepted, reversal is rare, but the report still creates a record.
- Crypto — generally unrecoverable, but save the wallet address and transaction ID; investigators sometimes trace funds across exchanges.
- Watch for "recovery scammers" who contact victims promising to claw the money back for a fee. That's a second scam targeting the same list. Never pay anyone who promises to recover your funds.
Report it — for the record and for the next victim
Reporting won't always recover money, but it creates an official record (which banks and the IRS may ask for), feeds investigators, and can get the scammer's account or listing shut down before they hit the next person. If your SSN was stolen, one report in particular hands you a recovery plan and specific legal protections.
Where to report, and why each one matters:
- IdentityTheft.gov (FTC) — start here if your SSN or ID was exposed. It builds a personalized recovery plan and an FTC Identity Theft Report you can use to dispute fraudulent accounts.
- ReportFraud.ftc.gov — the FTC's general report for any job scam, even when no identity theft occurred.
- Your bank — file the formal written fraud claim, not just the phone call you already made.
- FBI IC3.gov — the Internet Crime Complaint Center, especially for wire, crypto, or larger losses.
- The platform where you were contacted — report the fake listing or profile on LinkedIn, Indeed, Facebook, WhatsApp, or wherever it started, so it gets taken down.
- Your state Attorney General, and the U.S. Postal Inspection Service if a paper check or anything by mail was involved.
Keep one simple folder: screenshots of the chat, the offer letter, the check, payment receipts, the scammer's email addresses and phone numbers, and every confirmation number you collect. If fraudulent accounts show up later, an FTC Identity Theft Report plus a police report (some creditors still ask for one) is your strongest lever for getting bogus charges removed.
Lock down your other accounts
Scammers reuse whatever they learned about you. If you used a password anywhere the scammer could now guess, or you clicked a link and typed in credentials, change those passwords and turn on two-factor authentication — email and banking first. Your email is the master key: control it, and you can reset almost everything else. Expect follow-on phishing in the days after a scam: fake "fraud department" calls, texts about a "pending payment," emails asking you to "verify" details. When in doubt, hang up and call the institution back using the number on its official website, not the one in the message.
How to spot the next fake job before it costs you
Treat any one of these as a hard stop:
- You're asked to pay for equipment, training, a background check, or a "starter kit" — real employers pay you, not the reverse.
- You're told to deposit a check and send part of it back, or to receive and forward payments — that's check fraud or money laundering, with you as the fall guy.
- The interview is text-only on Telegram, WhatsApp, or chat, with no video and no verifiable company contacts.
- An offer arrives with no real interview, or the pay is wildly high for the work described ($35/hour to retype documents from home).
- The recruiter uses a free email (gmail, outlook) for a "corporate" role, or the company's web domain was registered only weeks ago.
- They rush you, manufacture urgency, or demand your SSN and bank details before any genuine hiring step.
Verify independently: find the company's real website on your own, then call its main line to confirm the recruiter and the role actually exist. A legitimate offer survives you slowing down to check; a scam falls apart. Finally, laws, agency processes, and the exact reporting tools above can change, so confirm the current steps with the official source — the FTC, IRS, your bank, or your state Attorney General — before you act, and talk to a CPA or attorney if real money or your tax return is on the line. If you've been hit, you're far from the first; moving fast on the steps here is what keeps a bad day from becoming a bad year.