Threat Intelligence Directory
Social Engineering

Fake Remote Job Offer Scam

Attack Trigger

Promise of easy, high-paying remote work with no experience required

What Attackers Want

$200–$1,000 in upfront fees plus personal ID documents

How This Attack Works

Scammers post fake job listings or send unsolicited job offer emails promising high pay for simple remote work. After "hiring," they request payment for training materials, equipment, or background checks, and may also collect personal information for identity theft.

Red Flags to Watch For

  • Salary is far above market rate for minimal described work
  • Offer arrives unsolicited without a prior application
  • Requests payment for onboarding materials or background check
  • Company name does not appear in legitimate job boards or has no web presence

Known Malicious Domains

These domains have been associated with this attack. Never click links going to these addresses.

  • remote-jobs-hiring.comMALICIOUS
  • work-from-home-careers.netMALICIOUS
  • easy-income-jobs.comMALICIOUS

Glance automatically blocks emails from domains on this list. Domain list is not exhaustive — attackers register new domains continuously.

How Glance Stops This

  • Domain similarity analysis catches lookalike sender addresses at millisecond speed
  • SPF / DKIM / DMARC validation flags authentication failures before you ever see the email
  • VirusTotal + Google Safe Browsing checks every link in real time
  • Urgency language detection scores the email higher for manual review
  • Known malicious domain blocklist updated continuously from live scan data

Don't wait to get hit.

Glance scans every incoming email against 12 detection layers — including the exact tactics described above — before it reaches your inbox.

Protect My Inbox — Free