Is This Job Posting a Scam? How to Spot the Red Flags

Job scam reports to the FTC didn’t rise gradually. They went from zero in 2020 to about 5,000 in 2023, then to roughly 20,000 in just the first half of 2024, quadruple the prior year’s full-year total. Reported losses in that same six months passed $220 million, according to the FTC’s December 2024 data release. Somewhere inside that pile of numbers sits the exact question a lot of people are typing into Google right now: is this job description a scam, or am I just staring too hard at a posting that’s badly written?

Both things happen. Most bad postings are just bad, not fraudulent. A real subset are lures. The FTC, Indeed, and even Congress’s own research arm have each published guidance on telling the two apart, and this post pulls that guidance together, adds a checklist, and points to the free tool we built for the part a checklist can’t do alone: reading a wall of text for what’s missing.

A Vague Posting Is Not Automatically a Scam

Plenty of real job postings are genuinely bad. A hiring manager rewrites the same requisition for the fourth time without asking recruiting to update it. A template gets copied from three roles ago, typos and all. A salary range is so wide it says nothing, $65K to $140K, take your pick. None of that is fraud. It’s usually just an overworked hiring team with a broken process, not a criminal one.

A scam posting works differently. It exists to extract something from you before any real hiring decision happens: money, your Social Security number, your bank routing details, or, in the “task scam” pattern the FTC has spent two years tracking, hours of unpaid labor dressed up as a paid trial. The company behind a merely sloppy posting is usually real and easy to find online. The company behind a scam posting either doesn’t exist at all, or exists and has no idea its name is being used.

The Red Flags Worth Actually Taking Seriously

The FTC and Indeed publish close to the same list every time they update their guidance, which is itself informative. Real fraud patterns don’t shift much year to year even as the platforms carrying them do. Here’s what shows up consistently:

• Payment requested before you’re hired, for a background check, a starter kit, or “training.” The FTC’s version of this is blunt: never pay to get paid.
• Your Social Security number, driver’s license, or bank routing number requested before an actual offer, framed as needed “to set up payroll.” A real employer asks for this after you accept, not during a first chat.
• Pay that doesn’t match the work: $35 an hour for basic data entry, a flat $500 a day for reviewing spreadsheets, with no detail about what the job actually involves day to day.
• A company with no footprint outside the posting itself. No employee list on LinkedIn beyond the recruiter, no press mentions, a one-page website registered a month ago.
• An interview that happens entirely over chat or text message, never a call, never video. Indeed’s own fraud-prevention guidance flags this specifically, especially once the questions drift toward personal details instead of your actual work.
• Pressure to answer within hours, often dressed up as “we have two other finalists.”
• A recruiter emailing from a personal Gmail or Yahoo address while claiming to represent an established company. Legitimate recruiters, per the FTC’s July 2025 alert, “generally email from a corporate email account.”

Any one of these, alone, might have an innocent explanation. A twelve-person startup genuinely might not have much of a web footprint yet. A recruiter genuinely might be moving fast because the role needs filling this month. Two or three stacking on the same posting is a different story, and that’s usually where people who’ve been burned say, looking back, they should have stopped.

“Never pay to get paid. Someone telling you to pay money to get the money you have supposedly earned is a sure sign of a scam.” (FTC, December 2024)

Ghost Jobs Are a Different, Less Malicious Problem

Ghost jobs aren’t fraud. Nobody’s after your money or your Social Security number. They’re postings for roles that were never really open, or stopped being open, left live anyway. The Congressional Research Service defined the term plainly in an April 2025 report: “online job postings for positions that do not exist, or that employers are not planning to fill immediately.”

Why would a company do that? CRS lists a handful of real, mostly non-sinister reasons: building a resume pipeline for a role they’ll need eventually, signaling growth to investors or existing staff, satisfying an internal policy that requires posting externally even when someone’s already been picked, or plain inertia, nobody remembered to pull the listing after the role got filled. Part of the current wave connects to the slower hiring pace we cover in our look at the 2026 tech job market: when headcount stays frozen but a requisition stays open “just in case,” the posting just sits there.

I’ll flag the honest limit here: nobody, CRS included, has solid numbers on how common this actually is. Their report says so directly. Most of the widely shared “one in four jobs is fake” statistics trace back to hiring-software vendors selling tools built to solve the exact problem they’re measuring, which is worth knowing before repeating the number as settled fact.

The practical cost is the same either way: an evening spent tailoring a resume for a role that was never going anywhere. Pulling listings from platforms sourced directly off LinkedIn, Indeed, Glassdoor, and company career pages (our own job search tool works this way) doesn’t eliminate the odds of hitting a stale posting, but it narrows them versus a listing that’s been sitting untouched for four months on a site nobody moderates.

A Checklist You Can Run in a Few Minutes

Six things, in order, before you spend a real evening on an application:

1. check the email domain. A recruiter representing an established company should be emailing from that company’s own domain, not a personal Gmail or Yahoo address.
2. search the company name alongside “scam” or “reviews.” Two minutes on Glassdoor, Reddit, or a plain search engine surfaces complaints fast if there are any to find.
3. look for the company outside the posting itself. A real LinkedIn page with actual employees listed (not just the recruiter), a real address, press mentions that predate this week.
4. notice what gets asked for first. Your experience and the job duties should come up before your Social Security number or bank details, never after.
5. count how fast they want an answer. A same-day “final decision” for a role you haven’t had a real interview for is pressure, not urgency.
6. ask for a phone or video call at least once. If every single interaction happens over chat with no exception offered, push back and see what happens.

What Our Free JD Analyzer Actually Checks, and What It Can’t Prove

We built a tool for exactly this window: the ten minutes after you find a posting and before you decide whether it’s worth an hour of your evening. Paste any listing into the JD Analyzer (it needs at least 80 characters, so a two-line posting won’t run) and it returns six sections: a role reality check, must-have skills, nice-to-haves, a red flags and ambiguities section, likely interview rounds, and questions worth asking back.

That fourth section, red flags and ambiguities, is the one that matters most for this exact question. It isn’t scanning for the word “scam” the way a spam filter scans for phishing keywords. It’s reading the actual text for vague scope (“other duties as assigned” standing in for what should be an entire job function), pay bands wide enough to mean nothing, requirements that quietly contradict each other, and structure that reads like it was stitched together from three different job ads.

Here’s the part worth being honest about, because it matters more than the feature list: no tool that only reads text can confirm a company is real, catch a Social Security number request that shows up later in a follow-up email, or prove fraud with any certainty. Ambiguity and vague scope are real, checkable signals, and worth taking seriously. They are not a verdict. We built this as decision support, something that flags what’s worth double-checking before you write a cover letter, not a lie detector wearing a nicer interface. A clean result from our tool and a request for your bank routing number over chat two days later should not get equal weight. Trust the second thing.

Quick Answers

Is this job description a scam?

Usually not. Most vague or poorly written postings are just badly managed hiring, not fraud. It becomes a real concern when the posting or the recruiter asks for money, your Social Security number, or bank details before you’ve been formally hired, or when every interaction happens over chat with no phone or video option ever offered.

What’s the difference between a scam job posting and a ghost job?

A scam is designed to take something from you: money, personal data, or unpaid labor. A ghost job is a posting for a role that isn’t really open, kept live for reasons like pipeline-building or a stale listing nobody removed. Neither is good for your week, but only one is actually trying to hurt you.

None of this replaces judgment, and it shouldn’t. A posting can clear every item on the checklist above and still turn out to be run by people who ghost you after three interview rounds, which is a bad experience but not a scam. The pattern that actually costs people money and personal data has stayed consistent across FTC alerts going back to 2023, consistent enough that a few minutes of checking, before you hand anything over, is worth it.