The email comes from a name that looks like a real recruiter and references a real-sounding company. The job is remote, the hours are flexible, and the pay is suspiciously good for the work described. The interview happens entirely by text or Telegram. They never video chat. The offer letter shows up fast.
Then there’s the catch. They mail you a check to buy your equipment from their preferred vendor, and ask you to send the difference back. Or they ask for your bank account for direct deposit and your driver’s license for verification before any work begins. The check bounces a week later. The bank info gets drained. Or your identity gets used to open accounts.
This one targets people who are job hunting, recently laid off, or looking for flexible work. It also targets students and recent grads. The pressure of needing the job is what makes the script work.