Fake Job Offer Check Scams: How the Overpayment Trick Works

The scam has a familiar shape by now, and it still works on smart, careful people, because it's built around a real gap in how banking works rather than a trick of persuasion alone. You're offered a job — often remote, often flexible, often framed as "mystery shopper" or a personal-assistant role. A check arrives. You're told to deposit it and use part of the funds to buy supplies, pay a vendor, or wire money to a coworker. Then, days later, the check bounces, and every dollar you sent is gone along with money you never actually had.

The mechanism, step by step

The check itself is usually a forged or stolen instrument, or drawn on a real but unrelated account, made to look legitimate enough to pass an initial deposit. You deposit it, often through a mobile banking app. The bank makes the funds available in your account within a standard window — commonly a business day or two for at least a portion of it, sometimes longer for the remainder, depending on your bank's policy and the check amount. That availability is not the same thing as the check having cleared. Availability means your bank has decided to let you access the funds before it has finished verifying the check is good; clearing means the issuing bank has actually confirmed and paid it. Those two events can be a week or more apart, and the scam is built entirely inside that gap.

While the funds appear available, you're instructed to send a portion elsewhere — a wire transfer, a gift card purchase, a payment app transfer to a "vendor" or "colleague." Wires and many app-to-app transfers move quickly and are difficult or impossible to reverse. By the time the original check is discovered to be fraudulent and reversed out of your account, the money you sent out is already gone, and your bank holds you responsible for the shortfall because the deposit is reversed, not the funds you already sent.

Why the timing feels safe

This scam survives because the sequence feels backward from how fraud is usually imagined. Nobody asked for your card number or password. You received money first, and were only asked to send a portion of it onward — a framing that reads as a normal work task, not a request. The available-balance number in your app looks final because it's the number your bank shows you. Nothing in the interface distinguishes "available to spend" from "confirmed to be real," and scammers rely on that gap being invisible to the person on the other end.

Red flags before a check is ever involved

The check step is the financial mechanism, but the scam usually telegraphs itself earlier, in the hiring process itself, if you know what to look for.

A real job offer, remote or not, almost always follows some form of actual interview — a call, a video conversation, a real back-and-forth about the role. An offer that arrives quickly after a single message exchange, with no verification of your background or a substantive conversation about the work, is a signal worth taking seriously.

Any job that asks you to purchase your own equipment or supplies upfront — even framed as reimbursable — and especially any job that asks you to do that purchasing by using funds it sends you rather than your own money, should be treated as a stop sign, not a formality.

Pressure to act the same day, whether that's depositing a check immediately or completing a wire before a stated deadline, is a consistent feature of the scam, because the entire plan depends on you moving money before your bank has time to catch the fraud.

Vague job descriptions, communication that happens only through chat apps or personal email rather than a company domain, and a "manager" who is never available for a real-time conversation are all worth weighing together rather than individually — any one alone might have an innocent explanation, but the combination is the pattern.

What to do if you're already holding a check

If you've been sent a check under these circumstances and haven't deposited it, don't. If you have deposited it and haven't sent anything back yet, contact your bank directly, describe the situation, and ask them to review the check before you do anything further — do not wait for it to "clear" on its own. If you've already wired money or sent funds through a payment app, contact your bank and the payment provider immediately; speed matters, since the earlier a transfer is reported, the higher the chance — though never a guarantee — of recovery.

Why "the check already showed as deposited" isn't reassurance

People who fall for this scam often describe the same moment of false confidence: the check showed up as deposited in their banking app, sometimes even labeled with a status like "processing" or "pending" rather than anything alarming, and that status looked routine enough to proceed. Understand that your bank's app is showing you the state of a transaction it initiated on your behalf, not a verdict on the check's authenticity — verifying authenticity with the issuing bank can take substantially longer than the interface's routine-looking status implies, and that gap is exactly where scammers are counting on you to have already sent money out.

The bottom line

The scam works because it inverts the usual fraud story: you're given money before you're asked for anything, and the number your bank shows you as "available" isn't the same thing as "verified real." Treat any job offer that arrives without a genuine interview, asks you to move funds it sent you, or pressures same-day action as a reason to stop and verify — not a reason to hurry.