How to Spot and Avoid Virtual Assistant Job Scams · VA Starter Hub

Virtual assistant work is real, but fake recruiters borrow real company names, logos, job descriptions, and interview language. A message can look polished and still be dangerous.

You do not need to become an investigator. You need a repeatable habit: pause, verify independently, protect your access, and check how money moves.

Start with the direction of payment

A real client pays you under agreed terms. Stop when a supposed job requires you to send money to the recruiter, employer, or their chosen vendor before you can work or withdraw earnings.

Common demands include:

A training, registration, background-check, activation, or processing payment
Cryptocurrency to unlock tasks or withdraw a balance
Gift cards or a transfer to test your reliability
A refund from an accidental overpayment
Equipment bought from a special vendor using a check they sent
Money moved through your personal bank, card, or payment account

Freelancing can have normal costs. A marketplace may publish service fees, a payment provider may charge for conversion, and you may independently choose to buy equipment or education. Verify those costs on the provider’s official site. The danger is a person posing as a client who controls where you send money and makes it a condition of getting the job or wages.

The FTC’s core advice is simple: do not pay for the promise of a job. The FBI’s Internet Crime Complaint Center also warns about task scams that display fake earnings and then demand cryptocurrency deposits.

Compare the behavior, not the appearance

Check	Safer pattern	Serious warning sign
Work	Specific tasks, tools, schedule, and result	Vague easy work with unusually high pay
Hiring	Relevant questions and time for your questions	Instant offer with no meaningful evaluation
Identity	Details match an independently verified business	Free email, look-alike domain, or messaging-app-only contact
Payment	Written rate and a known platform or invoice path	Fee, gift card, crypto deposit, check refund, or money forwarding
Access	Official invitations and limited permissions	Passwords, one-time codes, remote control, or account rental
Questions	Calm, consistent answers	Secrecy, urgency, anger, or threats

No single green flag proves safety. A real logo, video call, long interview, or social profile can be copied or faked. Look for several consistent facts and a sensible transaction.

Common scams beginners may see

Impersonated recruiter

The sender claims to represent a real company but uses a free email address or a domain with a subtle misspelling. They may send an offer quickly and ask for identity or banking details through a form.

Safe action: Open the company’s website yourself, find its public contact details, and ask whether the person and role are real. Do not verify the message using only the number or link inside that same message.

Fake check for equipment

The recruiter sends a check and tells you to buy a laptop from an approved vendor or return extra money. A bank may make funds look available before learning that the check is fake. You can still lose the money you sent.

Safe action: Do not deposit or forward money from an unfamiliar check. Call your bank using the number on its official site or your card, not a number the recruiter provides.

Task or optimization scam

You click, rate, review, or “optimize” items on a dashboard. The site may allow a small early withdrawal, then show a negative balance and demand cryptocurrency to complete a task set or release earnings.

Safe action: Stop. The dashboard balance is not proof of real earnings. Do not send more money to recover an earlier deposit.

Package forwarding or money movement

A personal-assistant role asks you to receive packages, open accounts, deposit checks, process payments, or route money through your own account. The goods or funds may be stolen.

Safe action: Decline any role that uses your identity, home, or financial account as the client’s transaction route.

Account rental or takeover

Someone offers to rent your Upwork, Fiverr, LinkedIn, PayPal, Payoneer, Wise, bank, or social account. They may ask for your password, one-time code, browser session, identity check, or remote access.

Safe action: Never share these. Use official team invitations or delegated permissions for legitimate client access.

Large unpaid test

A client asks for a complete lead list, live inbox coverage, a finished campaign, or several days of work as a “test.”

Safe action: Suggest a small paid milestone using sample or limited data. Define the deliverable and payment before starting.

Off-platform pressure

A marketplace contact immediately pushes you to another app or asks for payment outside the platform before a contract. This can remove platform protection and may violate the service’s rules.

Safe action: Follow the current rules of the marketplace. Upwork and Fiverr both publish safety guidance in the official links below. For direct clients, verify the business and use a written agreement, invoice, and traceable payment path.

Phishing link or attachment

A message claims the brief, interview, or payment is behind a sign-in link. The page imitates Google, Microsoft, a bank, or a freelance platform.

Safe action: Do not sign in through the message. Open the real service in a new tab or app. Inspect the full sender address and link destination, and avoid unexpected executable files or remote-access tools.

A beginner verification routine

Use this before sharing sensitive information or accepting work:

Save the original listing. Keep the URL, sender address, and messages.
Write down the real offer. What will you do, for whom, for how much, and when will payment happen?
Find the business independently. Search for its official site, legal or trading name, public phone number, and careers page.
Inspect the sender. Read the full email domain character by character. A display name proves nothing.
Confirm the role. Contact the company through a channel you found yourself.
Check the contract and payment path. On a marketplace, confirm the contract and any required funded milestone or verified billing inside the real platform. For direct work, agree on written terms, an invoice, and an appropriate deposit or milestone.
Limit access. Ask for a team invitation or delegated permission and begin with the least access needed.
Pause if pressured. A legitimate employer can handle reasonable verification questions.

Example verification message:

Before I share onboarding information, I verify new client contacts through the company’s official website. Which public company email or phone extension can confirm this role? I will also need the written scope and payment terms before starting.

An angry reaction is useful information. You are allowed to leave.

Early in hiring, a client may reasonably need your portfolio, work history, general location, time zone, and availability. They do not need your password, one-time code, PIN, full bank login, browser session, or remote control of your device.

Tax, identity, and payment information may be needed after the organization and work relationship are verified. Share it through the official platform or secure company process. Ask why a document is needed, how it will be stored, and whether you can redact unrelated information where allowed.

Use a unique password for your email and each work account. Turn on multifactor authentication and save recovery codes somewhere secure. Protect your email especially carefully because other account resets often arrive there.

If you already paid or shared access

Take one step at a time. This happens to capable people, and quick action matters more than blame.

Stop communicating and do not pay anyone offering a guaranteed recovery.
Contact your bank, card issuer, payment provider, or exchange through its official app, website, or phone number. Ask whether a transfer can be stopped or recalled.
Change exposed passwords from a device you trust, sign out other sessions, and enable multifactor authentication.
Remove unknown forwarding rules, connected apps, devices, and payment methods.
Save messages, email headers, job posts, usernames, receipts, wallet addresses, and transaction IDs without editing the originals.
Report the account to the platform. Use the consumer-protection or cybercrime reporting channel in your country; U.S.-connected reports can go to the FTC and IC3.
If identity documents were exposed, follow your country’s identity-theft and credit-monitoring steps.

For the broader question about legitimate work, read Is Being a VA Legit or a Scam?. Then use How to Get Your First Client With No Experience to focus on opportunities you can verify.

FAQ

Is every upfront cost a scam?

No. You may choose to pay a known platform, government office, software provider, school, or equipment seller directly after verifying the cost. A recruiter-controlled payment required to release a job, task, or wage is a serious scam signal.

Is an instant offer always fake?

Not always, but it removes an important chance for both sides to evaluate the work. Stop if an instant offer is paired with payment demands, sensitive forms, vague tasks, or pressure to act secretly.

Can a real employer send equipment?

Some do, but a legitimate process should not require you to deposit an unfamiliar check, buy from a special seller, or send extra money back. Verify the company and equipment policy independently.

Your portfolio, relevant work history, general location or time zone, and realistic availability. Keep passwords, one-time codes, financial logins, and remote device access private.

What if I am only unsure, not certain?

Pause and verify. You do not need to prove a scam before declining. A job that cannot survive basic questions is not a safe opportunity for you.

Official sources

Video references

Watch the workflow

One last check: if your next step involves a fee, an ID, or a platform account, open the official link first. Rules and availability can differ by country and can change after a guide is published.