A “recruiter” offers a remote or warehouse job, then says you must pay upfront for a background check, drug screen, badge, uniform, software license, or “HR portal fee” before day one. They want a wire, Zelle, Venmo, Cash App, crypto, or gift-card PIN. After you pay, the job evaporates - or a follow-on pitch asks for more money to “unlock” training.
Legitimate U.S. employers generally absorb screening costs or run them through named vendors (HireRight, Sterling, Accurate Background, or similar) that bill the company, not your personal Venmo. This is an advance-fee job cousin of fake job offer deposit scams and fake job and check-cashing scams. Broader money and identity traps: Credit and debt scams.
How the fee script works
| Step | What they say | What actually happens |
|---|---|---|
| 1 | “You’re hired - pay $49-$299 for your background / badge” | Payment goes to a personal account or irreversible method |
| 2 | Freemail “HR,” WhatsApp-only hiring, LinkedIn DM with no career-page role | No real employer of record |
| 3 | “Use gift cards / crypto so we can process faster” | Funds are nearly impossible to reverse (Gift cards and prepaid risks) |
| 4 | After payment: silence, or a second fee for “training” or “tax kit” | Classic advance-fee escalation (Advance-fee loan scams use the same pay-first logic) |
Real employers send you to a clinic or vendor they already contract with, or they deduct nothing until you are on payroll. They do not need you to buy Amazon or Google Play cards for “compliance.”
Hard rules
- Do not pay a stranger for a background check, drug test, or badge as a condition of a new job offer you cannot verify on the company’s official careers site.
- If a real company uses a screening vendor, you should land on that vendor’s official domain (typed yourself or from the employer’s HR portal) - not a shortened link in a text.
- Demands for gift cards, crypto, wires, or P2P to a personal name are a hard stop.
- “Pay us and we’ll reimburse on your first paycheck” is still an advance fee; the reimbursement rarely arrives.
Phishing that steals bank or email logins often rides alongside these pitches: Phishing and account takeover.
Worked example: the $189 “Sterling” fee
Sam gets a LinkedIn DM for a remote customer-support role at a familiar retail brand. “HR” emails from a Gmail address and says Sam must pay $189 by Zelle to “unlock” a background check “through Sterling.” Sam Zelles a name that does not match the retailer. Two days later the “HR” account is gone. No badge, no shift, no refund.
If Sam had opened the retailer’s official careers page, called the switchboard number listed there, and asked whether any candidate ever pays Sterling directly by Zelle, the answer would have been no - and the $189 would still be in Sam’s Chase or Bank of America account.
What to do if you already paid
- Call your bank or card issuer’s fraud line from the number on the card or bank site the same day; ask about a dispute or recall window.
- If you sent gift-card PINs, contact the card brand’s fraud line immediately with card numbers and PINs; recovery odds are low but early reports help.
- Do not pay a second “recovery” or “unlock” fee - that is a follow-on scam.
- Save emails, usernames, payment receipts, and chat logs; file at ReportFraud.ftc.gov and with your state attorney general consumer portal.
- If you shared SSN, driver’s license images, or bank login details, consider a credit freeze and change passwords on a clean device.
Checklist
- Verify the employer on its official website and switchboard - not via the recruiter’s link alone.
- Refuse any job that requires you to pay for screening, badges, or software up front by irreversible methods.
- Treat gift cards, crypto, and P2P to personal accounts as fraud signals.
- Real screening vendors bill employers; candidate-pay portals deserve extreme skepticism.
- Report attempts even when you caught them early; patterns help others.
Deposit-then-wire-back hiring pitches (a different script, same fake-employer family): Fake job offer deposit scams.
LinkedIn recruiter pitches that add remote-access or gift-card “equipment” asks on top of screening fees: Fake LinkedIn job offer scams.
Educational only. Not legal, banking, or fraud-recovery advice. Scam tactics change; verify employers and payment instructions through official sources.