Indian job seekers lost over ₹86 lakh combined across Ahmedabad, Hyderabad, and Lucknow incidents reported in 2024 and 2025 to fake work-from-home job offers that arrived as WhatsApp messages. The script promises ₹20,000 to ₹50,000 a day for liking videos or rating hotels. Small payments arrive first to build trust. Then a ‘task deposit’ is demanded to access VIP tiers. The deposit never comes back. If you have received one of these messages, this article tells you how the pattern works and how to stop before the deposit.
Who this is for
Job seekers, students, fresh graduates, homemakers, retired professionals, anyone with time and a need for additional income. The scam works because it weaponises hope, not technical naivete. The first message often arrives at exactly the right moment for the person.
The Indian cases that defined the pattern
Real cases, publicly reported in Indian press through 2024 and 2025.
Ahmedabad. 2024. ₹30.5 lakh lost. A working professional received a WhatsApp message offering high daily earnings for rating hotels and reviewing products. Small initial payments of ₹3,000 to ₹8,000 built trust over the first week. Task deposit demands escalated from ₹5,000 to lakhs. Total loss ₹30.5 lakh. Reported by The420.in crime coverage through 2024.
Hyderabad. 2024. ₹51 lakh lost. An IT professional was approached on WhatsApp by a fake recruitment agency. The job involved liking YouTube videos and Google reviews for a foreign brand. Initial earnings of around ₹15,000 in the first three days made it feel real. VIP task tiers then required deposits that ran into lakhs. Total loss ₹51 lakh. Reported across Hans India and Telangana Today.
Lucknow. 2024. ₹4.98 lakh lost. A homemaker received an SMS offering ₹500 to ₹2,000 per task. After a week of small payouts, she was asked to transfer ₹50,000 as a task deposit. The amount escalated. Total loss ₹4.98 lakh. Reported in regional crime coverage through 2024 and 2025.
Smaller losses of ₹50,000 to ₹3 lakh are reported almost daily across Bengaluru, Pune, Chennai, Delhi NCR, and Tier 2 cities. The Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs has flagged task-based job fraud as one of the largest single categories on cybercrime.gov.in, with the 1930 helpline receiving a high volume of complaints in this category.
How the task-deposit scam works
There is no real employer. No real platform. The entire structure is engineered to look like a legitimate job for the first 3 to 7 days, then convert into a fund-extraction machine.
Step 1: The first contact
A WhatsApp message or SMS arrives from an unknown number, often an international code. The message claims to be from a recruitment agency, an HR consultant, a global brand, or a freelance platform. Examples seen in 2024 and 2025: ‘Hi, I am Priya from Amazon HR. We are hiring part-time reviewers. Earn ₹3,000 to ₹50,000 daily.’ Or: ‘We need video likers and YouTube reviewers. Easy work. No experience required.‘
Step 2: The Telegram or app handoff
Once you respond, the conversation moves to Telegram, a chat group, or a custom app you are asked to install. The scammer creates a sense of structure: a ‘manager’, a ‘training group’, a ‘task list’. Other group members appear to be earning. Most of those members are fake accounts run by the scammer.
Step 3: The first real payment
You complete a small task. Like 30 YouTube videos. Rate 10 hotels. The scammer pays you ₹500, ₹1,500, or ₹3,000 directly to your bank account or UPI ID. The payment is real. The bank notification is real. This is the moment the scam locks in.
Step 4: The VIP tier offer
After 2 to 5 days, the scammer offers a ‘VIP task tier’ that supposedly pays 5 to 10 times more. To access it, you deposit a small amount, often ₹2,000 to ₹10,000. Sometimes called a refundable deposit, security guarantee, or tier upgrade fee. You pay, get the VIP tasks, complete them, and the earnings show up on the platform. The system feels like it is working.
Step 5: The escalation
The system shows you have earned ₹40,000 or ₹1 lakh. To withdraw, you must complete one more ‘combination task’ requiring a larger deposit. Deposits escalate from ₹10,000 to ₹50,000 to ₹2 lakh. Each time, the on-screen balance grows. Each time, withdrawal is blocked behind one more deposit.
Step 6: The lockout
Eventually you stop paying or run out of money. The group blocks you. The Telegram channel disappears. The app stops working. The on-screen balance was always fake. The money you actually transferred is gone, layered through mule accounts within hours of each transfer.
The mule account variation
A second pattern, often more dangerous because it has legal consequences for the victim.
How it works
You are ‘hired’ for a remote role: account assistant, payment processor, regional coordinator, marketing assistant. The job involves receiving transfers into your personal bank account, taking a small percentage as commission, and forwarding the rest to specified accounts. The scammer explains this as ‘tax efficient payment routing’, ‘foreign client invoicing’, or ‘inter-company settlement’. It sounds plausible to someone who has not done this kind of work before.
Why it is dangerous
The money arriving in your account is from other scam victims. You become a money mule. When investigators trace the scam back, your account is the visible link. You face frozen bank accounts, FIRs, questioning, and potential criminal charges, even though you genuinely believed you were doing a job. Indian banks and the I4C work closely on mule account identification. A flagged account is frozen immediately and the holder is contacted by investigators.
How to spot it
A real employer pays you a salary. They do not route customer money through your personal account. Any job where the core task is receiving and forwarding money is mule recruitment.
7 red flags any job seeker can apply
Any one of these is enough to walk away. Do not wait for the second flag.
1. The offer arrived unsolicited on WhatsApp or SMS
Real recruiters use LinkedIn, Naukri, Indeed, company career pages, and email. They do not cold-message strangers on WhatsApp with high earning promises. Any unsolicited WhatsApp job offer is suspicious by default.
2. The earnings claim is unrealistic
₹20,000 to ₹50,000 a day for liking videos is not a real job. ₹3,000 to ₹8,000 a day for rating hotels is not a real job. No legitimate part-time online work pays at these rates.
3. The job has no real employer verification
You cannot find the company on LinkedIn. The recruiter cannot send a formal offer letter from a corporate domain. The brand names invoked (Amazon, Flipkart, hotel chains) cannot confirm the recruiter when you contact them through their official channels.
4. The conversation moves to Telegram or a custom app
Real recruitment happens on email, phone calls, video interviews, and recognised platforms. A move to Telegram or a custom app is the structural shift to the scam environment. Once you are in the scammer’s chosen ecosystem, the audit trail is lost.
5. You are asked to deposit money to start, access tiers, or withdraw earnings
No real employer asks employees to pay deposits. The first deposit, no matter how small, is the moment to stop and walk away.
6. The on-screen earnings cannot be withdrawn
The platform shows you have earned ₹40,000 or ₹1 lakh, but every withdrawal attempt is blocked by one more required deposit, KYC check, or tier upgrade. The balance is fake. The money is not real.
7. The role involves receiving and forwarding money
A job whose core task is to receive transfers and forward them is mule recruitment. Walk away before any transfer arrives. Once funds start flowing, you are legally exposed.
What to do if you got the message
- Do not respond. The first reply is the trigger that puts you on the active target list.
- Block the number and report it on WhatsApp. Tap the contact, scroll down, choose Block and Report. This helps WhatsApp’s anti-scam systems.
- Save the message as evidence. Screenshot the chat before blocking.
- Report at 1930 or cybercrime.gov.in. Even unsuccessful contact attempts help I4C track the scammer numbers. (I4C FAQ)
- Warn your network. Share this article in your family group, your college batch group, your locality group. The fewer people who reply to the first message, the smaller the scam.
What to do if you already paid a task deposit
Speed of reporting is the single biggest factor in recovery. Move fast.
- Call 1930 immediately. The national cybercrime helpline operates 24/7. They will initiate bank-side action on the recipient account.
- File a formal complaint at cybercrime.gov.in within 24 hours.
- Notify your bank’s fraud team in parallel. Banks can sometimes freeze the recipient mule account within hours.
- Preserve all evidence. Original WhatsApp messages, Telegram chats, app screenshots, transaction records, recipient account details.
- File an FIR with your local police cyber cell. Required for subsequent legal action.
- Do not pay another deposit hoping to recover the first one. This is the standard ‘recovery scam’ trap.
What to do if you suspect you became a mule
If you took a ‘job’ that involved receiving and forwarding money, and now suspect it was a scam, act before investigators contact you.
- Stop all transfers immediately.
- Preserve every piece of evidence. Original job offer, scammer conversations, all transaction records.
- Self-report to 1930 and at cybercrime.gov.in. Cooperation as a victim is the strongest mitigating factor when investigators arrive.
- Consult a lawyer. This is a serious legal situation. Get qualified advice before responding to police or bank queries.
- Notify your bank. Banks have specific protocols for self-reported mule scenarios. Acting first is significantly better than being identified later.
How real recruiters work
Real recruiters work for a company you can verify on LinkedIn, the MCA portal, or Crunchbase. They contact you through email from a corporate domain, not a Gmail or unknown WhatsApp number. They interview you, usually across multiple rounds, before any job offer. They send a formal offer letter on company letterhead with terms, salary, and joining date. They do not ask you to deposit money, install a custom app, or receive and forward payments. If any of these are missing, treat the offer as unverified until you can confirm independently.
Got a job offer that feels off? We verify free
If a job offer feels suspicious and you want a sanity check before responding, paying, or installing anything, send it to us privately.
WhatsApp / Call: +91 99644 43350
Send the original message, the company name claimed, the sender number, screenshots of any Telegram or app interactions, or whatever details you have. We tell you whether it matches a known scam pattern, in plain language, with no charge.
What we do:
- Cross-check the recruiter and company against known scam patterns
- Verify whether the brand name claimed is being misused
- Tell you whether the offer is real or fake and what to do next
What we do not do:
- Charge you for the verification
- Ask for your bank details, OTPs, UPI PIN, or personal financial information
- Pretend to be a recruiter or a placement agency
Verification is free. You can also email contact@cybersecify.com with the same details.
How this differs from fake recruiter scams targeting developers
We get this question. The fake recruiter Blockstar Trifleck malware scam is a specific advanced threat targeting software developers. Convincing LinkedIn profiles, recruiter conversations, and a ‘coding test’ that secretly runs malicious code to steal source code, crypto wallets, and credentials. That is a developer-targeted attack with a malware payload.
The fake job offer scam covered in this article targets the general public, especially job seekers without technical backgrounds. It uses WhatsApp and SMS for first contact, builds trust with small payments, and ends in direct financial loss through task deposits or mule recruitment. No malware. No technical exploitation. Pure social engineering with a financial extraction model.
Both are real. Both are happening every day in India. Recognising which pattern you are looking at helps you respond correctly.
For broader public awareness, see our guides on the SMS scam cluster, fake loan apps, WhatsApp Ghost Pairing, and the Karnataka citizen safety guide.
Save this number now
If you or anyone in your network receives a WhatsApp message offering high-paying remote work for liking videos, rating hotels, writing reviews, or routing payments, the right move is to verify before responding. Save +91 99644 43350 in your phone now. During an active job-scam conversation, you will not have time to search.
Frequently asked questions
How do fake job offers usually reach me?
Most arrive as WhatsApp messages or SMS from unknown international or Indian numbers. The message claims to be from a recruitment agency, an HR consultant, or a global brand like Amazon, Flipkart, or a hotel chain. The offer is usually unsolicited and promises high daily earnings for simple tasks like liking videos, rating hotels, or writing reviews.
What is a task deposit and why is it always a scam?
A task deposit is money the scammer asks you to transfer to access a higher earning tier, complete a special VIP task, or release withheld earnings. No real employer asks employees to pay deposits to start work or to access their salary. Any job that demands a deposit from you is a scam, full stop.
What is a money mule and how do job scams turn people into mules?
A money mule is a person who unknowingly or knowingly receives money from a scam victim into their bank account and forwards it to the scammer. Job scams recruit mules by hiring people for fake remote roles where the job duty is to receive transfers and route them elsewhere. The victim faces real legal consequences when investigators trace the funds back.
I already paid a task deposit. Can I recover the money?
Call 1930 immediately. File a complaint at cybercrime.gov.in within 24 hours. Notify your bank’s fraud team in parallel. Recovery is possible if you report within hours of the transfer, before the money is layered out to other accounts. Save all evidence including chat logs, transaction details, and the original job offer message.
How is this different from fake recruiter scams targeting developers?
Fake recruiter scams targeting developers, such as the Blockstar campaign, use convincing LinkedIn profiles and trick the candidate into running malicious code disguised as a coding test. That attack steals source code, crypto wallets, and credentials. The fake job offer scam covered here targets the general public, uses WhatsApp and SMS, and ends in direct financial loss through task deposits or mule recruitment.
Foundational reads. The anchors behind every guide on this site.
- The First Hour After Cyber Fraud in India. What to do in the first 60 minutes after you realise you have been scammed.
- Pause, Verify, Then Act. The universal three-rule defence against every scam type.
- Your Digital Footprint Is the Scam’s Raw Material. Why scammers already know your name, employer, and bank.