Skip to main content
ThreatScams & fraud

Fake employment / remote job offer advance-fee equipment scam — fraudulent job offer email claims the recipient has been hired for a remote position and instructs them to purchase equipment, software, or training materials using personal funds (via gift card codes or a check overpayment scheme) with a false promise of reimbursement that is never fulfilled

fake-employment-job-offer-advance-fee-equipment-scam

What this tier means

High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.

How Gorganizer detects this

Fraudulent job offer emails targeting active job seekers — particularly those with resumes posted on Indeed, LinkedIn, ZipRecruiter, or Craigslist — claiming the recipient has been hired for a remote work-from-home position and instructing them to purchase equipment (laptops, webcams, software, office supplies, training materials) using their own money, with a promise of full reimbursement on their first paycheck. Two main variants: (1) Gift card variant — victim is told to buy Amazon, Google Play, or Apple gift cards, photograph the codes, and send them to the "employer" (most common); (2) Check overpayment variant — victim receives a fraudulent check, deposits it, buys equipment and wires back the "remainder," then the check bounces days later, leaving the victim liable for the full amount. Key facts: (1) FTC 2023: job scams caused $367M in losses, median loss $2,000; fastest-growing fraud category targeting adults under 35; (2) No legitimate employer asks new hires to purchase equipment with personal funds or gift cards — corporate equipment is procured through internal purchasing systems and shipped directly; (3) Gift card codes sent to an "employer" are effectively cash — there is no fraud protection or chargeback; (4) Scammers use real company names to impersonate legitimate businesses, making offers appear credible. Warning signs: any "employer" requesting equipment purchases with gift cards, reimbursement-after-purchase promises, a check for more than expected, urgency to buy before you start.

False-positive guard

Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.

About the scoring engine

Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.

Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.

Ready to clean your inbox?

Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.

Get started