An online “job” that requires deposits to complete tasks or withdraw earnings may be a task scam. Stop paying, even if the app says one more deposit will release your balance. Save the job messages and actual payment records, contact the provider you used to send money, and check what account or identity information you shared.
Stop funding the account
The task counter, earnings balance, and deposit requirement all come from the same operator. Completing another set of clicks does not independently prove that the displayed wages exist or can be withdrawn.
- Do not make another deposit to unlock tasks, clear a balance, or improve a withdrawal score.
- Keep the recruiting message, the platform address, and the latest payment demand if you can do so safely.
- Contact the bank, exchange, or payment service that handled your real transfers through its genuine app or website.
- List passwords, identity documents, banking details, or device access you gave the recruiter.
- Leave the conversation after saving what is available. Do not continue tasks solely to test whether the next withdrawal will work.
The FTC describes task scams that show fake earnings, sometimes make a small initial payment, and later demand deposits to unlock work or withdrawals. An early payment does not validate later deposit demands.
Pause at the direction of payment: if you must keep transferring your own money to obtain supposed wages, the displayed earnings should not control your next decision.
Identify the task scheme without relying on its name
The offer may use phrases such as product boosting, optimization, rating, or completing orders. The FBI's warning about fake work-from-home jobs describes simple tasks, confusing compensation, cryptocurrency payments to unlock work, and an interface displaying money that is not available to withdraw.
A familiar company name does not establish that the recruiter represents that company. Save the name used, the website domain, the messaging account, and any claimed relationship with a staffing agency. Treat those as claims until independently verified.
If you want to check the job, use contact details from the real employer's independently located website. Ask whether the specific vacancy and recruiter are genuine. Do not use the phone number in the offer as your only check. There is no need to make another deposit while waiting for a response.
Do not confuse an ordinary employment dispute with a task scam. A real employer can make a payroll error, and a legitimate freelance client can fail to pay. The deposit-to-unlock pattern adds a different problem: your own funds are being demanded to access a balance controlled by an unverified operator.
A negative balance is a claim to document
If the platform shows a negative number and says you must top it up, save the screen and the message explaining it. Record whether the number appeared after a particular task or after you asked to withdraw. Do not assume that a number in the app establishes a debt you legally owe.
The same approach applies to “combined tasks,” “premium orders,” “VIP levels,” or other labels you encounter. Write down the actual wording and the amount requested. Avoid changing the label to match another person's story. Your record should describe your own incident, including any differences.
If someone claims there is a contract, penalty, or legal obligation, preserve the document and obtain independent local advice if needed. Do not accept a recruiter-selected adviser as the only source of reassurance. This is general incident-response information, not legal advice; an app display alone cannot resolve a contractual question.
If a deadline is counting down, note the deadline and who created it. A countdown can explain the pressure you experienced without becoming an instruction you must obey. Review the facts away from the app, preferably with a trusted person who is not part of the recruiting group.
Separate real deposits from claimed earnings
Create a payment list using your bank, exchange, or payment-app records. For each entry, record the amount and currency, date and time, recipient, payment method, and reference. Label a transfer as requested, pending, completed, returned, or disputed based on what the genuine provider shows.
Keep the platform's claimed earnings in a separate column. Include any supposed bonuses or recruiter contributions as unverified claims. Do not report the displayed balance as money you paid unless you have a real outgoing transaction for that amount.
For example, a fictional worker might send 300, receive 15, and later send 700 while the app claims earnings of 2,800. The evidence should distinguish the two outgoing transfers, the actual receipt, and the claimed earnings. It should not count 2,800 as an additional payment loss.
When cryptocurrency is involved, record the asset and network as well as the amount. An exchange purchase and a later transfer from that exchange are separate steps in the same money movement. Explain both without counting the same funds twice.
| Event | Record to keep | Question it answers |
|---|---|---|
| Recruitment | First message, recruiter profile, advertised job and company | How did the claimed employment relationship begin? |
| First task or payment | Task instructions and any real payment receipt | What created confidence in the offer? |
| Deposit demand | Requested amount, reason, destination, and chat message | What prompted each outgoing payment? |
| Blocked withdrawal | Request, refusal, account status, and added conditions | What happened when you tried to receive money? |
| Follow-up action | Provider case numbers and official report references | Who has been contacted, and what remains outstanding? |
Preserve the conversation, not just the final demand
Keep enough context to show how the offer developed. Useful messages include the promised pay, the explanation of the tasks, the first request for money, instructions for buying cryptocurrency, and any reassurance after a withdrawal failed.
If a messaging group was involved, record its name, the relevant accounts, and the specific statements that influenced you. Messages from other members are not independent proof of payment unless you can verify them outside the group. Label screenshots of their supposed earnings as claims by those accounts.
Do not accuse every visible member of participating in the fraud. Some may be other people seeking work, while others may be controlled by the operator. Preserve identifiers and statements; leave attribution to an appropriate investigation.
Use original exports or files where safely available, alongside screenshots. Keep the platform's exact web address, including any change of domain. Avoid opening unknown downloads or installing another app just to recover evidence. A description of unavailable evidence is better than creating a new device risk.
Contact the payment provider with the actual sequence
Report the suspected scam promptly to the provider used for each transfer. Ask whether anything pending can be stopped and what dispute or fraud-reporting route applies. Completed payments may not be recoverable, especially where funds have already moved onward.
Explain that you believed you were funding a requirement of an online job. State whether you personally made the transfers or discovered transactions made by someone else. Keep those facts separate even if the recruiter supplied all the instructions.
If you funded an exchange account and then sent cryptocurrency to the operator, include both steps. Give the exchange the relevant withdrawal details through its verified support process. Do not provide wallet recovery phrases or private keys to someone claiming they need them to identify a payment.
The scam-payment bank-report checklist helps turn the transaction list into a concise summary. Ask each provider for its own reference number and note exactly which payments it is reviewing. Reporting to a bank does not automatically notify the recruiting platform or authorities.
Respond to information shared during onboarding
List what you provided during the supposed hiring process: contact details, identity documents, banking details, passwords, or access to a device. Keep a factual record without copying secrets into it. Different exposures need different action.
If you reused a password, change it on the affected real accounts from a trusted device. Review recovery methods and unfamiliar sessions. If you used a work device or work credentials, notify your organization's security team through an established channel.
If remote support software was installed, end the session and avoid using that device for sensitive activity until it has been checked. The separate remote-access scam response covers containment when another person could operate your screen.
If identity details were exposed, use the appropriate national identity-theft guidance. In the United States, IdentityTheft.gov provides a recovery route for identity misuse. Keep the identity concern separate from the wage or payment claim so neither disappears inside the other.
If you invited a friend or received someone else's money
If you recommended the work to someone else, tell them promptly that the deposit demands are under suspicion. Use a trusted direct channel. Share enough to explain the risk without distributing your bank statements or exposing other people's personal details.
If the operator asked you to receive money and send it onward, stop following those instructions and contact your bank. Describe where the funds came from and what you were told to do. Do not move money to a new destination to “correct” the situation without verified instructions from the institution handling it.
A friend or family member helping you should support your decisions, not impersonate you to a bank or employer. They can help arrange the chronology, write down questions, and check contact details. Keep account access and official confirmations with the authorized account holder.
Stop the loss before resolving the story: you can preserve uncertainty about the recruiter while still refusing further deposits and protecting accounts.
Make the incident understandable to the next recipient
You can organize task-scam messages and payments in a Scam Incident Record. Start with the recruitment, add each deposit and actual receipt, then show the blocked withdrawal and later demands. Check every extracted amount and date against your genuine records.
A record does not submit an official report or recover money. You review and send information to the appropriate recipients yourself. Follow the official reporting routes referenced by the FTC or FBI above when relevant to your location, or use your country's police or fraud-reporting service.
Do not pay another person who claims they can unlock the platform or retrieve the cryptocurrency. Review the separate recovery-fee scam guidance if a new contact offers that service. Save the new approach as a distinct event.
The earnings display should stop setting the terms
The strongest pressure often comes from a balance that appears almost within reach. The record changes the frame: it distinguishes money you actually sent, money you actually received, and figures supplied by the operator.
Once those categories are separated, another task or deposit has to be justified on its own. The time already spent and the amount already lost do not make a new demand more credible.
Practical recovery begins with control over the next action. A clear payment history, secured accounts, and verified reporting channels provide a basis for that control even when the claimed earnings remain inaccessible.