Task scams start with a job text and end with crypto deposits to unlock fake earnings. FTC: reports rose from 5,000 to 20,000; $223M lost in six months.
Social Engineering Examples·4 sources
In December 2024, the US Federal Trade Commission published data showing a surge in "task scams", a kind of job scam that starts with an unexpected text or WhatsApp message offering easy remote work. Reports jumped from about 5,000 in all of 2023 to about 20,000 in just the first half of 2024. Job-scam losses hit $223 million in those six months, close to the $286 million lost in all of 2023. Status: Government data report.
| Step | What happens |
|---|---|
| Text | An unexpected message offers flexible remote work, like "product boosting" or "app optimisation" |
| App | You're sent to an app or website with simple, repetitive tasks, like rating products |
| Fake earnings | A balance climbs with each task. Sometimes a small real payout comes early, to build trust |
| Group chat | Fake "coworkers" cheer you on and push you to commit more |
| Deposit | You're told to pay, usually in crypto, to reach a higher tier, fix an "error" or withdraw |
| Repeat | Each payment unlocks another demand. The money never comes back |
It's a smishing lure that turns into recruitment fraud, with the same slow build of trust seen in pig butchering.
Tip: if a job wants money from you before you can get paid, walk away. That's the whole scam in one line.
| Period | Reported job-scam losses |
|---|---|
| 2020 | $90 million |
| 2021 | $131 million |
| 2022 | $179 million |
| 2023 | $286 million |
| January to June 2024 | $223 million |
Crypto job-scam losses were about $41 million in the first half of 2024, against about $21 million in all of 2023. The task-scam counts are estimates: the FTC hand-coded random samples of 500 job-scam reports a year. It named no individuals or groups behind the scams, and the report isn't a law enforcement action.
See also smishing vs phishing.
A fake job where you do simple online tasks, watch fake earnings grow, then are asked to pay, usually in crypto, to keep going or withdraw.
$223 million was reported lost in the first half of 2024, according to the FTC, against $286 million in all of 2023.
Usually not, especially if you paid in crypto. Don't pay more to try to withdraw.
Mostly through unexpected text or WhatsApp messages offering flexible remote work.
Social Engineering Examples. “Task scams: the FTC's data on gamified job scams (2024)”. Accessed 3 November 2026. https://socialengineeringexamples.com/ftc-task-scam-gamified-job-scam-spotlight-2024
Operators typically obtain large volumes of phone numbers and WhatsApp-reachable contacts, likely sourced from data-broker leak compilations, scraped contact databases, or bulk messaging/SIM-farm services, to enable mass unsolicited outreach rather than individually targeted contact; the FTC's data itself reflects mass, not targeted, victim selection.
Consumer phone numbers circulating via data-broker leaks and scraped contact lists is very hard to prevent at the individual level; the more realistic control sits downstream at carrier and platform level, where carrier smishing filters and WhatsApp's own spam-detection and bulk-account-banning systems can throttle unsolicited mass messaging before it reaches consumers.
Operators stand up a task-based web platform or mobile app with a gamified earnings dashboard, consistent with templated task-scam-as-a-service kits or white-label gig/crypto-payment app shells, wired to a backend that can display an arbitrary, manipulable "earnings" balance, plus scripted personas for later group-chat use.
Preempting the stand-up of a fake task app is difficult since these platforms can be spun up quickly and distributed outside major app stores; the practical control is app-store vetting of gig-work apps that request up-front payments, plus fraud-app reporting and takedown processes at app stores, hosting providers, and domain registrars.
Automated bulk messaging infrastructure sends unsolicited texts or WhatsApp messages advertising vague, high-pay, flexible remote gig work using buzzwords like "product boosting" or "app optimization," per the FTC's description of the scam's opening move.
FTC guidance calls for treating any unsolicited job offer arriving by text or WhatsApp as a red flag regardless of how professional it looks, and ignoring, blocking, or reporting the message rather than replying.
Responding victims are walked into the app, complete simple repetitive tasks, watch a climbing fake-earnings dashboard, and often receive a small genuine payout early on, per the FTC, which builds trust and primes the sunk-cost dynamic.
Recognizing that an in-app dashboard balance is not real money until it clears to a bank account, and that an early small genuine payout is a trust-building tactic rather than proof the job is legitimate, per the FTC's consumer alert.
Victims are funneled into a group chat staffed by fake "experienced" coworkers or coaches who apply social pressure and manufactured urgency to encourage larger deposits, as described in the FTC's consumer alert.
Treating enthusiastic group-chat "coworkers" who pressure fast deposits as a manipulation tactic rather than social proof, and independently verifying any hiring company or platform through channels not supplied by the message itself.
The platform requires a cryptocurrency deposit framed as unlocking the next task tier, correcting an "error," or being a prerequisite to withdraw the (fake) accumulated earnings, the core "pay to get paid" mechanic the FTC's Spotlight is named for.
This is the FTC's highest-leverage intervention point: no legitimate employer ever requires paying money to get paid, unlock tasks, or withdraw earnings, so refusing any such request stops the scam at its definitional mechanic.
Deposited cryptocurrency is moved out through wallets/exchanges and is unrecoverable; the FTC notes victims are often prompted to deposit again chasing an ever-promised withdrawal, with the scam repeating this step until the victim stops paying, completing the objective of direct financial theft.
Once cryptocurrency is sent, the transfer is effectively irreversible, so the practical control shifts upstream to crypto-exchange and on/off-ramp fraud detection flagging deposits tied to known task-scam wallet clusters, and to prompt victim reporting to ReportFraud.ftc.gov and the receiving exchange, though actual fund recovery is rarely possible once money has moved out.
Browse by what this case has in common with others in the library.
Texts about unpaid tolls copied E-ZPass, SunPass and more to steal card details across the US in 2024 and 2025.…
Fake finance "directors" in WhatsApp groups steered 18+ US investors to NanoBit, a crypto platform that never traded. The SEC…
A fake IT text and phone call got a Retool employee's MFA codes in 2023. Google Authenticator sync did the…
A phone-record pretexting incident involving a retired U.S. Army general was followed by FTC enforcement and broader privacy-policy scrutiny.
A Chinese national entered Mar-a-Lago after a pool-visit pretext and staff's unverified assumption that she was related to a member.…
A fraudster spoofed Wells Fargo's real 800 number nine minutes after a legitimate advisor call, phished a 2FA code from…
Texts about unpaid tolls copied E-ZPass, SunPass and more to steal card details across the US in 2024 and 2025.…
Anthropic says a suspected Chinese state group conned Claude Code with a fake pentest story and let it run most…
In 2025 the US sanctioned North Korean fronts that place fake IT workers abroad, and a US laptop farm operator…
Impersonators posing as two Philadelphia school vendors asked to switch from cheque to ACH and diverted nearly $700,000 in 2024.…
Three separate congressional watchdog engagements, not one campaign. In 2000, GAO agents carrying counterfeit badges declared themselves armed officers and…
Anthropic says one criminal used Claude Code to breach 17 organisations, price ransoms from their own books and write the…
In 2025 the FBI, FTC and USPIS warned of unordered packages with QR codes that lead to phishing sites or…
A Snap Inc. payroll employee emailed the W-2 and payroll data of roughly 700 current and former employees to an…
Criminals posing as a vendor redirected $4.92M in North Dakota school building-fund payments in 2026. The FBI seized $4.86M. How…
A Tennessee school district's finance director wired $3.36M in state education funds to fraudsters impersonating textbook vendor Pearson from a…
Scammers impersonating a school construction contractor submitted a bank-account-change request with seemingly valid documentation, and Cabarrus County, NC wired $2.5M…
Attackers made Microsoft's own Azure Monitor send a fake $459.90 Windows Defender bill that passed SPF, DKIM and DMARC. A…
In June 2025 the DOJ filed to forfeit $225.3M in USDT tied to pig butchering scams, after Tether and OKX…
A phishing email tricked Unatrac's CFO into surrendering his Office365 credentials on a fake Microsoft login page; the attacker then…
DOJ prosecutions of FIN7 members Fedir Hladyr, Andrii Kolpakov, and Denys Iarmak produced guilty pleas and prison sentences. The records…
FIN7 (Carbanak) mailed USPS packages containing BadUSB hardware implants to HR, IT, and executive staff at US retail, restaurant, and…
A US Attorney's Office (EDVA) court order seized seven domains spoofing the Singapore International Monetary Exchange that pig-butchering scammers used…
Between 2006 and 2008 the FTC pursued six civil cases covering 16 data-broker and private-investigation defendants after two dismissals, alleging…
Social Engineering Examples