The Recruiter Text That Asks You to Reply “YES”: How the Fake-Job Conversation Turns Into a Payment Trap

Quick read: In April 2026, the U.S. Federal Trade Commission warned about a fake-recruiter text that may ask only for a simple reply—“YES” or “INTERESTED.” That first message is not proof of fraud by itself. The risk is what often follows: a vague remote job, a move to WhatsApp or Telegram, a small “task” payment, and then a demand that you deposit your own money to unlock supposed earnings.

This guide breaks down the conversation step by step, explains what to verify without engaging further, and gives a practical recovery checklist if you already replied or shared information.

Why “just reply YES” feels harmless

Many people expect a scam to begin with a strange link, a spelling mistake, or an urgent request for bank details. A short message asking whether you are interested looks different. It can resemble a recruiter checking availability, especially when it mentions a familiar company, a remote role, or an easy way to earn extra income.

The low-friction reply is the point. It asks for almost nothing, so a job seeker may answer before checking who sent it. The FTC’s April 2026 consumer alert describes messages that ask recipients to reply “YES” or “INTERESTED,” then use the conversation to introduce fake job offers. A reply does not automatically mean your phone is hacked or your identity has been stolen. It does tell the sender that a person is reading and willing to engage, which can invite more persuasive follow-up.

That distinction matters: do not panic over one word, but do not treat the conversation as verified either. The next step is to stop letting the sender define the process.

The funnel: from vague opportunity to your own deposit

Task scams—sometimes presented as “product boosting,” “optimization,” ratings, app reviews, or online assistant work—often use a staged script. The exact platform and wording change, but the pressure point is remarkably consistent: you are asked to put in money before you can receive money.

The dashboard is part of the persuasion. A number that rises after each click can feel like earnings, but an interface controlled by the people asking for a deposit can display anything. The FTC says task-scam victims may see fake commissions and may even receive a small early payment to build trust; later, they are told to deposit their own funds, often in cryptocurrency, to continue or cash out.

What a legitimate hiring process should let you verify

No single detail proves a job is real. Scammers can copy company names, logos, recruiter photos, and job descriptions. Verify through a channel you find yourself, not a link or phone number supplied by the sender.

• Find the vacancy independently. Type the company’s known website address yourself and search its careers page. If the role is absent, ask the company’s recruiting team through contact information published on that site.
• Check the sender’s exact domain. A look-alike address or free mailbox is a warning, not a verdict. Do not rely on the display name in a messaging app.
• Ask for a normal job description and interview. The employer should be able to explain the work, manager, compensation, hours, and hiring steps. “Just rate products” is not enough detail to evaluate a job.
• Search the wording. Search a distinctive sentence from the message with the company name plus “scam” or “complaint.” Reused scripts often surface, although a clean search result does not certify an offer.
• Keep money out of the process. Do not buy crypto, gift cards, equipment, training, or a “recharge” to qualify, clear a task, or unlock a payout.

If you already replied “YES”

A reply alone usually calls for caution, not an emergency response. Stop replying, block and report the number in your messaging app, and do not open attachments or sign into a site sent in the chat. If the sender claims to represent a company, contact that company independently and ask whether the role and recruiter are genuine.

If you shared your name, resume, or phone number, be alert for follow-up messages that reuse those details. A resume may contain more than people realize: address, personal email, phone number, employment history, and sometimes a portfolio or social profile. Remove unnecessary personal information from public resumes and job profiles where possible. Be especially suspicious of a second message that says your application is approved but asks for identity documents or bank details before a verifiable interview and offer.

If you gave information or money

1. Contact the payment provider quickly. If you sent money by bank transfer, card, payment app, wire, or cryptocurrency exchange, report the transaction and ask whether it can be stopped or disputed. Recovery is not guaranteed, but speed matters.
2. Secure accounts whose credentials you disclosed. Change the password from the real service’s website, change any reused passwords, and turn on multifactor authentication. Never share a one-time passcode with the recruiter.
3. Protect identity information. If you shared a Social Security number or identity documents, use the official U.S. identity-theft recovery resource at IdentityTheft.gov and consider a credit freeze with all three major credit bureaus.
4. Preserve evidence. Save screenshots, usernames, phone numbers, email headers, wallet addresses, receipts, and the job description. Do not keep negotiating in hopes of getting a refund.
5. Report the incident. In the U.S., report fraud to the FTC at ReportFraud.ftc.gov. If money or a financial account was involved, contact your bank or platform as well.

Be cautious of anyone who then promises to recover the money for an advance fee. People targeted once may be approached again by “recovery agents” who claim they can retrieve funds if you pay a tax, tracing fee, or deposit. That is a separate risk, not a safe continuation of the job process.

Why the pressure works—and how to interrupt it

The scam is built to make each step feel smaller than the last. Replying takes a second. A first task seems harmless. A small payment makes the opportunity feel tested. Then a supposed balance creates a loss-aversion problem: the victim is asked to pay more to avoid “losing” earnings that were never independently confirmed.

Use a pause rule. Before you reply to an unexpected job text, pay a fee, scan a QR code, install an app, or upload identity documents, wait and verify through a separate channel. Show the message to someone you trust. A legitimate employer should survive a short verification delay; a scam script often depends on keeping you inside the conversation.

Bottom line

A recruiter asking you to text “YES” is not, by itself, definitive proof of a scam. But an unsolicited, vague job pitch followed by a private chat, easy “tasks,” a crypto deposit, or a fee to withdraw supposed earnings is a strong warning pattern. Verify the vacancy independently, never pay to get paid, and act quickly if you have already sent money or sensitive information.

Sources and further reading

• FTC: That job offer text is probably a scam (April 2026)
• FTC: How to spot and avoid task scams
• FTC: How to avoid a side hustle scam (February 2026)
• ReportFraud.ftc.gov
• IdentityTheft.gov

This article is for awareness and general information. If an incident involves an active financial account or identity theft, contact the relevant institution and official reporting service directly.