Employment Identity Theft via Email
How fraudulent job offer emails and fake employer onboarding processes harvest tax and banking details used to commit employment tax fraud and benefits theft.
Part of: Employment Identity Theft
Last reviewed: 8 June 2026
Employment identity theft occurs when someone uses another person's Social Security number or tax identification to work, receive wages, or claim employment benefits. Email is a key channel through which the underlying data is collected: fake job offer emails, fraudulent onboarding forms, and phishing campaigns targeting job seekers harvest the precise details — SSN, date of birth, bank account information — that appear on genuine tax and direct deposit forms.
Victims often discover employment identity theft when their tax return is rejected because wages have already been reported under their SSN, when they receive unexpected tax forms from employers they never worked for, or when unemployment benefits they apply for are denied because someone else has already claimed against their work history.
Job seekers, who are actively sharing employment documents and responding to email requests during a search, are particularly vulnerable to this form of identity theft.
How this scam works on email
A job seeker receives an email offering a position — often a remote role with an attractive salary — following a job application or in an unsolicited outreach. The email appears to come from a legitimate company and describes a convincing role. An interview process may follow, conducted entirely by email or chat with no video interaction.
After an offer is made, the 'employer' sends an onboarding package including what appears to be a standard IRS Form W-4, direct deposit form, and I-9 equivalent requiring a Social Security number. These forms collect everything needed for employment identity fraud. In some versions, a small advance payment or equipment purchase is also requested.
The SSN and banking details collected are used to file fraudulent wages under the victim's identity, claim unemployment benefits using their work history, or to open financial accounts. The victim receives unexpected tax documents from the employer, or their own tax filing is rejected because duplicate earnings have already been reported.
Common red flags
- Job offer arrives unsolicited or follows a very brief application process with no in-person or video interaction
- Onboarding forms are sent before any formal employment contract has been signed
- Employer requests your SSN and direct deposit details by email before your start date
- Employer cannot be verified through an independent search of the company's official website
- Offer involves equipment purchases or advance payments that are later reimbursed
- Tax form requests arrive via personal email rather than through an employer's official HR platform
How to protect yourself
- Verify the legitimacy of any job offer by researching the company independently and calling their publicly listed HR number
- Provide SSN and banking details only through secure employer HR portals, not by email
- File your tax return as early in the filing season as possible to reduce the window for a fraudulent return to be submitted first
- Review your Social Security earnings record annually at ssa.gov/myaccount for unexplained employer entries
- Place a fraud alert if you believe your SSN has been used in fraudulent employment
How to report it
- File a report with the FTC at reportfraud.ftc.gov and use identitytheft.gov for a recovery plan
- Report to the IRS if employment tax fraud is suspected — use Form 14039 if a fraudulent return has been filed
- Contact the Social Security Administration's OIG at 1-800-269-0271 for SSN misuse
- File a complaint with your state's unemployment insurance agency if benefits fraud is involved
Frequently asked questions
How will I know if someone is working under my Social Security number?
Review your Social Security earnings record annually at ssa.gov/myaccount. Unexplained employer entries or earnings you do not recognise indicate that your SSN may be in use by someone else in employment.
My tax return was rejected because my SSN already appears on a filed return. What do I do?
File IRS Form 14039 (Identity Theft Affidavit) immediately and mail your tax return by paper. Contact the IRS Identity Protection Specialised Unit. File reports with the FTC and local police. The IRS will assign an IP PIN for future filings to prevent recurrence.