Fake Virtual Assistant Job Posts: 5 Red Flags to Spot

Today I came across a fake virtual assistant job on a job board. At first glance it looked normal. The title said "Virtual Assistant," the pay was $85 an hour, and there was a big green apply button.

Then I read the details, and my stomach dropped. I work online as a remote developer (more about me here), so I see a lot of job posts. This one is a clear example of bait, so let's walk through it and learn from it.

I'm leaving out the contact details on purpose. I don't want to send more people to that person.

What this fake virtual assistant job post asked for

The whole job description was one short line: "You shall make custom photos." After that came the rules:

• You must be female and older than 21.
• ID verification is mandatory.
• A test photo is mandatory "to see if you are the right candidate."
• You must install a private messaging app and send your name, age, and a body measurement.

There was no company name. There was no list of tasks. The hours per week said "TBD."

I can't say for sure what the person behind this wants. But I know the pattern. These posts can lead to identity theft, blackmail, or pressure to do things you never agreed to. Here are the red flags I spotted.

1. The pay is too good for work nobody explains

$85 an hour for a "virtual assistant" is far above what real admin work usually pays. Real VA work, like inbox support, scheduling, or data entry, pays much less than that. A high rate with no clear work is how scammers get your attention.

A simple rule: if the pay is high and the job is vague, slow down. The FTC's job scam guide lists "big pay for little work" as a classic warning sign.

2. There are no real tasks

A real VA post tells you what you will do. It names the tasks, the tools, the hours, and who you report to. You can picture a normal workday after reading it.

This post gave one line and no details. "Make custom photos" is not an admin task. If you can't explain the job to a friend after reading the post, it is not a real job.

3. They ask for your ID and a photo before any interview

Real employers talk to you first. They ask about your skills, they run an interview, and they send an offer. ID checks for payroll or HR come later, through official channels and a company email.

A "test photo" is not a skills test for a VA. It has nothing to do with the work. Once a stranger has your ID and your photo, they can use them to steal your identity or to pressure you later.

4. The job asks for personal body details

A role can have real requirements, like language skills or time zone. But an admin job never needs your body measurements.

When a post asks for personal details that have nothing to do with the work, the "job" is not about work. Close the tab.

5. They move you to a private chat app

The post tells you to install a private messaging app and message a long ID instead of a company email. Real companies use company emails, video calls, and known tools.

Moving you off the job site is on purpose. The job site can't see the messages, and there is no record if something goes wrong.

What to do if you see a post like this

1. Don't reply. Even a short "hello" tells them your account is active.
2. Don't send any ID, photo, or personal detail.
3. Report the post using the report button on the job site.
4. Warn others. Tell friends who are job hunting, and post a warning in your groups.

If you already sent something:

1. Stop all contact, and don't send more.
2. Save the messages and screenshots as proof.
3. Change your passwords and turn on two-step login for your accounts.
4. Report it. In the Philippines, you can contact the NBI, which has a cybercrime division. In the US, you can file a report with the FBI's IC3.

A quick check before you apply to any online job

Ask yourself these questions:

• Does the post name the company, and can I find it online?
• Does it list real tasks, tools, and hours?
• Is the pay normal for this kind of work?
• Do they use a company email, not a private chat app?
• Do they interview me before they ask for my ID?

If the answer to any of these is "no," pause. If the answer to most of them is "no," walk away.

Job hunting is stressful, and scammers know it. They count on people who really need work to act fast. Slow is safe.

The same mindset helps with your own websites and accounts too. Lock things down early, not after something goes wrong. My guide on WordPress security basics with Cloudflare covers that for site owners.

If you run a business and need a trusted developer to build or look after your website, see my web development services or contact me here.