Online Job Scams in the Philippines: 8 Red Flags & What to Do

Start Here: The One Rule That Stops Most Scams

Never use login credentials that someone else created for you, and never give anyone a verification code.

Almost every serious online job scam eventually asks for one of those two things. If you hold that line, the rest of this article is detail.

We are writing this because it happened on WorkFil. In August 2026 a talent reported a recruiter who sent her a ready-made username and password, told her she did not need to register her own account, and then asked her to pass along the authentication code she received. She refused, reported it twice, and was right on both counts. The listing has been closed and the account permanently banned.

She did the correct thing. This guide is so more people recognise it that quickly.

Why the Credential Trick Is So Dangerous

When a "recruiter" gives you an account instead of letting you create one, one of these is usually happening:

• The account is not yours. It belongs to them, or to a victim whose account they stole. Everything you do on it — every task, every message, every transfer — is traceable to that account, not to them.
• You are being used as a proxy. The work you do "for the job" is the crime: writing fake reviews, laundering payments, applying for credit, or running another scam against someone else.
• The verification code is the theft itself. When they ask you to read out a code, they are usually mid-way through logging into a bank, an e-wallet, or a platform account and need your code to finish. This is the single most common form of account takeover in the Philippines, and it works because the request sounds administrative.

A real employer has no reason to want your codes and no reason to stop you making your own account. There is no legitimate version of this request. Not for onboarding, not for "company security policy", not for "setting up your work profile".

The Red Flags, Ranked by How Often They Appear

1. Any payment from you, for any reason

Training fees. Equipment deposits. Software licences. Background check fees. Placement fees. "Refundable" anything. Legitimate employers pay you; you never pay them. This is the oldest rule and it still catches the most people, because the amounts are made small enough to feel reasonable — ₱500 for a "starter kit", ₱1,500 for "certification".

If a role requires software, the employer buys the licence. If it requires equipment, they ship it or they hire someone who already has it.

2. Hired without a real interview

A job offer after a five-message chat, with no video call, is not a job offer. Real hiring involves someone spending time on you. Scammers optimise for volume — they need hundreds of people, so they cannot afford to interview anyone.

3. The whole process lives on Telegram or WhatsApp

Legitimate employers use email with a company domain, and video calls on Zoom, Meet, or Teams. A "recruiter" who moves you to Telegram in the first message is avoiding a paper trail. Be especially careful when the account name is a person but the profile photo is a logo, or the display name changes between messages.

4. Free email address, no company domain

A real company recruiting for itself writes from name@company.com. A gmail, yahoo, or outlook address for a company role is not automatically a scam — small clients and independent recruiters do exist — but it removes your ability to verify anything, so everything else has to check out twice as well.

Check the domain properly too. @paypa1.com and @microsofft.com exist and are meant to be misread at a glance.

5. Pay far above the market for the skill

$25/hour for basic data entry is not a lucky break. Know the real range for your role — our salary calculator and 2026 salary guide give current market rates. An offer far above them is buying your suspension of disbelief, and it is the most reliable signal in this entire list.

6. Cheque deposits, crypto, or "send the excess back"

You are sent money, told some of it is for equipment or a third party, and asked to forward the difference. The original payment reverses days later. The money you forwarded is gone and it was yours. Any job that involves receiving and forwarding funds is a money-laundering role, whatever it is called on the listing.

7. Urgency and secrecy

"We need your decision in the next hour." "Do not discuss the compensation with anyone." "Only three slots left." Pressure exists to stop you checking. Every real offer survives you sleeping on it.

8. Sensitive documents before any contract

Your full BIR TIN, SSS, PhilHealth, Pag-IBIG numbers, a photo of your ID held next to your face, or your bank login — none of these belong in a pre-hire conversation. Some are needed after you sign, through a proper onboarding system, never over chat.

How to Check a Company in Five Minutes

1. Search the company name plus "scam" and plus "reviews". Do it before the interview, not after the doubt.
2. Find the company independently. Do not use the link they sent. Search for the name yourself and see whether the website, the domain age, and the address hold up.
3. Check the recruiter exists. A real person has a LinkedIn history that predates this conversation. A profile created last month with 4 connections is not a recruiter.
4. Check SEC or DTI registration for a Philippine company. It is public and it takes two minutes.
5. Ask one specific question only a real employer could answer — who you would report to, how the team is structured, what the first month looks like. Scammers deflect; employers answer.

What WorkFil Will Never Do

So you can spot anyone impersonating us:

• We will never ask you to pay us. WorkFil is free for talent, permanently.
• We will never ask for your password or any verification code.
• We will never send you login credentials for an account we made for you.
• We will never ask for your bank login, e-wallet PIN, or a photo of your ID over chat.
• We will never ask you to receive money and forward part of it.

Anyone doing any of these while claiming to be from WorkFil is not from WorkFil, regardless of what the email looks like.

What to Do If You Have Already Engaged

If you gave a verification code: change that account's password immediately, sign out of all devices, and turn on two-factor authentication. If it was a bank or e-wallet, call them now — most have a 24-hour fraud line and speed genuinely matters.

If you used credentials they gave you: stop using the account. Do not do one more task "to be safe". Save screenshots of everything before you leave the conversation.

If you sent money: contact your bank or GCash/Maya immediately and report it, then file a report with the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. Recovery is not certain, but reporting is what stops the same account being used on the next person.

If you sent documents: keep a written record of exactly what you sent and when. Watch for accounts or loans opened in your name.

Reporting a Listing on WorkFil

Use the support chat bubble on any page and tell us the job title and what happened. You do not need proof and you do not need to be certain — a suspicion is enough, and we would much rather check ten honest listings than miss one bad one.

Reporting is not only for your own protection. The report that prompted this article protected the eighteen other people who had already applied to that listing.

The Underlying Point

Scams work by making you feel that hesitating is rude, or that you are about to lose something. You are not. A real employer wants you to check them out — it is a sign you will be careful with their business too.

Slow down. Verify independently. Never hand over a code. That is nearly all of it.