Work From Home Scam: What It Is and How It Runs

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 1 Nov 2026 · Online fraud

A work from home scam sells the hope of flexible income and then charges you for the privilege of earning it. The offer is cheating under section 318 BNS 2023, with IT Act sections 66C and 66D where a fake portal or recruiter profile is used. The small first payout is the trap, not the proof.

A work from home scam is a fraud built around the one thing job seekers want most: a legitimate income that does not require commuting. The offer arrives as a WhatsApp message, a Telegram group, an Instagram DM or a sponsored listing. It promises part-time data entry, typing, review writing, product listing, "ad posting" or "task completion" for a daily payout. The work is either imaginary or worth far less than the fees you are asked to pay before you can start.

The offence this triggers is section 318 of the Bharatiya Nyaya Sanhita, 2023 — cheating by dishonest inducement — because the entire offer is a false promise made to extract money. Where the recruiter uses a fake portal, a cloned company website or a forged identity to personate an employer, section 66D of the Information Technology Act, 2000 applies, and section 66C applies where another person's identity or documents are misused. Registration fees, training fees, "security deposits" and "task top-ups" are all part of the same design.

The four stages every work from home scam follows

Stage one: the approach

The first message is engineered to feel low-risk. It offers flexible hours, a daily payout, no interview or a very short one, and work you can do from a phone. The sender often uses a woman's name and a friendly tone, or poses as an HR executive at a company whose name you recognise. The account may have a professional photograph, a company logo in the display picture and a bio that copies a real firm's wording.

What is missing is equally telling. There is no verifiable office address, no landline, no employee who can be reached independently, and no written contract before money is requested. The "company" communicates only through the messaging app, never through a domain-based email address.

Stage two: the small payment that builds trust

Many operations pay a small amount first. You complete a simple task — liking videos, submitting a form, typing a short passage — and receive a few hundred rupees through UPI. That payment is the most effective part of the scam. It converts a stranger into an employer in your mind and makes the next demand feel routine rather than suspicious.

The first payout is a marketing cost, not a wage. It is funded by earlier victims and it buys your confidence. Once you have been paid once, refusing the next request feels irrational, and that is precisely the lever the operator is pulling.

Stage three: the fee or the top-up

Now the structure changes. To unlock higher-paying tasks you must become a "premium member", pay a registration or training fee, or deposit a "task balance" that is returned with your commission. The amounts escalate. A ₹500 deposit becomes a ₹5,000 bundle, then a ₹50,000 "level three" package. Each stage produces a convincing dashboard showing your growing earnings, which you cannot withdraw until you pay a "tax" or "withdrawal fee".

This variant is often called a task scam or a prepaid task fraud. It borrows the visual language of legitimate gig platforms — ratings, levels, order queues — to make a deposit feel like an investment in your own account rather than a payment to a stranger.

Stage four: the withdrawal that never happens

When you ask to withdraw, the account is frozen, the "support agent" stops replying, or a new condition appears. Some operations keep the victim engaged for weeks by releasing a partial withdrawal, which sustains hope and justifies the next deposit. Others move to a second stage in which the victim is told that a "recovery team" or a "legal cell" can retrieve the funds for an advance fee — a second scam run on the same person.

Why the model works so well

It sells hope, not a product. A job seeker who has been unemployed for months is motivated to believe. The scam does not need to defeat scepticism; it only needs to arrive at the right moment.

It uses real payment rails. UPI transfers clear instantly and are hard to reverse. The victim authorises each payment, so the bank sees a normal transfer, not a breach. The receiving accounts are mule accounts, often opened by students or small traders who rented their KYC for a fee.

It hides behind a plausible company. A cloned website, a copied logo and a fake appointment letter cost almost nothing to produce. The victim's own due diligence is defeated because the thing being checked is a copy of something real.

It scales. One operator can run hundreds of conversations at once from a script, a dashboard and a set of rented accounts. The marginal cost of another victim is close to zero, which is why the same phone numbers and account clusters reappear across complaints.

What the law says

Cheating and criminal breach of trust. Section 318 BNS covers the false promise of work and the fees taken against it. Where the operator was entrusted with a deposit that was to be returned, section 316 BNS (criminal breach of trust) is added. Where the "company" is fabricated and the letterhead forged, section 336 BNS (forgery) applies.

Identity and computer offences. A fake recruiter profile using another person's name or photograph is identity theft under section 66C IT Act. A fake portal that collects registration fees and card details is cheating by personation under section 66D. Where the site harvests Aadhaar, PAN or bank details, the data protection provisions of the Digital Personal Data Protection Act, 2023 also become relevant, because the collection is without lawful purpose or consent.

Threats and intimidation. When a victim demands a refund and is told that "legal action" will be taken, or that their documents will be circulated, section 351 BNS (criminal intimidation) is engaged. The threat is designed to stop the complaint, not to recover a legitimate debt.

Intermediary obligations. The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require significant social media intermediaries to appoint grievance officers and act on complaints within the prescribed timelines. A platform that hosts a fraudulent recruitment page can be put on notice, and the notice should be in writing with the URL and screenshots attached.

Investigation. Registration of an FIR is governed by section 173 BNSS. If the local station refuses, section 175(3) BNSS allows an application to the Magistrate for a direction to investigate. Electronic records — chat exports, portal screenshots, payment receipts — are governed by section 63 BSA for admissibility.

How the recruitment page is built to look real

A typical page copies a real company's "Careers" section, changes the contact email to a free webmail address, and adds a live chat widget staffed by the same operator. The "HR" may send a PDF appointment letter with a logo lifted from the company's website, a fabricated employee code and a joining date. Some operations create a Facebook page or a LinkedIn company page with a handful of posts and fake employee profiles to survive a casual search.

Verification is possible without technical skill. Check the domain registration date; a company site created three weeks ago is not a company that has been hiring for years. Call the real company's published landline and ask whether the recruitment is authorised. Search the exact job description text; scam listings are often copied across many fake sites. Ask for the offer letter from a domain email address, not a webmail account.

What decides whether it is treated as a crime or a dispute

Factor	Points to fraud	Points to a commercial dispute
The employer	No verifiable office, no landline, cloned site	Registered entity with a real address
The promise	Payment demanded before work begins	Work delivered, then payment withheld
The intent	No intention to provide work at any stage	Intention to perform, later failure
The payment route	Personal UPI, rotating accounts	Company account, invoice, GST
The response	Blocking, threats, new fee demands	Written communication, partial performance

The dividing line is intention at the time the promise was made. A company that genuinely tried to place you and failed is a contract problem. A company that never had work and designed the fee structure to extract deposits is a cheating case. The evidence that matters is the design: if the only way to earn is to pay more, the offer was never real.

What to do the moment you suspect it

Stop paying. Do not send the "withdrawal tax", the "level upgrade" or the "refund processing" amount. Each further payment increases the loss and weakens the freeze case.
Save the evidence. Export the chat, screenshot the portal dashboard, save the offer letter and download the bank statement. Under section 63 BSA the unedited record is what counts.
Call 1930 and file on cybercrime.gov.in with the beneficiary account, UPI ID and UTR numbers. The freeze request goes to the receiving bank.
Email the bank's nodal officer the same day, asking for a lien on the account and giving the transaction identifiers.
Register the FIR under section 173 BNSS and keep the copy. If refused, apply under section 175(3) BNSS.
Report the page and the profile to the platform's grievance officer under the IT Rules 2021, attaching the URL and the evidence. Takedown prevents further victims and preserves your record.
Do not engage a "recovery agent" who contacts you offering to retrieve the money for a fee. That is a second fraud, not a remedy.

Signals that separate a real work from home job from a scam

A genuine employer does not ask you to pay for training, software, a background check or a "security deposit" before you are hired.
Payment for work is made against an invoice or payroll record, not into a "task wallet" you must top up.
The offer letter comes from a company domain address and names a person you can reach on a landline.
The company's registration details can be verified independently, and the office address exists.
No legitimate employer requires you to recruit other people in order to withdraw your own earnings.

When to involve a lawyer

If the loss is significant, if the operator is still in contact and demanding more, or if the police have treated the complaint as a civil dispute, legal advice early is worth more than advice later. The first written complaint fixes the sections, the forum and the evidence list. For the Kolkata and West Bengal filing route see cyber crime lawyer in Kolkata, and for jurisdiction and court practice in the state see West Bengal.

Most work from home scams cannot be shut down by one complaint. They are shut down by many complaints that identify the same accounts, which is why an accurate, evidence-backed filing helps every victim who follows.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

How do I know if a work from home job is a scam?

The clearest sign is a demand for money before work begins. Genuine employers do not charge registration, training, software or security deposits. Other signals include a company with no landline or verifiable office, an offer letter from a webmail address, and a dashboard that only lets you withdraw after paying more.

Is a work from home scam a criminal offence in India?

Yes. Inducing someone to pay fees on a false promise of employment is cheating under section 318 of the BNS 2023. A fake portal or cloned website adds section 66D of the IT Act 2000, and misuse of another person's identity adds section 66C. Threats to silence a victim attract section 351 BNS.

Can I recover money paid to a task scam?

Recovery depends on speed. Report to 1930 and cybercrime.gov.in the same day so the beneficiary account can be frozen while funds remain. Then register an FIR under section 173 BNSS. Where the accused is identified with assets, a civil suit for recovery can follow. Money already withdrawn across states is usually difficult to retrieve.

What is a prepaid task scam?

It is a variant where the victim is paid a small amount for simple online tasks, then asked to deposit money to unlock higher-paying tasks. The dashboard shows growing earnings that cannot be withdrawn without further fees. The early payout is a marketing cost funded by other victims, designed to build trust before the larger deposits.

Should I report the fake recruiter's page to the platform?

Yes, and in writing. Under the IT Rules 2021 an intermediary must act on complaints through its grievance officer within the prescribed timelines. Attach the page URL, screenshots and your payment records. Takedown stops other victims and creates a dated record that supports your police complaint.

What if the company refuses to refund my registration fee?

Put the demand in writing to the company's registered address and to the payment platform, and keep proof of delivery. If the work never existed, the refusal is evidence of dishonest intent rather than a contract dispute. Report it as cheating and, where the amount justifies it, pursue a civil recovery claim alongside the criminal complaint.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact