Why a Job That Wants Your Bank Login Is a Scam

There is a short list of things somebody needs in order to send you money, and everything past that list is about operating your account rather than paying into it.

What a real payer needs to send you money

To pay you, someone needs your name, your account number and whatever routing identifier your country uses — a sort code, a routing number, an IBAN. Payroll and tax may add your address, date of birth, a tax identifier and proof you can work.

That is the list, and it is enough to push money in. Notice what is absent: nothing there lets anybody take money out, sign in as you, or look at your balance.

The distinction is direction. Details that let money arrive are one thing. Anything that lets a stranger operate the account is another, and no payment process needs the second to do the first. So the first question about any onboarding form is whether the request is about receiving or about control.

Details versus access

Work through what has actually been asked for.

If it is your account number and routing details, that is a payment request and it is ordinary.

If it is your online banking username and password, that is access. No payroll system signs into your bank as you.

If it is a card number with expiry and security code, that is spending power rather than a deposit route. A card number is how money leaves.

If it is a one-time code sent to your phone, stop there. Those codes prove that the person holding the account is you, and the only reason another person needs one is to be you at that moment.

If it is a request to install software so somebody can help you set up payroll, that is remote control of the device your banking session runs on.

If it is a request to open a new account, add somebody to yours, or receive a card in your name and send it on, that is not onboarding either.

The payment-processing role

Some versions never ask for a login, because the account itself is the job.

The title is finance assistant, payment processor, local agent, funds coordinator. The described work is receiving client payments, deducting your share and forwarding the rest. The reasons sound like ordinary business friction: the company banks abroad, a supplier needs same-day payment, cross-border fees are high, a client paid the wrong entity.

Stripped of the framing: money of unknown origin passes through an account carrying your name, and you convert it into a form that is hard to follow — an onward transfer, a cash withdrawal, gift cards, crypto.

The goods version puts parcels rather than payments through you, and what a reshipping scam asks you to do is the same structure with a front door in place of an account.

Send it to your account and forward it on

The gentler wording is what makes this version work. Your first pay went out early, take your part and forward the rest to the supplier. A client overpaid, keep something for the trouble and return the balance. We need to test the payment rail before your contract starts. Buy the equipment with what we sent and return the change.

The overpayment version has a mechanism worth understanding. The incoming payment can be reversed after you have sent your own money out. A check can bounce long after it looks cleared. A transfer can be pulled back as fraudulent. When it goes, your outgoing payment does not travel with it, and you are down the difference plus any fee.

The framing changes and the request does not. Money you did not earn arrives, and you are asked to move it on quickly.

Who the consequences land on

Your name is on the account, so that is where the record leads.

Banks watch for money passing straight through an account. What follows is not something a page can predict for you — ask your own bank what happens to an account used this way. But the exposure is structurally yours: the account holder is the identifiable party and the recruiter is an email address.

Two things are worth asking rather than guessing. Whether money comes back to you when your account was the one used is a decision your bank makes under its own rules, so ask what those are before assuming. And an account being closed, or a marker placed against your name, can affect whether you can open accounts elsewhere — ask about that too, rather than discovering it.

Nobody offering you this role carries any part of that.

If you already gave access or already moved money

Call the bank fraud line now, on the number printed on your card or statement rather than one from an email. Say the words: I believe my account has been used for fraud. Ask them to freeze the account, block the payee and open a case with a reference number.

Then, from a different device if you have one: change your online banking password, remove any software you were asked to install, revoke third-party apps connected to the account, and change your email password, because email is the recovery route into everything else.

Keep all of it: screenshots of the advert, the chat, the transfer confirmations, the names and account details you were given. Do not delete the conversation to make it go away — it is what shows you were recruited rather than acting alone.

If copies of your passport or driving license went across too, what to do after sending a scammer your ID has the order to close things in. Then file a report — who to report a side hustle scam to covers which body takes it.

Onboarding that collects the same information legitimately

Genuine employers do ask for banking and identity information, and refusing everything is not a strategy for getting hired.

What separates them is who started the contact, where it happens, and what is collected. Real onboarding follows an offer you can trace: a named company you found independently, an interview with a person whose role appears on the company's own site, an offer letter with terms. It collects an account number and routing details, not a login. It runs on a payroll system with its own domain, not a form on a free document tool. And it can wait until you have checked.

Identity verification is normal too — a document check, sometimes a test deposit whose value you confirm. Notice the direction: a test deposit sends money to you and asks you to read it back. It never asks you to send money on.

If a request fails these and you badly need the work, the answer is still no. A clean bank account is the base for the rest of it, which is where building credit from nothing begins.

Ask your bank before acting on anything an employer tells you about your own account. It is your account, and they will talk to you about it for $0.