Almost every job scam aimed at new Filipino virtual assistants ends in one of two places: you send them money, or you let their money move through your account. Real employers and clients pay you. They never need a “recharge”, a training fee, a deposit for equipment from their supplier, or the use of your GCash. If an opportunity reaches either of those points, stop, no matter how professional it looked before.

This guide breaks down the scams that show up most in Filipino VA communities and in official warnings, step by step, so you can recognize the script early. For the broader question of whether VA work itself is real and how to judge a single offer, read Is Being a VA Legit or a Scam?.

Scam 1: the task or “like and earn” scam

This pattern is common enough that the Cybercrime Investigation and Coordinating Center (CICC) warned about online part-time task scams in May 2024, and the FBI’s Internet Crime Complaint Center issued a public alert on the same pattern in June 2024.

How it runs:

  1. First contact. An unsolicited SMS, WhatsApp, Viber or Telegram message: “Hi! We are hiring part-time online. Earn ₱800 to ₱3,000 daily by liking videos. No experience needed.” Sometimes it names a real company or app.
  2. Easy money. You like a few videos or rate products and actually receive ₱100 to ₱200 in GCash. This is the hook. It proves to you that it “works”.
  3. The group. You are moved to a Telegram group with a “mentor” or “receptionist” and other members posting screenshots of big payouts. Many of those members are accounts run by the same people.
  4. Prepaid tasks. Now the tasks need you to “recharge” first: deposit ₱1,000 to get ₱1,300 back. Early ones pay out.
  5. The trap. A “combination task” or “merchant order” pushes your balance negative or freezes it. To withdraw, you must pay a larger amount, then a “tax”, then a “verification fee”. The balance on the dashboard keeps growing; none of it is real.

The tell: any job where you pay to receive your own earnings. The FBI’s alert lists three red flags: the employer asks for cryptocurrency payments, the work is simple “optimization” like clicking or rating, and nobody asks for references or an interview.

What to do: stop at step 3. If you are already at step 5, do not send “one last payment”. It never releases the balance.

Scam 2: the fake recruiter on WhatsApp, Telegram or a platform inbox

Scammers copy the names of real companies, BPOs and agencies, and sometimes of real recruiters.

How it runs: a message says they “came across your profile” and you are “perfect for a pending project”. Fiverr’s own safety page quotes a typical one: a “recruiter” offering $25 per page and asking you to contact their manager on Telegram. The “interview” is a text chat. The offer arrives within hours. Then comes a form for your full name, address, birthday, ID photo and bank or GCash details, or a request covered in scams 3 to 5 below.

The tells:

  • The conversation moves off the platform before any contract. Upwork’s rules forbid this before a contract, and Upwork and Fiverr both treat it as a red flag.
  • The “company” email is Gmail or a look-alike domain (for example “-careers” or “-hr” added to a real name).
  • No video call, or a call where the camera is off.
  • An offer with no interview about your actual skills.

What to do: find the company’s website yourself (not through their link), look for the role on its careers page, and email the address listed there to ask whether the recruiter works for them.

Scam 3: the upfront training fee or “starter kit”

How it runs: an ad or page promises “guaranteed client placement” after a VA course. Or an “employer” hires you and then says you must first complete paid training: “₱2,500 for onboarding and VA kit, refundable after your first salary.”

The tell: the person paying you is asking to be paid first. The U.S. Federal Trade Commission’s guidance is blunt: honest employers will never ask you to pay to get a job.

What it is not: buying a course you chose yourself from a provider that does not promise you a job is a purchase decision, not necessarily a scam. The scam is the fee as a condition of being hired or paid.

Scam 4: the equipment purchase and fake payment

How it runs: you are “hired” and told the company will fund your laptop or headset. They send a check (common with US targets) or, for Filipinos, a screenshot of a transfer or an actual deposit to your GCash or bank. You must buy the equipment from “our approved vendor”, or send back an “overpayment”.

Either the payment is fake, and you lose what you sent to the vendor, or the money that reached your account was stolen from someone else, and you have just moved it for the scammer. The FTC’s job-scam guidance warns never to send money back from a check an employer sends you, because it can bounce after you have spent the funds.

What to do: never forward, refund or spend money an “employer” sends you before work begins. If unexplained money arrives in your GCash or bank account, call the provider through its official app or hotline and ask them to handle it.

Scam 5: renting your account (the money mule trap)

How it runs: “Earn ₱3,000 a month passively. Rent us your verified GCash/Maya/bank account.” Or “Let us use your verified Upwork account; we do the work, you get 20%.” Sometimes it is dressed up as a job: “payment processing assistant”, “finance VA who receives client payments and forwards them”.

Why it is serious: the Anti-Financial Account Scamming Act (Republic Act 12010, signed 20 July 2024) treats using, lending, renting, selling or buying a financial account to move proceeds of crime as money muling. Opening an account under someone else’s identity, and recruiting others to do any of it, are also covered. The penalty for an individual is 6 to 8 years’ imprisonment, a fine of ₱100,000 to ₱500,000, or both, with the account closed and the proceeds forfeited.

Renting a freelance account also breaks Upwork’s and Fiverr’s rules. Fiverr, for example, links each payout method to one account and treats the same method across accounts as grounds to disable them.

What to do: never let anyone else log in to, receive money through, or “borrow” any of your accounts.

How it runs: a “client” sends a link to view the brief or sign the contract. The page looks like Upwork, Google or your bank and asks you to log in. Or the client wants a big unpaid “test” (a full lead list, a live shift, a week of posts), then disappears with the work.

Upwork names free work requests as a red flag. Fiverr says it will never ask you to log in outside fiverr.com or install an app. Open the platform yourself in a new tab instead of clicking.

Red flags at each stage

Stage Red flag
First contact Unsolicited message offering high pay for easy work; you never applied
Interview Text-only chat on Telegram or WhatsApp; no questions about your skills
Offer Instant offer; pay that does not match the task (₱3,000 a day to like videos)
Onboarding Fee for training, kit, background check or “activation”
Equipment Money sent to you to buy from their vendor, or an overpayment to refund
Payment You must deposit to withdraw, pay “tax” to release earnings, or receive and forward money
Accounts Requests for your password, OTP, or the use of your GCash, bank or freelance account

From Marco Espela, founder: The scam messages I have received while working remotely usually had the same tells: a huge salary for a simple task such as retyping a PDF into Word, perks that were too good to be true, a request for my banking information before I had been hired, and a request to send photos of my ID “to begin work.”

A two-minute check before you share anything

  1. Search the company name plus “scam” and “reviews”, and look up its official website yourself.
  2. Compare the sender’s email domain with the website’s domain, letter by letter.
  3. Ask for a video interview with the hiring manager.
  4. Ask for the written offer: role, pay, schedule, payment method.
  5. Ask yourself: at any point do I pay, or does money pass through me? If yes, stop.

What to share early: your CV, portfolio, general location and availability. What to hold until the employer is verified and the role is real: government ID and bank details, through the employer’s official system. What never to share: passwords, one-time PINs (OTPs), or control of your accounts.

If you have already paid or shared access

Act in this order. Speed matters most for the money.

  1. Call your bank or e-wallet first through the number on its official app, website or card. For GCash or Maya, use the in-app help to report the transaction. Ask whether the transfer can be held or reversed, and report the receiving account.
  2. Secure your accounts. Change passwords from a device you trust, starting with your email. Turn on two-step verification. Sign out other sessions. Remove unknown devices, forwarding rules and linked apps.
  3. Save evidence without editing it: screenshots of chats with usernames and phone numbers visible, the job post, receipts, GCash or bank reference numbers, and any wallet addresses.
  4. Report in the Philippines. Call the CICC’s Inter-Agency Response Center hotline 1326, which is toll-free and open 24/7 and takes reports of cybercrimes including unauthorized e-wallet transfers. You can also file with the PNP Anti-Cybercrime Group through the e-Complaint service on its official site, acg.pnp.gov.ph.
  5. Report on the platform where it started: use Report on Upwork, Mark as Spam or Report on Fiverr, or the report option on LinkedIn, Facebook or Telegram.
  6. If US-based actors were involved, you can also file with the FBI’s IC3 at ic3.gov and the FTC at reportfraud.ftc.gov.
  7. Ignore “recovery” offers. Messages promising to get your money back for a fee, including fake pages using the CICC’s name, are a second scam. The FBI alert specifically warns against crypto recovery services.

Being scammed says nothing about your ability to do VA work. These operations are run by organized groups with scripts that have been refined on thousands of people.

Safer places to look for work

Platforms with contracts and payment systems (Upwork with funded milestones, Fiverr orders) and direct employers you have verified are safer starting points than unsolicited messages. Where to Find Virtual Assistant Work Online lists the main options, and How to Start on Upwork explains the payment-protection rules.

FAQ

Is a job that pays through GCash a scam?

No. Many legitimate Philippine employers pay through GCash. The problem is a job that asks you to pay into GCash, or to receive and forward money.

The recruiter used a real company name. Doesn’t that make it real?

No. Scammers use real names and logos because they work. Verify through the company’s own website and contact details, not the ones in the message.

I received my first ₱150 payout. Is it legit?

That small payout is part of the task-scam script. The question is whether you will ever be asked to deposit money. If yes, it is a scam.

Can I get my money back?

Sometimes, if you report to your bank or e-wallet quickly. Report even if you think it is too late; reports help investigators connect cases. Never pay anyone who promises recovery.

Sources and further reading

Video references

Watch the workflow

Recognize and Report PhishingCISA · CISA explains how to identify and report phishing attempts that often accompany fake remote-work offers.

Fees, limits and platform rules change. The date at the top shows when this guide was last updated, and the sources section links to the official pages it relies on. If something has changed, tell us and we will correct it.