Yes, being a virtual assistant is legitimate work. Businesses pay remote assistants for inbox management, customer support, data entry, research, and scheduling every day. In Upwork’s In-Demand Skills 2026 report, which measured US-originated freelancer earnings in 2025, “General Virtual Assistance” was the number one skill in the Customer Service and Admin Support category, followed by data entry and digital project management.

The scams are real too, and they borrow the same job titles. The US Federal Trade Commission reports that losses to job scams jumped from $90 million in 2020 to $501 million in 2024. The rule that catches almost all of them is simple: a real employer pays you; it never asks you to pay it, deposit money, or hand over control of your accounts.

The five scams that target new VAs

These are the patterns that show up most in VA job searches. Each one has a “tell” you can spot before you lose anything.

Scam How it works The tell
Task or “app optimization” job You rate products or like videos in an app and see earnings grow. Then you must deposit money (often crypto) to “release” the next set of tasks or withdraw. Any deposit to continue or withdraw. The FTC logged about 20,000 reports of these in the first half of 2024 alone.
Fake check for equipment You are “hired” after a chat interview and sent a check to buy a laptop from the company’s “approved vendor”. The check bounces after you have paid the vendor. You are told where to send money. Real employers ship equipment or reimburse after you buy it yourself.
Paid training or starter kit A “recruiter” requires a training fee, certification fee, or software package before you start. Payment is a condition of being hired.
Account rental Someone offers a monthly fee to use your verified Upwork, Fiverr, PayPal, or bank account. They want your login or identity. This can get your accounts banned and may make you liable for their fraud.
Impersonated recruiter A real company’s name is used on Telegram, WhatsApp, or a look-alike email domain. The contact cannot be confirmed through the company’s own website, and the chat moves fast.

In India the same task scam runs under ads for “ghar baithe job”; in the Philippines it often arrives as a text or Telegram message about “part-time online work”. The structure is identical: small early payouts to build trust, then a larger deposit that disappears.

Legitimate costs versus scam payments

“Never pay to work” is a good rule, but beginners do see some normal costs. The difference is who controls the payment and what it is for.

Normal business cost Scam payment
Upwork Connects to submit proposals (US$0.15 each), bought inside Upwork A “processing fee” sent to a recruiter’s GCash or crypto wallet
A platform service fee deducted from your earnings A deposit required before you can withdraw earnings
A course you found, compared, and chose yourself Training you must buy from the person hiring you
A laptop or headset you buy from any store Equipment you must buy from a seller the “employer” names
Payment-provider fees shown on the provider’s pricing page “Tax” or “clearance” you must pay to release your salary

The 10-minute check for any offer

Run through this before you send an ID, sign anything, or install software.

  1. Find the company yourself. Search the business name in a new tab. Do not click links in the message. Look for a real website, a careers page, and an address.
  2. Match the sender to the domain. An offer from hr@acme-careers-ph.com for a company whose site is acme.com is a red flag. Free Gmail or Outlook addresses are common for small clients, but not for a company claiming to have an HR department.
  3. Confirm the person. Contact the company through the email or phone number on its own site and ask whether the recruiter works there.
  4. Read the written terms. You should be able to see the tasks, hours, rate, currency, and payment schedule in writing.
  5. Check the payment path. On a marketplace, the contract and payment must be on the platform. On Upwork, fixed-price work is protected only when the milestone shows as “Funded” before you start; Upwork says it cannot help recover payment for an unfunded milestone.
  6. Limit access. Real clients invite you into their Google Workspace, Slack, or help desk as a named user. They do not need your passwords, one-time codes, or remote control of your laptop.
  7. Wait 24 hours. Real offers survive a day of checking. Pressure to decide “within the hour” is a tactic.

If you want to ask for verification without sounding accusatory, send this:

Thanks for the offer. Before I share ID documents, could you send the
contract through Upwork (or from your company email domain) and confirm
the hourly rate, weekly hours, and pay schedule in writing? I will reply
within 24 hours of receiving it.

A real client answers this without fuss. A scammer usually pushes back, changes the subject, or disappears.

What a real first offer usually looks like

Real offer Fake offer
Asks about your samples, tools, and availability Hires you after a five-minute chat with no questions about skills
Pay matches the task (a few dollars to tens of dollars an hour, depending on role and market) Very high pay for “simple” work like liking posts
Contract on the platform, or a written agreement and invoice for direct work Everything on Telegram or WhatsApp, no contract
Access through invitations to the client’s tools Asks for your bank login, OTP, or to install remote-access software
Answers verification questions calmly Gets angry or rushes you when you ask questions

If you already sent money or shared access

Move fast; minutes matter for stopping a transfer.

  1. Call your bank or e-wallet through the number in the official app or on your card. Ask them to stop or recall the transfer and freeze the recipient account if possible.
  2. Secure your accounts from a device you trust: change passwords, sign out all sessions, turn on two-step verification, and remove any remote-access app the scammer had you install.
  3. Save evidence: screenshots of chats, usernames, phone numbers, wallet addresses, transaction reference numbers.
  4. Report it. In the Philippines, the Inter-Agency Response Center run by the Cybercrime Investigation and Coordinating Center (CICC) takes scam reports on hotline 1326. In India, call 1930 or file at cybercrime.gov.in. For US-connected scams, use ReportFraud.ftc.gov and IC3.gov. Also report the account to the platform where the contact started.
  5. Ignore “recovery agents”. People who contact you offering to get your money back for a fee are usually the same scammers, or new ones.

Where to start safely

Start with a platform that holds payment on your behalf, build one or two practice samples, and apply only to clearly scoped jobs. How to Become a VA With No Experience has a four-week plan, and Where to Find Virtual Assistant Work Online compares the main job sources. For deeper detail on phishing and fake checks, read How to Spot and Avoid VA Job Scams.

FAQ

Is it a scam if a client asks me to do a test task?

Not automatically. A short test (30 to 60 minutes) on fictional data is normal. Be wary when the “test” is a large piece of real work, such as researching 200 leads for their actual business, done unpaid. Offer an existing sample or a small paid trial instead.

A client wants to move off Upwork to pay me directly. Is that a scam?

It breaks Upwork’s terms during the first two years of a relationship that started there unless the client pays Upwork’s conversion fee, and it removes your payment protection. Treat it as a red flag, especially before any work has been paid.

Is a VA course that promises a job a scam?

A course that guarantees a job or a specific income is making a promise no one can keep. Some paid courses teach useful skills, but check the instructor’s real identity, the refund policy, and whether free vendor training covers the same ground.

Are agencies that hire Filipino VAs legitimate?

Many are. Check that the agency has a registered business, a real office or verifiable leadership, clear pay terms, and no placement fee charged to you. You can check a Philippine business name with the DTI or SEC before signing.

Sources and further reading

Fees, limits and platform rules change. The date at the top shows when this guide was last updated, and the sources section links to the official pages it relies on. If something has changed, tell us and we will correct it.