There's one category of scam text that frightens nobody. No blocked account, no fine to settle within 48 hours, no parcel stuck in transit. Quite the opposite: the message is polite, almost warm, and it offers something a lot of people genuinely want. Work.
"Hello, I'm Camille from the recruitment team. Your profile matches a remote position, €25 to €45 an hour, flexible hours, no experience required. Interested? Reply YES or contact me on WhatsApp."
In 2026, this type of message has become one of the three most-reported messaging fraud campaigns in France, alongside the fake parcel and the fake bank adviser. What sets it apart: it isn't trying to rob you in thirty seconds. It's trying to build a relationship. And that relationship can run for three weeks before the first euro leaves your account.
Why fake recruitment works where the fake parcel fails
Classic smishing campaigns run on fear and urgency. They still work, but they're running into an increasingly savvy audience: nearly everyone has now heard that a "parcel awaiting €1.99 in customs fees" is a scam.
Fake recruitment sidesteps that vigilance through a door nobody is watching: desire. It isn't the fear of losing that makes you reply, it's the hope of gaining. And hope lowers your defences far less obviously than panic does, because it doesn't smell like a scam.
Three factors specific to the current period pile on top:
- The normalisation of remote work and freelance gigs makes the offer credible. Jobs paid per task, with no formal interview, recruited by message, really do exist.
- Massive data leaks — telecoms operators, e-commerce platforms, job boards — have put databases into circulation containing first name, surname, phone number and sometimes industry sector. So the message can address you by your first name and mention "your experience in logistics".
- Generative AI tools now produce flawless French. The days of the typo-riddled message that instantly gave the fraud away are over.
One figure worth remembering: according to the successive annual reports published by Cybermalveillance.gouv.fr, phishing remains, year after year, the number-one threat reported by private individuals in France. The fake job is just one variation on it — but a highly profitable variation for the networks that run it.
The four variants you're most likely to meet
Not every fake job offer sent by text is after the same thing. Recognising the variant lets you see the trap coming.
1. The "task scam": like, rate, order
This is the dominant version in 2026. You're given absurdly simple micro-tasks: liking videos, rating hotels, validating fictitious orders on a fake e-commerce platform. You watch your "balance" climb in a slick dashboard. You even receive a first genuine withdrawal — €20, €40, sometimes €80. That's the bait.
Then comes the top-up account mechanic. A "premium" task requires a €60 advance, reimbursed with a bonus. Then €200. Then, because you made "a sequencing error", your €1,400 balance is frozen and you have to pay €700 to unlock it. Each payment makes the next one harder to refuse, since walking away means losing everything you've already put in.
2. Identity harvesting
Here, no money is asked for. You're made to fill in an "application file" with both sides of your ID, bank details, social security number and proof of address. The jackpot for a fraudster: enough to open accounts, take out consumer loans or file benefit-fraud claims in your name.
3. The money mule
Legally the most dangerous variant. The "job" consists of receiving transfers into your personal account and forwarding them on, often in cryptocurrency, keeping a commission. That is money laundering. Under French law, a mule can be prosecuted even when acting in good faith: the Criminal Code punishes laundering and handling stolen goods, and case law regularly finds gross carelessness. The practical result: bank account closed, registration on the incident files, and criminal proceedings.
4. The fake recruiter from a real company
The most polished impersonation: the message claims to come from a well-known brand, points to a .shop or .top site mimicking its visual identity, and the interview takes place on an encrypted messaging app "for HR confidentiality reasons". No serious HR department runs a full recruitment process without ever showing a face or using a verifiable professional email address.
Anatomy of a message: the eight giveaway signals
| Signal observed | What it means |
|---|---|
| First contact is an unsolicited text or WhatsApp message | No legitimate recruiter cold-calls by text about a job you never applied for |
| The message names no specific role | "Flexible assignment", "online work": the vagueness is structural |
| Pay wildly out of proportion to the task | €30/hour for liking videos doesn't exist in any real economy |
| Immediate switch to WhatsApp or Telegram | These channels escape carriers' anti-spam filtering |
| A "personal" +33 6 / +33 7 number | An HR department uses a landline or an alphanumeric sender ID |
| "No experience required, no interview" | The complete absence of selection is the opposite of recruitment |
| A request for an advance, however small | No legal job requires you to pay to do it |
| Urgency about the number of places left | Artificial scarcity, a classic manipulation lever |
Point 7 deserves to be underlined mentally in bold: in France, article L. 5321-3 of the Labour Code forbids a placement intermediary from charging recruitment fees to the candidate. Any request for money ahead of a job is, in itself, unlawful — whether the offer is real or not.
What changed in 2026: industrialised credibility
Three developments make these campaigns considerably harder to spot than they were two years ago.
Personalisation using stolen data. The messages no longer say "Hello". They say "Hello Marc, we saw your profile in the restaurant sector." That single detail is enough to tip a majority of recipients from suspicion into curiosity.
Fake work platforms. You're no longer asked to trust a conversation: you're given a username, a password, a dashboard with assignment history, earnings charts and responsive customer support. The interface is the main lie; the messages are merely the way in.
Fake reviews and the fake community. WhatsApp groups full of enthusiastic "colleagues" posting screenshots of successful withdrawals are in fact populated by accounts the fraudsters control. That's manufactured social proof, and it is fearsomely effective on someone who is isolated.
Faced with that level of sophistication, the individual response can no longer be "I'll spot it when I see it". It has to be procedural: fixed rules, applied before you even read what the message says.
The habits that kill the scam at the root
Never leave the official channel
A job offer is verified somewhere other than in the message. Open the company's official website by typing the address yourself, look for the vacancy in its careers section, call the switchboard. If the offer isn't there, it doesn't exist.
France Travail also provides a reporting facility for fraudulent job offers, and regularly reminds people that none of its advisers ever asks for payment or bank details in exchange for access to vacancies.
Separate your digital uses
A great deal of the damage comes from a single email account used for everything. Creating a dedicated address for job applications, using a password manager so you never reuse a credential, and enabling app-based two-factor authentication rather than SMS on sensitive accounts: those are the three moves that limit the domino effect. For two-factor authentication, a physical FIDO2 security key is the next level up, particularly on email and banking accounts, because it resists phishing even if you enter your credentials on a fake site.
Never send a raw copy of your ID
If a document really does have to be sent, watermark it. Add across the scan the wording "Document for the sole use of [company] — [date]", in plain, legible text. A portable document scanner makes this hygiene easier if you apply for jobs often, but a simple image editor will do. A fraudster can no longer reuse a scan marked that way to open an account elsewhere.
Protect the device itself
Some fake job campaigns don't stop at the message: they push you to install an "assignment management app" from outside the official stores. That's the classic entry point for a banking trojan capable of reading your texts — and therefore your verification codes. Two rules are enough: never install an .apk file received via a link, and leave Play Protect or its equivalent switched on. On a desktop computer used for job hunting, a multi-device antivirus suite adds a layer of fraudulent-site filtering that is far from superfluous.
Deliberately slow down
Every one of these scams depends on one thing: your speed. You're rushed, you're added to a group, you're given a deadline. Setting a personal rule — "no money and no documents sent within 24 hours of a first contact" — neutralises pretty much every scenario described here. Some readers find it useful to keep a small job application tracking notebook recording contacts, dates and channels: rereading your own notes with a cool head often reveals the inconsistency you missed in the moment.
You've already replied: what to do next
Answering one of these texts isn't beyond repair, but the order of actions matters.
- Cut contact immediately. Don't warn them, don't explain, don't negotiate a refund: any reply restarts a manipulation phase, often in the shape of a fake "funds recovery service" that will defraud you a second time.
- If money has gone out, contact your bank without delay and ask for the transfer to be blocked or recalled. For an unauthorised card payment, article L. 133-18 of the Monetary and Financial Code requires the bank to refund you, unless you were grossly negligent — and your position is stronger where you did not deliberately approve the transaction.
- If you've handed over identity documents, file a police complaint and keep the receipt: it will serve as evidence if credit is taken out in your name. You can also exercise your right of access with the Banque de France to check whether you appear on the incident files.
- If you've received and then forwarded funds, spend nothing, tell your bank and report the situation of your own accord. Coming forward voluntarily is the main point in your favour.
- Report the message. Forward the text to 33700, the official reporting service for SMS spam and fraud in France. File a report on Cybermalveillance.gouv.fr and on internet-signalement.gouv.fr (the PHAROS platform). For offers impersonating a company, alert its HR department too: they often file complaints of their own.
- Change the passwords of every address or account shared during the exchange, starting with your main email.
To dig deeper into the manipulation mechanisms at play, a guide to personal cybersecurity covering social engineering can be read over a few evenings and lastingly changes the way you look at this kind of message.
Key takeaways
Fake recruitment by text isn't just one more scam on the list. It's a model that exploits a social vulnerability — the search for a job, for extra income, for work compatible with personal constraints — and targets the most exposed groups first: students, single parents, career changers, pensioners on small incomes.
Three sentences are enough to immunise yourself:
- An employer doesn't cold-message you by text about a job you never applied for.
- A job is never paid for in advance, under any pretext, even a refundable one.
- A personal bank account is never used to move a third party's money.
The rest — the dashboards, the enthusiastic colleagues, the withdrawal screenshots — is nothing but scenery. And scenery, by definition, collapses the moment you try to lean on it.
