How to spot fake clients and deepfake job scams in 2026

A new client emails out of nowhere. The budget is generous, the brief is thin, and they want to start today. Or a recruiter offers a remote contract at well above market, with only a quick video call as an interview. In 2026 you should treat both as possible setups. The defence is old and still works: a real client signs a written contract, pays a deposit by a traceable method, and has a footprint you can check. A scammer finds a reason to skip all three.

The scams got industrial

Deepfake fraud is a factory operation now. In March 2026, Malwarebytes reported that scam compounds in Cambodia, Myanmar and Laos were hiring "AI models", real people whose faces are swapped in real time, to appear on video calls for romance and investment fraud. The face on your screen can be rented by the hour.

The losses are real and not limited to big companies. In 2024 an employee at the engineering firm Arup paid out about $25 million after a video call with what looked like the company's finance chief and colleagues, which Fortune reported as a deepfake scam. Deloitte's Center for Financial Services projects generative AI could push US fraud losses to $40 billion by 2027, up from $12.3 billion in 2023, a 32% yearly increase. A more conservative version of that forecast, noted by Biometric Update, still lands near $22 billion.

The same playbook powers job scams aimed at remote workers: fake recruiters, fake companies and fake clients who only ever existed as a script and an avatar. You are a smaller target than Arup, which is why nobody is coming to rescue you if it goes wrong.

What a fake client actually wants

Most scams aimed at independent workers move money the wrong way, rather than stealing a password. The classic is the overpayment scam. A "client" sends a check or transfer for more than you agreed, calls it an accident and asks you to send back the difference. Days later the original payment bounces, and the refund you sent is gone.

Watch for these setups:

• Overpayment and fake-check scams, where you are asked to refund an "accidental" overage.
• Advance-fee jobs that make you buy software, a laptop or "starter equipment" from the client's chosen vendor first.
• Payment offered only by gift card, crypto or irreversible wire, never a normal invoice.
• Task or "data entry" gigs that pay small amounts, then ask you to deposit your own money before bigger payouts appear.

A real engagement does not start with you out of pocket. The Federal Trade Commission's data spotlight on gamified job scams shows reported job-scam losses rising from $90 million in 2020 to $223 million in the first half of 2024 alone. Moody's analysis found that reports roughly tripled between 2020 and 2024.

If you accept cards, a fake client can also pay, take the files and reverse the charge. That is covered in our guide to chargebacks and payment disputes.

Red flags that a client or recruiter is not real

A fake client usually gives themselves away through behaviour. The most reliable tell is resistance to anything that creates a paper trail. Real clients sign things and pay deposits as a matter of course. Someone who treats a basic contract or a small upfront payment as an insult is telling you who they are.

No single item below is proof. Several together are a stop sign.

• They refuse to sign a contract or pay any deposit, or take offence when you ask.
• All contact stays on WhatsApp, Telegram or a personal webmail account, never a company domain.
• The company has no traceable footprint: no real website, no staff you can find, a logo lifted from somewhere else.
• They push you to start this minute and skip your usual intake.
• A recruiter will not do a live camera call, or the "interview" is text only.
• The rate sits well above market with almost no detail about the work.
• The story keeps shifting, and specific questions get vague answers.

Our longer list of client red flags covers the quieter ones.

A ten-minute check before you start

You are checking three things: that the person and company exist, that they will put the deal in writing, and that they will move real money before you deliver real work. Each is easy for a genuine client and painful for a scammer.

1. Email and domain. A real business emails from its own domain, and that domain has a working site with some history. Free webmail plus a famous company name is a mismatch.
2. A live call. Get on video and actually talk, ideally on the discovery call where you would scope the work anyway. A client who dodges the camera every time is a flag.
3. A signed contract. Send a simple agreement with scope, dates and payment terms, and read theirs with the same care.
4. A real deposit. Insist on collecting a deposit before you start through a method that can be traced. Money that clears is the strongest proof a client is real.

Expect to be checked back. Clients are wary of fake providers too, so a footprint of your own (a real site, verifiable work, a proper contract and invoice) makes the exchange smoother.

How to handle a video call you are not sure about

A face on camera is no longer proof of identity. Gartner predicts that by 2028 one in four candidate profiles worldwide could be fake, HR Dive reported, and the tools that fake a job seeker can fake a client. If a call feels slightly off, run a couple of quick tests.

Real-time deepfakes still struggle with movement and surprise.

• Ask them to turn their head fully to the side. A profile angle, or a hand waved in front of the face, often breaks the effect.
• Ask an unscripted question about something local and specific, such as the weather where they are right now. A scammer running a script stalls.
• Watch the edges. Odd lighting at the hairline, eyes that do not quite track and audio lag that never settles are all signs.

Better still, confirm identity on a second channel before any money moves. Call a phone number published on the real company site, not the one they gave you, and ask for the person by name. The scale of this kind of fraud is large: the FBI's Internet Crime Complaint Center logged $16.6 billion in reported losses in 2024, with business email compromise alone at $2.77 billion, according to CyberScoop's summary of the report.

The contract and deposit filter does the quiet work

A signed contract plus a deposit is a practical filter, not a guarantee. A real client signs and pays to get started. A scammer or fake recruiter dodges both, because both create a record with their name, their money and a date.

You do not need to accuse anyone or play detective. Make the normal first step a real agreement and a real deposit, then watch what happens. Genuine clients move forward without drama. The fakes go quiet or get angry, which is the answer you were looking for.

What to do if you think you were targeted

Report it, because reports are how patterns get caught. In the US, file with the FTC at reportfraud.ftc.gov and with the FBI's Internet Crime Complaint Center at ic3.gov, even if you lost nothing. Elsewhere, use your national fraud reporting service.

• Stop sending money. Never refund an "overpayment". The original funds are not real, and the refund is the whole scam.
• Cut contact and keep the evidence. Save messages, emails and any recording, then block.
• Tell your network. Scam crews reuse the same scripts and fake companies across many people, so a quick warning in a community channel helps.

How Delivvo builds the contract-and-deposit filter into intake

Delivvo does not detect deepfakes and cannot tell you who is behind a screen. What it does is make the real-client test the default first step, so you never start work on a handshake.

1. Your inquiry form asks the questions that a real client answers and a drive-by scammer skips: scope, budget, deadline and a way to reach them. Leads land on your lead board with a status, not in a chat thread.
2. You answer with a quote built from packages and add-ons, so the price and scope are written down before any work.
3. The client signs the contract by typing or drawing a signature. Delivvo records the SHA-256 hash, the IP address and the device, and archives a PDF, so there is a dated record with their name on it.
4. The deposit invoice goes out on the same link. The client pays through your own processor (Stripe, PayPal or Square), so the payment is traceable and your processor applies its own fraud checks.
5. The client portal opens with a one-time code sent to their email, so the person using it controls that address. Files, approvals and messages then stay in one place.

Delivvo takes 0% of the payment and never holds the money. Every contract and invoice carries a verification code that the client, or their finance team, can check at delivvo.io/verify, so a real company has an easy way to confirm your paperwork is real too. Read more about contracts and e-signatures and the payments setup.

Read more about Delivvo for teams, or start with the CRM and client portal.

FAQ