Fake job offer and task scam evidence · South Africa
·Scammed by a fake job offer? Capture the proof before the scammer deletes it.
A fake recruiter on WhatsApp, an unreal salary, a task app that asked you to deposit money. Capture the chat, the profile and the dashboard now, while they still exist, so your bank can freeze the payment and your SAPS case, your SAFPS report and the Hawks are actually acted on. The scammer deletes it all within hours.
You were targeted, not careless. With unemployment near 33% and youth unemployment above 60%, jobseekers are the prime target, and impersonation fraud in South Africa jumped 356% in a single year. Most losses are never recovered, because people report it with nothing but a screenshot the bank can wave away. The proof that changes that is on your screen right now, tonight.
SnapPack from $4.99 (about R90) for 10 captures, one-time and no account required, or start the 7-day free trial. Works on Chrome and Edge.
SHA-256 hashed · Bitcoin timestamp · Verifiable by anyone, for free
The job offer, today
HR Team · Takealot Careers
online
Today
You are hired! Remote role, R7,500 a week. No interview needed.
21:58
Just send R850 to activate your onboarding kit.
22:01
Sent. When do I start?
22:04
Two days later
Takealot Careers
unavailable
This account no longer exists
The chat, the profile and the money are gone.
But you captured it. Your sealed proof is ready for your bank, your SAPS case and your SAFPS report.
Illustrative example. The recruiter deletes the offer, the chat and their profile within 48 hours. Because you captured it with ProofSnap while it was live, you keep proof your bank, SAPS and fraud investigators will accept.
Still chatting to them? Been asked to pay a deposit, fee or "tax" to get your money?
Do not pay. Capture the chat, the profile and the dashboard now, before you send another cent and before they block you and delete everything.
Every package can be verified by anyone, for free, in the open Trust Verifier.
What to do about a fake job offer in South Africa, in one paragraph
If a job offer feels too good to be true, or a task app is asking you to deposit money to unlock your earnings, it is almost certainly a scam. Do three things tonight, in order. One, stop paying: no real employer asks you to deposit funds to get your wages, and under the Employment Services Act it is illegal for an employer or agency to charge a work seeker any fee, so a request for a training, registration or placement deposit is itself the crime. Two, capture the evidence while it still exists: the recruiter chat, the recruiter or company profile, the fake earnings dashboard, the payment or wallet instructions, and your own banking record, because the scammer deletes these within a day or two. Three, report and freeze: contact your bank to try to stop the transfer, open a case at your nearest SAPS station for a CAS number, report to SAFPS through Yima, and ask that the matter be referred to the Hawks if a syndicate is involved. A plain screenshot is easy to dismiss and hard to defend under ECTA section 15; a ProofSnap capture is hashed and timestamped, so it stays verifiable after the originals are gone.
How the fake job offer plays out
Whether it is a fake recruiter or a task app, the arc is the same: build trust, then turn the payout into a trap. It is the same playbook behind crypto pig butchering scams, only wrapped in a job. Knowing the stages tells you exactly what to capture.
The unsolicited contact
A message arrives out of nowhere on WhatsApp, Telegram, SMS or a LinkedIn DM. It flatters your profile and offers flexible remote work, often R100 to R600 a day for minutes of effort. Capture the profile and the first message now.
The trust build
You do a few simple tasks and receive small real payouts of R20 to R80, or you get a polished offer letter with a real company logo. It feels legitimate. Capture the offer letter, the app dashboard and the early payouts.
The deposit trap
A combo task appears: deposit R500 to unlock R1,500, usually in crypto. The dashboard shows a growing balance to pull you deeper. Capture every deposit demand and the wallet or bank account details.
The disappearance
The account is frozen, a final tax or withdrawal fee is demanded, and the operators vanish. The profile, the chat and the app go dark within hours. Whatever you did not capture is now gone.
The evidence with the shortest life is the most valuable: the fake earnings dashboard that proves you believed you were working, and the deposit demand that proves the fraud. Both are gone within 48 hours. Capture them first.
The red flags of a fake job offer
Many of these start with a fake recruiter profile, so it helps to know how to spot a fake LinkedIn profile. If you see two or more of these flags together, treat it as a scam and start capturing before you respond.
Pay far too high for the work. Thousands of rand a week for minutes a day is bait, not a salary.
No real interview. A job offer with no hiring manager and no interview is a warning sign.
Pay to get paid. Any deposit, placement fee, equipment charge or crypto top-up to unlock earnings is the scam.
A private number or free email, not a .co.za domain. A Gmail address, or an unknown WhatsApp number with a foreign prefix like +62 or +91, is not a real recruiter.
Your ID and bank details, early. Being asked for your ID number or banking details before any real process is data harvesting.
An EFT to a personal account. A "training kit" paid by EFT to an individual, not the company, is a trap.
Constant urgency. Pressure to accept, deposit or decide right now is designed to stop you checking.
A deepfake interview. South Africa has the highest deepfake fraud rate in Africa, and a face swap can impersonate a manager on Zoom or Teams.
A trusted brand, off-channel. Big retailers, banks and even SAPS get impersonated, but none of them recruit through WhatsApp.
What South African law expects from your evidence
A WhatsApp chat or a task app screen can be used, but the law asks a specific question about it. Meeting that test is the whole point of a ProofSnap capture.
ECTA section 15: the reliability test
Under the Electronic Communications and Transactions Act, a data message is admissible, and a court weighs it by the reliability of how it was generated, stored and communicated, and how its integrity was maintained. A screenshot fails on exactly those points: no provable time, no way to show it was not altered. A ProofSnap package answers each one, with a SHA-256 hash, a Bitcoin timestamp, the full page HTML and a chain-of-custody log.
Cybercrimes Act 19 of 2020: it is a crime
Fake job offers and task scams are fraud, and the Cybercrimes Act criminalises the data fraud, phishing and impersonation they rely on. That makes them a matter for a SAPS case and, where a syndicate is involved, the Hawks. Clean, time-stamped evidence is what lets an investigator act instead of closing the docket, and what your bank needs to attempt a freeze or reversal.
They are not allowed to charge you at all. Under section 15 of the Employment Services Act 4 of 2014, no employer or private employment agency may charge a work seeker any fee, with a fine of up to R50,000 per contravention. A demand for a training, registration or placement fee is not just a red flag, it is a criminal act, and your ProofSnap capture is the proof of it.
ProofSnap is an evidence tool, not legal advice. For your matter, consult a qualified attorney. This section is a plain-language summary, not a statement of how any court will rule.
Why a screenshot will not be enough
A screenshot has no provable date
An image can be cropped, edited or backdated in seconds. A bank, a platform or an investigator can dismiss it as unverifiable, and under ECTA section 15 the burden falls on you.
The originals get deleted
Delete for everyone, disappearing messages, a removed profile, a taken-down site. Once the scammer clears the trail, a screenshot is all you have, and it is the weakest kind of proof.
A ProofSnap capture proves it existed
Each capture is SHA-256 hashed and anchored to the Bitcoin blockchain at the moment it is taken, with the full page HTML and a chain-of-custody log. Anyone can verify it, for free, even after the original is gone.
Takealot Careers · HR Team
Senior Talent Partner
This profile no longer exists
The scammer deleted it two days later.
Already blocked, and the accounts are gone?
You can still build a report that gets acted on. Capture what remains today, before more of it disappears too.
Your banking app or exchange record showing the outgoing payment, and any transfer still pending.
Every email and message you still have from the recruiter or the platform.
The wallet or bank account details you were told to send money to.
Any profile or job post still live. Scammers reuse them, so capture before they cycle the account.
Then block and report the contact on WhatsApp, alert your bank and a credit bureau, open a SAPS case and report to SAFPS. A partial, timestamped record still beats a screenshot with no provable date.
Capture court-ready proof in four steps
You do not need a lawyer or a forensic expert. Install the extension, click, and you have a sealed evidence package in under a minute.
Add ProofSnap
Install the Chrome or Edge extension. Buy SnapPack for $4.99 for 10 captures with no account, or start the 7-day free trial.
Open the evidence
On your computer, open the recruiter chat on WhatsApp Web or Telegram Web, the LinkedIn profile, the cloned company site, the job posting or the task app dashboard.
Click to capture
One click captures the full page, the underlying HTML, the metadata and a screenshot together, then hashes and timestamps them on the Bitcoin blockchain.
Report and freeze
Attach the evidence package to your SAPS case and SAFPS report, and give it to your bank when you request a freeze or reversal.
What is inside your evidence package
Every capture produces a self-contained ZIP that proves what existed, when, and that it was not altered. This is the difference between a screenshot and evidence an investigator or a bank can rely on.
- The full capture: a screenshot, the complete page HTML and the page metadata, not just a picture.
- A SHA-256 manifest and signature: a cryptographic fingerprint of every file, so any later change is detectable.
- A Bitcoin OpenTimestamps anchor: independent proof the files existed at capture time, verifiable by anyone.
- A chain-of-custody and forensic log: a documented record of how and when the capture was made.
- A public key for verification: so any third party can confirm the signature without contacting you or ProofSnap.
The package can be checked by anyone, for free, in the open Trust Verifier. ProofSnap is an evidence tool, not legal advice.
Evidence.zip contents
Where to report in South Africa, and why the evidence matters
Investigators and banks prioritise reports with clear, time-stamped evidence, the standard covered in our guide to documenting online scam evidence. Attach your ProofSnap package to each channel below. Your SAPS case gives you the CAS number your bank will ask for when you request a reversal or chargeback.
SAPS
Open a criminal case at your nearest station.
- Get a CAS number (case reference)
- Bring your captured evidence and payment records
- Ask that it be referred to the Hawks if a syndicate is involved
The Hawks (DPCI)
Priority crime and organised fraud syndicates.
- saps.gov.za/dpci
- Escalate through your SAPS case
SAFPS · Yima
Report the scam and apply for protective registration.
- yima.org.za
- Hotline 083 123 SCAM (7226)
- SAFPS 011 867 2234
Cybersecurity Hub
National point for cybercrime incidents, run by the Department of Communications and Digital Technologies.
- cybersecurityhub.gov.za
- Or lodge it through your SAPS case
Your bank, first
If you sent money, phone your bank's fraud line immediately to ask for an urgent recall or fraud hold. Speed matters most: an EFT is not a card chargeback, and once funds clear, recovery is much harder. Give them your captured evidence and your CAS number. The SARB also lists fraud channels.
Beware of recovery scams and fake SAPS callers. Anyone who contacts you promising to recover your money for an upfront fee is running a second scam, and SAFPS has warned of fraudsters impersonating SAPS. Real agencies never charge to process your report. Only trust contacts you reached out to yourself, using official details.
Simple pricing when every hour counts
You do not need a subscription to preserve tonight's evidence. Buy a SnapPack and capture right away.
SnapPack
$4.99
one-time, no account required (about R90)
- 10 forensic captures
- SHA-256 and Bitcoin timestamp on each
- No subscription, captures are yours to keep
7-day free trial
Free
full extension, card required to start
- Unlimited captures during the trial
- Full evidence package on every capture
- Cancel any time before it renews
A screenshot, a print to PDF, or a ProofSnap capture
| What you need to prove | Screenshot | Print to PDF | ProofSnap |
|---|---|---|---|
| Provable date it existed | No | No | Yes, Bitcoin anchored |
| Tamper-evident | No | No | Yes, SHA-256 |
| Meets the ECTA section 15 reliability test | Weak | Weak | Built for it |
| Captures the underlying HTML | No | Partial | Yes |
| Verifiable by a third party | No | No | Yes, free and open |
| Ready in under a minute | Yes | Yes | Yes |
Frequently asked questions
Open a case at your nearest SAPS station so you receive a CAS number, which your bank will ask for, and ask that the matter be referred to the Hawks if it involves a syndicate. Report the scam to SAFPS through Yima at yima.org.za or the hotline on 083 123 SCAM (7226), and apply for protective registration if your ID was exposed. If it involved an investment or a financial services provider, report it to the FSCA. Contact your bank immediately to attempt a freeze or reversal. Investigators and banks prioritise reports that include the conversation, wallet or account details and time-stamped records, which is exactly what a ProofSnap package provides.
Yes. Under section 15 of the Electronic Communications and Transactions Act (ECTA), a data message such as a WhatsApp chat is admissible, and the court weighs it by looking at the reliability of how it was generated, stored and communicated, and how its integrity was maintained. A plain screenshot is easy to challenge on exactly those points. A ProofSnap capture is SHA-256 hashed and anchored to the Bitcoin blockchain at the moment of capture, with the full page HTML and a chain-of-custody log, so its integrity and the time it existed can be independently verified. That directly supports the reliability test ECTA section 15 asks a court to apply.
Move fast and preserve what still exists. Even if the recruiter side is gone, capture your own records: your banking app or exchange history showing the outgoing payment, any email you received, the wallet or account details, and any fake recovery contact that reaches out again. If you captured the profile, the chat or the fake dashboard while they were live with ProofSnap, those captures carry a blockchain timestamp and a SHA-256 hash, so they remain verifiable even after the originals are deleted. The most useful thing tonight is to capture everything before it disappears, then open a SAPS case and ask your bank for a freeze or reversal.
A task scam is a fake online job that starts with an unsolicited WhatsApp, Telegram or SMS message offering flexible remote work, often R100 to R600 a day for simple tasks such as liking videos or rating apps. You create an account, complete a few tasks and receive small real payouts of R20 to R80, which builds trust. Then combo tasks appear that require a deposit, usually R500 to R2,000 and often in crypto, to unlock the next set or to withdraw. The dashboard shows a growing fake balance to pull you deeper, then the account is frozen, a final tax or withdrawal fee is demanded, and the operators vanish. Task scams are among the fastest-growing fraud types in South Africa.
A plain screenshot has no provable date and is trivial to edit, so a bank, a platform or a court can dismiss it as unverifiable, which matters even more under the ECTA section 15 reliability test. A ProofSnap capture is different: each file is SHA-256 hashed and anchored to the Bitcoin blockchain through OpenTimestamps at the moment of capture, with a chain-of-custody log and the full page HTML preserved, not just an image. The content and the time it existed can be independently verified by anyone, for free, even after the scammer deletes the original.
Yes. ProofSnap is a Chrome and Edge extension that captures whatever is open in your browser, including WhatsApp Web, Telegram Web, LinkedIn messages and profiles, Instagram, email threads, the fake company website, the job posting and the task app dashboard. It captures the full page, the HTML, the metadata and a screenshot together, then hashes and timestamps them. For phone-only apps, open the web version on your computer, or capture the payment records, emails and any web links you were sent.
Do three things in order. First, stop paying: no legitimate employer asks you to deposit funds to unlock wages, and a demand for a final tax or withdrawal fee is the scam, not a fee. Second, capture everything while it still exists: the chat, the profile, the dashboard, the wallet or account details and your own payment record, so the evidence survives the scammer deleting the accounts. Third, report and freeze: contact your bank immediately to try to stop or reverse the transfer, open a SAPS case for the CAS number, and report to SAFPS through Yima. Be aware of recovery scams: anyone who contacts you promising to get your money back for an upfront fee, or who claims to be from SAPS, is a second scam.
The strongest red flags are: an offer that arrives unsolicited by SMS, WhatsApp, Telegram or LinkedIn DM; pay that is far too high for little work; a job offer with no real interview; a recruiter using a Gmail or free email address instead of the company domain; any request to pay upfront for a starter task set, training or a placement fee; any request to deposit money to unlock your earnings; being asked for your ID number or bank details very early; and pressure to act immediately. In 2026, watch for AI deepfake interviews, since South Africa has the highest deepfake fraud rate in Africa, and for scammers impersonating trusted brands, banks or even SAPS.
No. Under section 15 of the Employment Services Act 4 of 2014, no employer or private employment agency may charge a work seeker any fee for finding or placing them in a job, and a contravention carries a fine of up to R50,000. So any demand to pay for a starter task set, training, a registration fee, an onboarding kit or a placement is not a normal cost, it is unlawful, and it is one of the clearest signs of a fake job offer. Capture the demand as evidence before you pay, then report it.