Task scam

“Online job” with tasks that asks you to top up USDT: how the scam works and what to do

It starts with a friendly message about a part-time job: rate products, like videos, “boost” hotel reviews, earn a commission for each task. The first payouts are real and small. Then a “combo task” or “lucky order” pushes your balance into the negative, and you are told to deposit USDT to continue and to withdraw what you have earned. That deposit is never the last one. This is a task scam, and it is one of the most common crypto frauds right now. Here is how to recognise it, what to do today, and what can realistically be recovered.

Updated 17 October 2026 · about 8 minutes to read

How the scheme works

The details change, but the structure is almost always the same:

1. The approach. A message on WhatsApp, Telegram, a job site or by SMS from a “recruiter” offering remote work for an hour a day. Sometimes the company name copies a real marketing agency or an online marketplace.
2. The platform. You are given a link to a website or app where you register and get a “work account” with a balance. Tasks are simple: click to rate a product, like an item, submit an “order” for an app or a hotel.
3. Small real payouts. On the first day or two you are allowed to withdraw a small amount. This is the bait: it convinces you that the platform pays.
4. The group. You are added to a chat with other “workers” who post screenshots of big earnings. Most of them are part of the scam.
5. The negative balance. A “combo task”, “premium order” or “lucky bonus” appears that costs more than your balance. Your account goes into the negative, and you are told that you must top it up — usually in USDT — to complete the set and unlock your commission.
6. The escalation. After the top-up, a new combo appears that costs even more. Then a “tax”, a “credit score fee”, an “account upgrade”. Withdrawal is always one payment away.

The balance you see on the screen is just a number in a database controlled by the scammers. The money you deposited went to their wallet the moment you sent it.

Signs it is a scam

• A job offer you did not apply for, arriving in a messenger from an unknown number.
• Pay that is far too high for clicking or rating, with no contract, no interview, no tax documents.
• You have to pay or deposit money to work or to get paid. Real employers do not do this.
• Payment in cryptocurrency, often with instructions to buy USDT on an exchange or from a P2P seller they recommend.
• A “mentor” or “supervisor” who pushes urgency: the task expires, the account will be frozen, your earnings will be lost.
• Your balance turns negative because of a task you did not choose.

What to do right now

1. Stop paying. Do not send the next top-up, tax or fee, even if you are told it is the last one.
2. Do not argue and do not announce that you know it is a scam before you have saved the evidence. Accounts and chats are often deleted quickly.
3. Save everything: the website address, screenshots of your “work account” and balance, the full chat with the recruiter and the mentor, the group chat, the wallet addresses you sent to, and every transaction hash (TXID).
4. List every payment with its date, amount, method — card, bank transfer, P2P purchase, crypto from your wallet or exchange — and the recipient. This list decides which recovery route you have.
5. Protect your accounts. If you gave the scammers a copy of your ID, a selfie, or logins, change passwords, enable an authenticator app, and watch for loans or accounts opened in your name.
6. If you paid by card or bank transfer, call your bank today and report fraud. Deadlines here count from the payment date.

What can actually be recovered

It is better to be honest about this. Task scams are run by organised groups, the crypto moves fast, and much of it is never returned. But the route depends on how each payment was made, and some routes are worth trying.

Payments by card or bank transfer

If you paid the scammers or a seller they sent you to by card or bank transfer, your bank is the first place to try. A card payment may be disputable; a transfer may be recalled if the money is still in the receiving account, or covered by fraud reimbursement rules in some countries. It is not guaranteed and often fails when you bought crypto from a real exchange yourself. Details are in getting money back through your bank.

USDT and other crypto

A blockchain transaction cannot be reversed. What can sometimes happen is a freeze: if the stolen funds land at a regulated exchange, and that exchange receives a timely request supported by a police report, it may hold the account while the authorities act. For USDT, the issuer has in some cases frozen addresses at the request of law enforcement. All of this depends on speed, on where the funds went and on the police getting involved — not on payments to private “investigators”. To see whether your case has a trail worth following, take the test can your funds be traced and frozen and read the first 48 hours.

P2P purchases

If the “mentor” told you to buy USDT from a particular P2P seller, report that seller and the order numbers to the P2P platform. Sellers working with the scam are sometimes identifiable, and the platform keeps their records.

Reporting to the police

File a report even if the amount seems small. Task scams usually have many victims, and reports from different people let investigators link the same wallets and the same platforms. A police reference is also what banks and exchanges ask for before they act. Give them the payment list, the wallet addresses, the transaction hashes, the website and the chats. Our guide on reporting crypto theft to the police shows how to put it together. Many countries also have a national online portal for fraud and cybercrime reports; using it alongside a local police report is often a good idea.

It may help to read about related schemes too: task scams often share their methods with fake platforms that will not let you withdraw and with “traders” on Telegram and WhatsApp.

The second scam: “recovery” offers

Soon after a task scam, many victims are contacted by people who promise to get the money back: “cyber police”, “blockchain lawyers”, a “fund recovery” company, sometimes someone in the same group chat who says they recovered their money. They ask for an upfront fee, a “deposit to verify the wallet”, access to your device, or your seed phrase. This is very often the same group, or another one that bought the list of victims.

• Never share your seed phrase or private key with anyone, for any reason.
• Do not install remote access apps at someone’s request.
• Be very careful with anyone who guarantees a result or demands payment before doing anything.

Check any offer against the warning signs of recovery scams or with the recovery scam check.

If the losses are significant, part of the money went by card or bank transfer, or you can see where the crypto went, it is worth having the case looked at. Describe what happened and we will tell you plainly, free of charge, which payments still have a realistic route and which do not.