In an identity-harvest scam, the paycheck is a lie and your personal information is the prize. Under the banner of "onboarding" or "verification," you're asked early — sometimes on first contact — for your Social Security number, date of birth, a photo of your driver's license or passport, and often a selfie holding your ID. That combination is everything a fraudster needs to open credit cards, file fake tax returns, or take over your accounts.
Because real jobs do eventually collect some of this information for payroll and tax purposes, the ask can feel normal. The tell is the timing and the channel: legitimate data collection happens after you're genuinely hired, through secure systems — never as step one from an unverified stranger.
The 'verification' pretext
Scammers borrow the language of legitimate identity checks ("KYC," "I-9 verification," "background screening") to make the request sound routine. A Discord "mod" role or an Instagram "brand ambassador" gig will ask you to "verify" by uploading your ID and a selfie — data that has no business being collected for such roles and is pure gold for account fraud.
What legitimate collection looks like
A real employer verifies identity for the I-9 form after extending and accepting a written offer, typically in person or through a reputable verification vendor. Payroll details (SSN, bank account) are entered into an established HR/payroll platform (Workday, ADP, Gusto) — not texted to a recruiter or DMed to a bot. If you haven't interviewed, signed an offer, or confirmed the employer independently, no one needs your SSN or ID.
The cost of getting this wrong
A leaked SSN plus a photo ID can enable new-account fraud, tax-refund fraud, and full account takeover — damage that can take months to unwind. Treat these documents like keys to your financial life.
Red flags to remember
- SSN, date of birth, or ID photos requested before any interview or offer
- A request for a "selfie holding your ID" for an informal or online-only role
- "Verification" collected via DM, chat app, or a bot instead of a payroll system
- The role (moderator, ambassador, reviewer) has no need for such data
- Pressure to complete "verification" quickly to "secure your spot"
What to do if you're targeted
- 1Do not send identity documents to unverified employers.
- 2Confirm the employer and recruiter independently before sharing anything.
- 3If you already shared, place a fraud alert or credit freeze with the credit bureaus.
- 4Report identity theft at IdentityTheft.gov for a recovery plan.
Frequently asked questions
When is it actually safe to give an employer my SSN?
After you've interviewed, received a written offer, verified the company independently, and are entering the information into an established payroll/HR system — not before, and never via chat or DM.
Why would a moderator or ambassador role need my ID and a selfie?
It wouldn't. That request is a hallmark of identity harvesting. The ID-plus-selfie combination is used to bypass identity checks on financial accounts opened in your name.