Safety

Virtual Assistant Scams and Red Flags to Avoid

Updated 5 min read

Illustration of a shield with a warning mark, representing scam protection

Most virtual assistants are honest professionals, but hiring online carries real risks: fake profiles, stolen identities, unreliable workers who vanish and requests for money upfront. A few simple checks remove most of the danger.

This guide lists the common warning signs, how to verify a candidate and how to limit the damage if something goes wrong.

Red flags during hiring

Profile and application red flags

  • The profile is too perfect. Dozens of five-star reviews, many in the same style, and a long list of unrelated skills.
  • Copied or generic text. The same cover letter appears in many applications. This is why we recommend a hidden instruction in your job post. See our job description template.
  • Photos or work samples that do not match. Reverse-search a profile photo, and check that portfolio items belong to the candidate.
  • Inconsistent details. Name, location, experience and dates change between messages.
  • No verifiable history. No references, no previous clients and no online presence at all.

Interview red flags

  • Camera always off. Occasional technical problems happen, but a refusal to ever show their face is a concern.
  • Different voice or person later. The person you interview is not the one who does the work.
  • Vague answers. No specific examples of past work.
  • Pressure to move fast. “Pay now to secure the slot” or “other clients are waiting”.
  • Refusing a paid test task. Careful professionals welcome one.

Payment red flags

  • Upfront payment demands to anyone before any work, especially large sums.
  • Requests to pay outside the platform when you hired through a platform with protections.
  • Unusual payment methods, such as gift cards, cryptocurrency or a third party’s account.
  • Last-minute bank detail changes. A classic fraud pattern is an email saying “our account has changed.”

Common scams

Fake agency or recruiter

Someone poses as an agency, collects a fee and disappears, or places a candidate who does not exist. Check the agency’s business registration, reviews from independent sources and contract terms. Never pay a large placement fee on a promise.

Ghost or outsourced worker

You hire one person, but someone else, or several people, does the work. Quality varies and your data spreads to people you never vetted. Include a clause that the VA cannot subcontract without permission, and keep a regular video check-in.

Time padding

Hours are logged that were not worked. Use clear deliverables rather than only hours, and review output, not just timesheets. If you use time-tracking software, tell your VA and be transparent about it.

Credential theft

A “candidate” asks for logins or documents early, so they can steal them. Do not share any access until a signed agreement and a trial period. See our guide to safe account access.

Overpayment or refund scam

Someone sends you more than you owe, then asks you to refund the difference. The original payment later fails or is reversed. Never refund before funds have fully cleared.

Checking an agency or hiring site rather than a person? Follow our 10-point legitimacy check, which also lists where to report scams in the US, Canada, UK and Australia.

How to verify a candidate

  1. Video interview. Confirm face, voice and the person’s ability to communicate. Use our interview questions.
  2. Reference check. Speak to a previous client, not only read a testimonial.
  3. Identity check. For long-term or high-trust roles, ask for a government ID and compare it with the person on video. Handle it securely, and follow data protection rules in your country.
  4. Paid test task. A small task with your own data tells you more than a profile.
  5. Platform history. On a freelance platform, check the work history, completion rate and feedback.

How to limit your risk

  • Start small. A trial of 10 hours is cheaper than a three-month mistake.
  • Pay on a schedule you control. Weekly or by milestone for early work.
  • Use least-privilege access. Give only the access the task needs. Remove it when the task ends.
  • Use a password manager so you never send passwords in chat.
  • Turn on two-factor authentication on every important account.
  • Keep payment approvals with you. Do not hand over a card or bank access.
  • Keep a written agreement. See our contract checklist.
  • Use a platform with payment protection if you are new to hiring.

What to do if something goes wrong

  1. Stop the work and remove access to every account.
  2. Change passwords and review activity logs.
  3. Contact your bank or payment provider if money was taken.
  4. Report the profile to the platform you used.
  5. Keep records such as messages, invoices and logs.
  6. Report fraud to the relevant authority in your country, such as your national fraud reporting service.
  7. Get legal advice if the loss is large or data was exposed.

Do not paint everyone with the same brush

Most VAs are hardworking people. A cautious process protects good candidates too, since they get hired by clients who trust the system. Treat hiring as a short trial, not a leap of faith.

Frequently asked questions

Is it safe to hire a VA from a job board?

Yes, if you screen carefully, use a test task and avoid paying large amounts upfront. Platforms with payment protection add a layer of safety.

Should I ask for ID?

For long-term roles with sensitive access, it is reasonable, as long as you store it securely and follow privacy rules.

How do I know a VA is not subcontracting?

You cannot be fully certain, but regular video calls, consistent quality and a clause forbidding subcontracting help.

What if my VA disappears?

Remove their access, change passwords and use the notes you keep in your documentation. See training with SOPs so the next VA can pick up quickly.

Sources

Sources were checked in October 2026. They support specific facts in this guide; the advice and wording are our own. Rules change, so confirm details on the official sites.