How does the scammer benefit from this operation?
I can think of 2 ways:
- Personal / private data mining, but this seems quite work intensive for that purpose - Actually going through with the whole scam and disappearing after first salary payments come through
Any other ideas? Anyone have experience or insight about this?
---
Full email below:
"Hi <name>, I hope you’re doing well.
My name is <sender>, and I’ve been a software developer for over 7 years — mainly full stack, with a strong focus on frontend. I’m reaching out because I’m looking for someone to collaborate with, and I think you're the best one whom I'm looking for.
I used to partner with my friend Jim, and we worked really well together. Sadly, he was diagnosed with cancer about a month ago, and he advised me to find someone new to team up with. That’s why I wanted to talk to you.
Here’s the idea: I’ll handle sending proposals to companies, and you would take care of the interviews with recruiters. My English isn’t strong enough for U.S. interviews, so I’m looking for someone who is confident in English and also has strong technical knowledge. If we land a position, you’d receive a share of the monthly salary, while I would take care of the actual development work.
My initial suggestion is a 50/50 split of the salary after tax. For example, if a job pays $10K per month and taxes are 30% ($3K), the remaining $7K would be split evenly — $3.5K each.
I will manage all the proposals and keep you informed about interview schedules. If things work out and we join a team, I’ll handle the project development. Then you'll get profit every month without any work.
If this sounds interesting to you, please let me know — I’d really like the chance to work together.
Thank you, Best regards, <sender>"
As other have pointed out, there are multiple types of scammers here.
The most benign are people who just want US salaries. The most malicious is North Korea who will go as far as installing ransomware and infiltrating financial institutions (especially crypto) to steal user money.
We know North Korea is much of the problem since the FBI gets involved in the malicious cases that I described and they publish reports. It’s hard to tell though because companies want to keep news they are infiltrated as quiet as possible.
I’m not sure which type of fraudster sent you this email other than the rate they are saying they will pay (50%) is exceptionally high. We know the North Koreans pay 10% for using your identity for ID verification etc, and 20% if you are the front man.
Nostrademons wrote a great comment about how they can use your identity here in problematic ways. I’m not sure how much this has happened since I have yet to hear about it in private stories from employers, who tend to be pretty candid. From what I can tell the fraudsters want to stay under the radar and be employed as long as possible. A lot are great engineers so they pull it off.
That said, rarely do people want to talk about this topic who are involved so it’s hard to tell what fully happens in each scenario.
There are a few different angles to this. Other people have already mentioned the North Korean state-sponsored espionage, but honestly I think this is a small minority of this market.
The other two big ones are visa fraud and employment fraud. With the first one, you have a developer, possibly even skilled in a low-wage overseas company (say Thailand) that wants to make American wages. If he applies as who he actually is, he makes Thai wages, which can be as low as $10K/year. If he uses your identity to apply, he makes American wages, say $200K+/year. He can split that with you and make 10x what he would otherwise, while you get $100K/year for doing nothing (assuming he's honest enough to pay out, which is not a guarantee. There's no honor in thieves).
With the second, they use his interview skills and your identity to get the job, and then do nothing except get other jobs. It's remarkably hard to fire a U.S. employee without risks of lawsuits. If the employer does seem to catch on, he has a lawyer and a psychiatrist on the payroll too. The psychiatrist produces a doctor's note that you are disabled, the lawyer threatens to sue if you are fired. "You" go on disability, where you can stay for up to a year and they can't fire you. Collect the salary, move on after the year. In the meantime, "you" (or the organization using your identity) has done the same thing to hundreds of other corporations. I personally know 2 managers that have been victimized by this scam.
In all 3 cases, you're not the direct victim of the scam. They're using your identity as a shield to legitimize the scam. When it's discovered, it's you who suffer the reputational risk and/or criminal charges.
Obviously it’s fraud so don’t do it.
There's multipronged benefit for them: Access to company infrastructure to potentially cause harm or ransom in the future, access to technology / intelligence, but also simply foreign currency.
Anyone in a very low income area can benefit from pretending they're in a high income area and negotiating US-like pay.
Although the cancer stuff does look very scammy.
Especially when the recruiting process of big companies becomes predictable and well documented online, candidates will just perfect the targeting and cheating of that specific system.
What if the future just becomes in person interviews again, because every remote candidate will either be an Deepfaked scammer with a stolen ID, or a cheater with someone nearby whispering AI generated answers to him?
Cat and mouse.
"Arizona woman to serve 8 years for identity theft scheme benefiting North Korea": https://www.npr.org/2025/07/25/nx-s1-5479906/north-korea-ide...
* malicious: hostile actors want to gain footholds into companies - North Korea, etc
* benign: people in lower income countries want to do the job and can make good profit even when giving half the salary to you.
For the second option, some are scams and only want to pocket a month or two of salary without delivering before the company fires them. Others actually deliver and can keep the arrangement going long-term.
Be careful they might try and use your identity to then commit more fraud.
https://news.ycombinator.com/item?id=41641446