How Fake Employers Steal Your I-9 Data

You apply for a remote job, complete a smooth interview process, and receive an offer that seems too good to pass up. The pay is excellent, the hours flexible, and you’re told you can start immediately. But before your first day, the “hiring manager” asks you to fill out an I-9 form—the government-mandated document that verifies your identity and work eligibility. Within hours, you’ve handed over your Social Security number, a copy of your driver’s license, and your passport or birth certificate. By the end of the week, your identity is stolen, your credit is wrecked, and the “employer” has vanished. This is not a rare edge case. It is a growing epidemic that targets middle-class Americans aged 45–64, who are often more trusting of formal paperwork and less likely to suspect that a job offer is a trap.

The I-9 form is a powerful tool for identity thieves because it demands exactly what they need to commit full-scale fraud: your full legal name, date of birth, Social Security number, and copies of verifiable identity documents like a U.S. passport, driver’s license, or permanent resident card. Legitimate employers are required by law to keep this information secure and confidential. Fake employers, by contrast, use it to open credit cards, take out loans, file fraudulent tax returns, and even create synthetic identities—mixing your real Social Security number with a false name or birth date to build a new credit profile that you won’t discover until collections agencies start calling.

These scams often start on popular job boards like Indeed, LinkedIn, or Craigslist, though they also appear in email inboxes as unsolicited offers. The fake employer adopts a convincing brand—sometimes impersonating a real company, sometimes inventing one with a professional website and fake employee testimonials. The interview process may feel legitimate: a phone call, a video chat, even written questions about your skills. The red flag comes after the offer. The “company” insists you complete the I-9 immediately, often through a link or an emailed PDF. They may say they need it “for payroll setup” or “to comply with federal regulations.” They might even claim that a third-party background check service is required and ask you to pay a fee—another hallmark of the scam.

What makes this particularly dangerous for people in their fifties and sixties is that they often carry a lifetime of credit history, home equity, and retirement savings. A stolen identity at this stage can take years to resolve, during which time you could be denied a mortgage, unable to access your own bank accounts, or targeted by IRS notices for taxes you never owed. And because the scammer now holds your real I-9 data, they can also sell it on the dark web to other criminals, multiplying the damage.

Protecting yourself means treating every unsolicited job offer with suspicion, no matter how professional it appears. Never email or upload your I-9 form. Legitimate employers will have you complete it in person or through a secure, encrypted portal after you have met them—literally or virtually—and verified the company’s existence. Look up the business on the Better Business Bureau, check its official website by typing the URL yourself rather than clicking a link, and call the main phone number listed on its corporate site to confirm the hiring manager is a real employee. Be wary of any company that pressures you to provide documents before you have seen a physical workplace or met a real colleague. If the job involves remote data entry, customer service, or “personal assistant” tasks with vague duties, the chance of fraud skyrockets.

If you suspect you have already been scammed, act fast. Contact the Federal Trade Commission at IdentityTheft.gov, file a report with your local police, freeze your credit with all three bureaus, and place a fraud alert on your Social Security number. The earlier you respond, the less damage a fake employer can do. Remember that the I-9 form is a federal requirement designed to protect workers and employers—not a weapon for thieves. When a “job” demands it before you have earned a single dollar of trust, walk away. No legitimate employer will risk your identity for the sake of a fast start.