“Reshipping” and “mystery shopper” ads promise easy pay for simple tasks, receive a package and mail it on, or shop a store and file a report, no experience required. Both are among the most repackaged scams on job boards because they exploit something ordinary: most people don’t think twice about accepting a package or depositing a check from a new employer. Here’s how these two related scams work, and why the “job” itself can create real legal exposure, not just financial loss.
How the Scam Works
Pattern 1: The “Package Inspection” Reshipping Job
A “logistics coordinator” or “quality control” role asks the worker to receive packages at their home address, check the contents, repackage them, and ship them to a new address, often overseas, within a day or two. The packages are usually goods bought with stolen credit card numbers, and the worker’s address is being used to break the paper trail between the theft and the final destination.
Pattern 2: The Mystery Shopper Check-and-Wire Task
A “mystery shopping” assignment arrives by check, sometimes for several hundred or a few thousand dollars, with instructions to deposit it, keep a portion as payment, and wire or send the rest via a money transfer service such as Western Union or MoneyGram, framed as “evaluating the company’s transfer experience.” The check is counterfeit and bounces days later, but the wired money is already gone.
Pattern 3: The No-Interview Instant Hire
Both scams recruit heavily through job boards, social media DMs, and Telegram or WhatsApp groups, with hiring that skips any real interview. An applicant is often “hired” within hours of a first message, a pace no legitimate logistics or retail-evaluation employer works at.
Pattern 4: Turning the Worker Into a Money Mule
In both versions, the real function of the “job” is to launder something, stolen goods in the reshipping case, counterfeit-check funds in the mystery shopper case, through an ordinary person’s address or bank account. That makes the worker a money mule, sometimes unknowingly, and mule activity can carry legal consequences even when the worker had no idea the goods or funds were illegitimate.
A Composite Example (Illustrative, Not a Real Case)
Imagine someone applies to a “package inspection specialist” listing on a job board and is hired the same day over WhatsApp, no call or video interview involved. Within a week, three packages arrive from different online retailers, none addressed with the worker’s name as the original purchaser. Following instructions, the worker repackages each one and ships it to an address abroad using a prepaid label the “employer” sent. A month later, a letter arrives from a credit card company investigating fraudulent purchases shipped to the worker’s home address, and the worker has no documentation proving they didn’t order the goods themselves. This scenario is a composite built from commonly reported patterns — it does not describe a real person, employer, or event.
Red Flags That Get Missed
- Being hired within hours, with no interview, no video call, and no verifiable company website.
- Being asked to receive packages addressed to other names, or to reship items to an address you don’t recognize.
- Being sent a check to deposit with instructions to wire or transfer part of it back through a money service.
- Communication that happens only through WhatsApp, Telegram, or personal text messages, never a company email domain.
- Pressure to act within a day, ship immediately, or wire funds before you have time to verify anything.
- A “mystery shop” assignment that specifically targets a money transfer or check-cashing location rather than a retail store.
How to Protect Yourself
- Never agree to receive or reship packages that aren’t addressed to you — a legitimate employer has its own warehouse and shipping accounts, not your home address.
- Never deposit a check from an employer and wire part of it back, regardless of the reason given — this is the single most common mystery-shopper scam pattern.
- Treat instant, interview-free hiring as a red flag, not a lucky break, especially for roles involving packages, checks, or money transfers.
- Verify the employer independently through a real company website, LinkedIn presence, and Better Business Bureau listing before providing your address or bank details.
- Remember that banks hold you responsible for a bad check, even one that showed as “available” for several days after deposit.
- Understand that reshipping stolen goods can carry legal risk, even if you didn’t know the goods were stolen, so treat any package-forwarding job with real suspicion.
If You’ve Already Been Targeted
If you wired money after depositing a check that later bounced, contact your bank immediately, explain what happened, and ask about your options, though recovery of wired funds is often not possible once they’re collected. If you’ve been reshipping packages, stop immediately, do not send or accept any further items, and keep every box, label, and message as documentation that you were misled rather than complicit. If a package arrives that you didn’t order, do not open or forward it, contact the retailer and your local postal service instead.
Report reshipping activity to your national postal inspection service, since mail is typically the method used to move the goods, and report both reshipping and mystery-shopper schemes to your country’s official cybercrime or fraud authority:
- United States: FBI Internet Crime Complaint Center (IC3) — ic3.gov
- United Kingdom: Action Fraud — actionfraud.police.uk or reportfraud.police.uk (0300 123 2040)
- Canada: Canadian Anti-Fraud Centre — antifraudcentre-centreantifraude.ca, report at reportcyberandfraud.canada.ca
- Australia: Scamwatch (National Anti-Scam Centre / ACCC) — scamwatch.gov.au, report at scamwatch.gov.au/report-a-scam
If you’re outside these countries, search for your national police cybercrime reporting unit or financial regulator — most countries now have a dedicated online reporting channel.
Frequently Asked Questions
Can I get in trouble for reshipping packages if I didn’t know they were stolen?
It’s possible, since law enforcement and card issuers investigating fraud may initially view your address as part of the chain, even unknowingly. Keeping every message, label, and box as evidence that you were misled, and reporting the situation yourself, is the best way to demonstrate you weren’t a willing participant.
Why do mystery shopper scams specifically involve depositing a check and wiring money?
Banks often make deposited funds provisionally available before the check has actually cleared, sometimes a week or more later. Scammers exploit that gap: the wired money leaves your account immediately and is unrecoverable, while the counterfeit check is discovered and reversed afterward, leaving you liable for the full amount.
Is it ever legitimate for a job to ask me to receive and forward packages?
Legitimate logistics and fulfillment roles operate through a company’s own warehouses and shipping accounts, not an employee’s personal home address. A job asking you to use your home as a shipping waypoint for unfamiliar packages is a strong indicator of a reshipping scam.
What should I do if a package I never ordered shows up at my door?
Don’t open, use, or forward it. Contact the retailer listed on the package and your national postal or consumer protection service, since unsolicited packages are sometimes tied to fraud schemes or brushing scams.
How quickly do these scams usually unravel?
Often within one to four weeks. Counterfeit checks are typically flagged after the standard clearing period, and card-fraud investigations into reshipped goods usually surface within a similar window, by which point the wired money or shipped goods are already gone.
Browse more resources in our Scam Awareness category.