Skip to main content
ThreatScams & fraud

Fake mystery shopper money transfer evaluation scam — hired to evaluate Western Union / MoneyGram + advance check mailed + keep $100 fee + wire the rest + evaluate gift card store by buying gift cards + check bounces + victim loses wired money

fake-mystery-shopper-money-transfer-evaluation-scam

What this tier means

High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.

How Gorganizer detects this

Mystery shopper / secret shopper advance-fee scam — victims receive unsolicited emails or letters offering paid mystery shopper assignments at $100–$500 per task. The "job" involves evaluating money transfer services (Western Union, MoneyGram, Walmart Money Center) or gift card retailers. A check (counterfeit) is mailed in advance to fund the evaluation. The victim is instructed to deposit the check, keep a portion as their fee, and wire the rest or purchase gift cards as part of the "evaluation." The check bounces days later — the victim loses both the wired money and the gift cards. Some variants claim to be from legitimate survey companies (Nielsen, Market Force). Key facts: (1) No legitimate mystery shopping company sends checks in advance and asks workers to wire money — this is the exact reverse of how real jobs work; (2) Legitimate mystery shopping assignments are self-funded by the shopper who submits receipts for reimbursement; (3) The Mystery Shopping Professionals Association (MSPA) explicitly warns that its members never mail advance checks; (4) "Evaluate Western Union by using Western Union to send money" is circular and exists only to move untraceable wire transfers. FTC Consumer Alerts explicitly name this scam. The check bounce delay (2–5 business days) is the critical mechanism — banks may make funds available before confirming a check is genuine. Losses per victim typically range from $500 to $5,000.

False-positive guard

Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.

About the scoring engine

Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.

Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.

Ready to clean your inbox?

Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.

Get started