Fake remote job offer claiming the target has been selected and must purchase equipment or software using a gift card with reimbursement promised on the first paycheck — advance-fee employment fraud; no legitimate employer asks new hires to buy equipment via gift card before starting.
job-interview-prepayment-phish
What this tier means
High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.
How Gorganizer detects this
Fake remote job offer notifying the target they have been selected for a position and requiring them to purchase equipment or software using a personal gift card before starting, with a promise of reimbursement on the first paycheck — gift-card prepayment variant of employment fraud. No legitimate employer ever asks a new hire to purchase required equipment or software using a personal gift card or their own money before starting; gift cards are non-reversible, and the attacker redeems the card immediately upon receiving the card number, leaving the victim with no recourse. The "you've been selected — buy equipment/software using gift card — reimbursed on first paycheck" three-part narrative is the defining pattern for this attack class. Distinct from employment-background-check-fee-phish (background-check processing-fee pretext) and job-offer-check-deposit-phish (fake check / money-laundering modality) — this targets the remote-job-selected / gift-card equipment-purchase / first-paycheck reimbursement pretext. Detection: selected for remote job/position + purchase equipment/software using gift card + reimbursed on first paycheck vocabulary + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +4. Source: GC1-R28; FTC job scam advisory 2025 (gift card employment fraud); FBI IC3 employment advance-fee fraud patterns; BBB employment scam report.
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.
About the scoring engine
Gorganizer's scoring engine emits 2,143+ signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 2,143+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started