I want to walk you through something that landed in my LinkedIn DMs this week, because if you are early in this journey and hungry for strategic opportunities, you are exactly who this kind of message is built to catch.
Here is the pitch, almost word for word:
"Hi Matthew. I am looking for a Tech rep to help my friend. Part time, PM-level, only handle client video meetings. I excel at development, but need communication support with clients. Will be good extra income in your spare time (5 hours/week, $1,000-$2,000/week)."
Twenty-three minutes later, a follow-up: "Are you open to collaboration?"
Sender profile: Principal AI Engineer at a real, well-known consulting firm. Based in a small US town. Clean photo. Plausible bio. The kind of profile that, if you are excited and busy, you might just reply to.
I almost did. Then I ran the OSINT pass.
---
WHY THIS PITCH IS A SCAM
The math gives it away first. $1,000 to $2,000 per week for 5 hours of video calls is $200 to $400 per hour. Real fractional PM work tops out around $150 per hour. Anyone offering 2x to 4x market rate for less work is not buying your skill. They are buying your name and your silence.
Then the structural tells:
1. "Help my friend." Real hiring says "we are hiring" or "my company needs." Friend language is distance language. It lets the proposer disappear when questions get sharp.
2. The role is structurally a front. "I am great at development but need someone for the client calls" is not how real dev shops work. Engineers who hate sales hire account managers with KPIs and deliverables, not a vague "tech rep" who only shows up on Zoom.
3. Geography contradicts the request. Profile says small US town. If he is genuinely US-based, why does he need a US-based proxy to handle US-style client calls? The location claim and the request contradict each other.
4. Zero public footprint. A real Principal AI Engineer working in RAG and agentic systems almost always has GitHub commits, a Medium post, a conference talk, a LinkedIn article, something. This profile had nothing. The bio read as boilerplate, possibly AI-generated.
5. Reaction-bombing then pitch. Three emoji reactions on nothing, immediately followed by a paid offer. Humans do not behave this way. Outreach automation does.
6. The 23-minute auto-bump. People waiting on a real reply do not chase you in 23 minutes. Sequenced outreach bots do.
---
WHAT THIS ACTUALLY IS
The DOJ and FBI have been hammering on this since 2024. The pattern shows up in three flavors:
- DPRK IT worker scheme. North Korean developers using stolen or proxy Western identities to land remote contracts. They need a US-based face to sit on Zoom and sign documents.
- Sanctions-evasion proxy. Developer who legally cannot receive USD payments needs a US-based legal name to receive funds and route them.
- Fraud-laundering front. Real or fake engineer doing work for clients who are being defrauded. Your name ends up on the contracts so when the lawsuit hits, your name is on the filing, not theirs.
In every variant, you become the legal exposure surface for someone else's activity. The above-market pay exists to make you stop asking questions.
---
THE DUE DILIGENCE FRAMEWORK
Here is the filter I now run on every cold "strategic opportunity" DM. None of this takes more than 10 minutes.
Step 1. Reverse the offer. If someone is paying you above market for below-market effort, ask what they are actually buying. The answer is rarely your skill.
Step 2. Run a public footprint check. Google the exact name plus their claimed employer. Search GitHub. Search Medium. Search arxiv if they claim research. A real senior engineer leaves a trail. A persona does not.
Step 3. Check the geography against the ask. If their location and their request contradict each other, that is signal.
Step 4. Read the language. Boilerplate bios with phrases like "fostering a culture of innovation" or "scalable technologies that empower teams" without a single specific project name are AI-generated or persona-built.
Step 5. Watch the engagement pattern. Reaction-bombing, auto-bumps, generic openers, and an immediate pitch are automation tells.
Step 6. Demand specifics before a call. "What client? What deliverables? What contract structure? Who legally pays me, and from what entity?" Scammers will dodge or vanish. Real opportunities will give you direct answers.
Step 7. If it still seems plausible, verify the employer claim independently. Email through the company website, not the LinkedIn DM. A 30-second sanity check.
---
THE META-LESSON
Being early and hungry for opportunities is not a weakness. It is the right energy for this stage. But scammers know the energy too. They tune their pitches to land exactly when you are excited, building, and looking for a break.
The fix is not to become cynical. The fix is to install a 10-minute due diligence pass between excitement and action. Excitement is fuel. Verification is a brake. You need both.
If a DM makes you feel like you are about to win, that is the moment to slow down and run the filter. The real opportunities will survive the scrutiny. The scams will not.
Stay sharp out there.
Have you been approached or exposed to any of these Scams?