A remote employer asks for bank details: what to verify before direct deposit

Check the hiring stage before judging the request

A genuine employer may need account information to pay a worker, but timing and context matter. You should be able to identify the legal employer, the role, the agreed terms, the person responsible for onboarding and the official system used for payroll before entering sensitive financial information.

Treat a request before a substantive interview or confirmed offer as a warning sign. The US Federal Trade Commission describes fake recruiters who send professional-looking remote offers and then request driver's-licence, Social Security or bank information through supposed employment paperwork before they have genuinely hired the candidate.

Verify the role and employer first →Compare the full offer before you accept →

Verify the route independently

Do not use only the phone number, link or email address supplied in an unexpected message. Find the employer's official website yourself, confirm that the vacancy or hiring contact exists and use a known HR or payroll route to verify the onboarding request. A company logo, video call or polished document is not independent proof.

Inspect the sender's full address and the form domain, including spelling and the text after the final dot. If the employer uses a third-party payroll provider, ask the verified HR contact to name it and confirm the exact invitation route before you create an account or upload anything.

• The employer's legal name and official careers domain.
• A completed interview and a written offer you can verify.
• The name and role of the HR or payroll contact.
• The exact onboarding or payroll provider and official domain.
• A separate trusted contact route for confirming unusual requests.

Share only what payroll actually needs

Ask what information is required, why it is needed, who can access it and how it will be protected. A legitimate employer may need different records depending on country and employment status, but that does not justify collecting every identity or financial document through ordinary email or chat.

The UK Information Commissioner's Office says employment records should be protected with security appropriate to the information and accessible only to authorised people. That is employer-facing UK guidance, but it gives candidates useful questions: is this the approved system, is access limited to HR or payroll, and is there a secure alternative to sending documents as attachments?

Read how the employer handles candidate data →Protect the account used for recruitment →

Stop if the request expands into money movement

Direct deposit should be about receiving legitimate pay. Stop if the recruiter sends a check and asks you to forward money, buy equipment from a named seller, purchase gift cards, move cryptocurrency, return an overpayment or pay to unlock payroll. Those are payment instructions, not normal onboarding.

Also stop if someone asks for your banking password, card PIN or one-time security code. Bank account details used for receiving pay are not the same as credentials that let another person sign in or authorise a transaction. Contact the bank through its official app or number if you have already shared more than intended.

Recognise the fake-check equipment pattern →Avoid paying money to unlock supposed earnings →

Use this direct-deposit safety check

• Confirm the employer, role and recruiter through an independently found channel.
• Wait for a verified hiring decision and written terms before completing payroll forms.
• Ask a known HR contact to confirm the payroll provider and exact domain.
• Use the approved secure portal rather than chat, personal email or an unknown upload link.
• Share only the fields needed for the stated payroll purpose.
• Never disclose a password, PIN or one-time security code.
• Stop if onboarding requires you to send money, return funds or buy from a named third party.

Use the full remote-role fit check →Browse current checked roles →