Straight answer: the safest way to find a legitimate remote software developer job is to verify the company before you verify yourself to them, run a short checklist on every recruiter message, and treat any job that asks you to buy equipment, cash a check, or interview only by text as a hard no. Most scams collapse the moment you insist on a live video call and a Companies House or state registration check. The jobs are out there, but you have to hunt for them the way a security engineer hunts for a phishing email, not the way a hungry job seeker scrolls LinkedIn at midnight.
If you want to go deeper on this: What Remote Roles Suit Software Engineers Who Want to Work From Home.
If you want to go deeper on this: How Do You Find Remote Software Developer Jobs That Suit Your Skills.
If you want to go deeper on this: How to Tell If a Remote Job Posting Is Legit (Before You Waste a Week .
Why remote developer scams have gotten so much worse
The FBI’s Internet Crime Complaint Center logged well over 500 million dollars in employment scam losses in a single recent year, and developers are targeted more than almost any other role because they’re used to remote-only hiring, they’re comfortable with tech, and they often have savings or a laptop worth stealing. You can check the raw numbers yourself on the IC3 site, and the trend line only goes one way.
Scammers have also gotten smarter about mimicking the exact hiring process a developer expects: a GitHub-style take-home test, a Slack channel for “onboarding,” even a fake HR portal with a logo they lifted from a real company’s brand kit. The old advice, “watch for bad grammar and a Gmail address,” stopped being useful around 2022. The scams now look better than half the legitimate job postings on LinkedIn.
What happened to Yossi (and why I now tell this story to every developer I mentor)
A few years back I was mentoring a junior developer coming out of a Tel Aviv bootcamp, I’ll call him Yossi. He got a LinkedIn message from a “CTO” at a company calling itself Vantage Cloud Systems, offering a remote backend role at a rate well above what a junior developer should expect, around 4,500 dollars a month for someone with eight months of experience. Red flag one, though he didn’t clock it at the time.
The interview was two rounds, both text-only on Telegram, no video, no live coding. Then came the offer letter, which looked professional, and a line that should have ended it there: the company would send him a check for 2,800 dollars to buy a MacBook and monitor “for security compliance,” and he was to keep the receipt and wire back anything left over. He deposited the check, it cleared for three days, he wired 900 dollars back as instructed, and then the bank flagged the original check as fraudulent and reversed it. He was out 900 dollars of his own money and the “job” vanished the same day.
That overpayment-and-wire-back pattern is one of the most common remote developer scams running right now. If a company ever sends you money before you’ve started, before payroll is even set up, treat it as theft in progress, not a perk.
Seven checks to run before you say yes to anything
- Search the company name plus “Companies House” if it’s UK-based, or the relevant state registry if it’s US-based. A registered company with a filing history that predates the job post by at least a couple of years is a good sign. No filing at all is a serious warning.
- Paste a full sentence of the job description into Google in quotation marks. Scammers copy-paste the same listing across dozens of fake company names. If the exact wording shows up attached to three different “companies,” walk away.
- Check the recruiter’s LinkedIn profile for a work history that existed before this job posting went live, connections that look real, and posts older than a month. Profiles created in the last 30 days with a single job listed are a pattern worth noticing.
- Insist on one live video call before any offer is discussed. Scammers avoid this almost every time because it’s harder to fake a real-time technical conversation than a scripted chat.
- Never buy equipment upfront and get reimbursed later, and never deposit a check from an employer and wire part of it anywhere. Legitimate companies either ship you a laptop directly or pay a stipend after your first payroll run, not before day one.
- Check the domain age of the company’s careers page using a free WHOIS lookup. A domain registered six weeks ago claiming to be a ten-year-old software company is the single most reliable tell I’ve found.
- Ask for the name of your direct manager and their LinkedIn, then message someone else at the same company, ideally an engineer, and ask if the role is real. Most people will answer a polite two-line message from a fellow developer.
Where the real remote developer jobs sit
Job boards built specifically for vetted remote roles filter out a lot of the noise before it reaches you. If you haven’t compared how these platforms differ from generic listings, it’s worth reading through how remote and work-from-home listings differ before you apply, because the wording alone can tell you whether a post was written by an HR team or scraped by a bot.
Boards like We Work Remotely, Wellfound (formerly AngelList Talent), and Y Combinator’s Work at a Startup verify company profiles before a post goes live, which cuts out most of the obvious fakes. I’ve also written a full breakdown of what Remotive lists, what it pays, and where applicants go wrong, since it’s one of the better-curated boards for developers specifically. And if you’re wondering whether remote developer hiring has cooled off since the 2021 to 2022 boom, the numbers and honest state of play are covered in a full reality check on which remote jobs still exist in 2026.
Company career pages are still underrated. GitLab, Automattic, Zapier, and Doist all hire remote developers directly and post the roles on their own sites first, often weeks before they hit LinkedIn. Going straight to a company’s careers page and applying there, rather than through a third-party board, removes an entire layer of scam risk because there’s no middleman recruiter to fake.
The pay ranges you should already know, because scammers rely on you not knowing them
Junior remote developer roles in the UK typically sit between 28,000 and 38,000 pounds. Mid-level developers with three to five years’ experience land somewhere between 45,000 and 65,000. Senior remote developers, particularly in fintech or SaaS, can hit 80,000 to 110,000. In the US, senior remote roles at funded startups commonly run 130,000 to 170,000 dollars, sometimes with equity on top. If a “recruiter” offers a junior developer 4,000 dollars a month for eight months of experience, that’s not a generous employer, that’s bait. Scammers deliberately overpay on the number to get you to skip the checks you’d normally run.
The rule most advice gets backwards
Here’s the uncomfortable bit most job-safety articles skip because it complicates a tidy list of red flags: “never give out your bank details” is bad advice on its own, and following it too literally will make you miss real jobs. Every legitimate company needs your bank details for payroll, usually collected through a proper HR system in the first week after you sign a contract. The actual rule isn’t about whether you share the information, it’s about timing and channel. Never give bank details before you’ve signed a contract, never give them over WhatsApp or a Google Form, and always confirm the request through a second person at the company. Blanket “never share this” advice sounds safe but it’s lazy, and it leaves people too nervous to take real offers.
Similarly, the old warning about WhatsApp and Telegram interviews being an automatic scam flag doesn’t hold up as well as it used to. Plenty of legitimate remote-first companies hiring across time zones, especially ones with teams spread across Eastern Europe, India, and Latin America, run early screening chats on WhatsApp because it’s what half their engineers already use. What matters isn’t the app, it’s whether the process eventually includes a live video call and a written contract from a domain that matches a registered company. Channel is a weak signal. Process is the strong one.
What legitimate companies also do badly
Not every bad experience is a scam, and pretending otherwise sets people up for disappointment that feels like fraud but isn’t. A lot of real, registered companies run four-round interview processes that include an unpaid take-home project taking six to ten hours, then go silent for three weeks, then reject you with a copy-paste email. That’s not a scam, it’s just a badly run hiring process, and it happens at well-known companies far more often than anyone admits publicly. Protect your time the same way you’d protect your bank details: cap unpaid take-home work at two or three hours, ask upfront how long the full process takes, and if a company can’t answer that question, treat it as a data point about how they’ll manage you once you’re hired, not just about the interview.
If you’re looking at broader options beyond pure development roles, comparing pay and structure across categories in a rundown of remote jobs that pay well in 2026 is a useful gut check for whether a specific offer sits in a normal range or is dressed up to look better than it is.
Red flags worth memorising
- The job pays noticeably more than similar roles for the same experience level.
- You’re asked to purchase equipment and get reimbursed, or to deposit and forward any money at all.
- The entire process happens over text with no live call.
- The company has no filing history, no employees on LinkedIn beyond the “recruiter,” and a domain under a year old.
- You’re pressured to accept within 24 hours or the offer disappears.
- The interview questions are generic and never touch your actual code or portfolio.
Frequently asked questions
How do I know if a remote software developer job posting is fake?
Check the company’s registration on Companies House or your state’s business registry, search the exact job description text in Google to see if it’s been copy-pasted across multiple fake postings, and insist on a live video interview before discussing pay. A registered company with a real filing history and a willingness to get on camera is legitimate the vast majority of the time.
Is it normal for a remote job to ask for my bank details before I start?
It’s normal after you’ve signed a contract, because payroll setup requires it. It’s not normal before an offer exists or through an unofficial channel like a Google Form or WhatsApp message. Timing matters more than the fact that they’re asking at all.
What should I do if I’ve already sent money or deposited a fake check?
Contact your bank imm
