2026 FTC Fake Job Text: What to Do After Replying YES? Students, Limit the Damage First

If you replied “YES” to a suspicious job text, stop responding, don’t pay or share sensitive details, and verify the opening through an employer or school channel you find independently. A reply alone does not prove that your email or any account was compromised. If you shared a password, identity document, financial information, or money, take steps specific to that information.

This is for you if you replied to an unfamiliar recruiting text and aren’t sure what was exposed.
It’s also for you if follow-up emails or links have arrived, or you’re choosing an email address for applications and resource signups.

Last updated October 27, 2026. The official guidance below was checked against the FTC’s April 2026 fake job text alert and its job scam guidance.

Right after the reply: stop contact and save the evidence

The FTC’s April 2026 consumer alert describes fake job texts that prompt recipients to reply with “YES” or “INTERESTED.” It warns that further contact may lead to scams involving fake checks or tasks. That describes a reported pattern; it does not establish what happened to your information in any individual case. In particular, sending a keyword is not proof that someone accessed your email, job-board account, or other account.

For now, don’t send another reply—even if the sender asks you to confirm your interest or claims that a recruiter will call. Don’t click links that arrive in later texts or emails. Don’t send a verification code, password, identity document, bank details, or payment to “secure” an interview or position.

Save the original text and any follow-up messages. Keep the sender’s number, the wording, any email addresses, and screenshots of relevant pages. These details can help you compare the messages with independently verified employer information or include them in a report. Don’t delete a message before saving the information you may need.

A realistic scenario: you reply “INTERESTED” to a text about a campus-area job, then receive an email asking you to complete an application through a link. At this stage, the safe move is not to decide from the email’s appearance. Save it, leave the link unopened, and check whether the employer lists the vacancy through a channel you locate yourself.

Before any further response: verify the opening independently

Don’t use the suspicious message as your only source for checking the job. Start from a known, independent route: find the employer’s official website yourself, look for its careers page, or contact your school’s career services through its established website or office details. Search for the job title and location, and check whether the listed recruitment process matches the text.

If you find a listing, contact the employer using contact information published on its official site—not a number or address supplied only by the texter. Ask whether the vacancy and recruiter are genuine. Your school’s career office can also help assess an opportunity, especially if the message claims to be connected with a campus program or internship.

A missing listing does not automatically prove fraud: hiring processes and postings can change. But if you can’t confirm the role or contact, pause before sending a résumé with additional personal details, completing forms, or attending an interview arranged only through the unverified contact. Verification can reduce uncertainty; it can’t guarantee that every detail is genuine.

The FTC’s job scam guidance recommends researching the company and job and cautions against paying for the promise of a job. Apply that advice to the contact itself: check the role and recruiter through a separate, verifiable route before acting on requests in the message.

Based on what you shared: choose the right response

The next steps depend on what happened after the first reply. Use this decision list rather than assuming that every “YES” reply has the same risk.

• If you sent only “YES” or “INTERESTED”: Stop contact, save the messages, and verify the opportunity independently. Monitor for follow-up messages. Don’t treat the reply alone as evidence that your email or accounts were accessed.
• If you opened a link but entered nothing: Don’t return to the page or follow its instructions. Save the message and check the opportunity through the employer or school. If you’re unsure whether you submitted anything, review the page and your actions carefully without using the sender’s link again.
• If you entered a password or verification code: Go directly to the official service—not through the message—and use its account security and recovery process. If you reused that password elsewhere, change it on those services too. Contact your school or employer through its verified support channel if the affected account is institution-related.
• If you submitted identity documents or sensitive personal information: Contact the relevant official agency or institution for guidance on the specific information exposed. For identity theft concerns, the official identity theft response steps provide a route for planning what to do next.
• If you shared financial details or paid: Contact your bank, card issuer, payment service, or other payment provider promptly using its official contact route. Explain what you shared or paid and ask what actions are available. Don’t pay anyone who says they can recover your money in exchange for an advance fee.

This table is a triage aid, not a guarantee about what a sender can do. A keyword reply and a submitted password are different events; respond to what you actually disclosed.

During job search: keep the important inbox dependable

Use a real, long-term email address for formal applications, recruiter conversations, interviews, offers, account recovery, and school notices. You need to be able to access that address over time and recover the account if you lose access. Check that the address saved in job-board profiles is still current, and review the relevant spam or filtered folders when you’re expecting an interview message.

A separate address or alias can help you sort job-search activity from personal mail, but only if you can keep using it and receive important replies. The right setup depends on whether you control the inbox, can recover it, and will notice messages sent there. Our guide to protecting email privacy can help you think through what contact details you share when registering for online services.

A temporary address has a narrower role. It may be suitable for a low-risk site registration or a one-time download when the site permits it and you don’t need ongoing contact. It is not a substitute for an address you can use to discuss an application, receive an offer, restore an account, or get a school’s official notice. Read the site’s privacy information before registering, and don’t mistake an isolated inbox for proof that the site or job is legitimate.

For future signups: route messages by importance

Before entering an email address, ask what could happen if you stopped receiving messages from that site. If losing access could mean missing an interview, offer, official school update, or account recovery message, use your long-term address. For a nonessential resource download, an isolated address may be an option after you review the site’s requirements and privacy terms.

A useful split is:

• Formal job applications and recruiter conversations: use a durable, monitored address you can recover.
• Interviews, offers, and account recovery: keep using that same long-term address and check it regularly.
• School, scholarship, and official program notices: use the address your institution or program expects and that you can access reliably.
• Low-risk registrations or one-time resources: consider an isolated address only when ongoing replies aren’t necessary and the site allows it.

If you want important recruiting messages separated from newsletters, a forwarding setup may be more appropriate than a short-lived address—but only if you understand where messages are delivered and can continue accessing them. See our overview of email forwarding before choosing that approach. Whatever address you use, verify the sender and opportunity separately; changing an email address does not make an unverified recruiter trustworthy.

The FTC also advises people to report suspected scams. Keep your saved messages and check the FTC’s job scam advice for reporting and prevention guidance. For unwanted calls or texts, the FCC explains how to use its consumer complaint process. Reporting is useful for documenting a concern, but it doesn’t replace contacting a bank or account provider when you’ve shared financial or login information.

Frequently asked questions

Does replying YES expose my email or personal information?

A YES reply by itself does not prove that your email account or other personal information was exposed. It does tell the sender that your number responds, so stop engaging and watch for follow-up contact. The risk changes if you also opened a link, entered credentials, sent identity or financial details, or paid money.

How can I verify the job after an FTC warning?

Find the employer’s careers page or the school career office through a source you locate independently. Search for the opening there, then contact the employer using details published on its official site. Don’t rely on the text’s link, phone number, or sender name as proof. If you can’t confirm the role or recruiter, pause before sharing documents.

What if I receive an email or link after replying?

Don’t reply, open the link, or send a code or document. Save the message and sender details, then verify the job through an independent employer or school channel. A follow-up email alone does not establish that a real recruiter contacted you or that an account was accessed. If you already entered a password or financial information, use the relevant official recovery or reporting channel.

Can I use a temporary email for job applications?

No. Use a long-term email address you can access and recover for applications, recruiter conversations, interviews, offers, account recovery, and school notices. A temporary or isolated inbox may suit a low-risk resource download if the site permits it, but it can interrupt important contact. It also cannot verify that a job or recruiter is legitimate.

If you’ve verified the opportunity and only need to register for a noncritical resource, MsgGone can give you a separate temporary inbox rather than requiring you to expose your primary address to that signup. Keep formal applications and important recruiting messages on an email address you control long term; use an isolated inbox only where losing access won’t cost you a reply, an interview, or an official notice.

Frequently asked questions