This is one of the most common worries in a job search, and the answer is reassuringly simple: legitimate employers ask for sensitive financial and identity information late, and through their own secure systems - never as a price of being considered.
The timeline a real employer follows
There is a natural order to a genuine hire, and your most sensitive details come at the very end:
- Apply - name, contact info, resume. No SSN, no bank details.
- Interview - one or more real conversations. Still none.
- Written offer - you receive and accept a formal offer.
- Background check - now an SSN may be requested, through a named screening provider, with your consent.
- Onboarding - tax forms (W-4, I-9) and direct deposit, inside the company's own payroll portal.
The rule: if anyone wants your bank account or SSN before step 3 - a signed, written offer - stop. There is no legitimate reason for it, and a real employer will not be offended that you waited.
Why scammers want each one
- Your Social Security number is the master key to identity theft - opening credit, filing fake tax returns, draining benefits.
- Your bank account and routing numbers let a scammer set up fraudulent transfers, or feed the fake-check scam where they "overpay" you and have you wire the difference back.
- A "direct deposit form" or "payroll verification" early in the process is simply a clean-looking wrapper for the same theft.
The give-away is the timing and the channel. A real company collects these through a secure portal after you are hired. A scam asks over email, a PDF form, or a chat app, during recruiting, often with urgency ("we need this today to set up your account").
How to respond without burning a real opportunity
You do not have to choose between protecting yourself and being polite. Say this:
"Happy to provide that once I have a written offer and can complete it through your official onboarding system. Could you point me there?"
A legitimate employer will say yes. A scammer will push, invent urgency, or vanish - and you will have your answer. To double-check the company and recruiter, confirm the role on the employer's official careers page and that the email domain matches, or paste the message into the free checker.
If you already shared it
Do not panic, but move today. A stolen SSN or bank detail is recoverable if you act: place a credit freeze, watch your accounts, and report it. The full, ordered steps are in I already gave a scammer my information - what now?.