The Fake Internship Now Comes From Inside Your Inbox

The 2026 version does not look sketchy. It arrives through your school email, uses a real professor's name, and points at a real company.

In partnership with

Does Your State Have Money Owed To You?

Does your State Treasury Department have money that's owed to you?

Search your name and state to check if unclaimed funds may be listed in official records. State agencies hold unclaimed property when accounts, refunds, or deposits go uncollected.

Millions of records exist across the U.S., and your name could appear in one of them. This search reviews public records for possible matches tied to your name.

Start your search to see what may be associated with your name.

Welcome to today's SCALIS EarlyCareers newsletter! 🚀

Classes just started. Your inbox is already a mess of add/drop notices, club recruitment blasts, and Summer 2027 postings going live. Somewhere in that pile is a message from a name you recognize, a professor in your department or your career office, about a paid research or remote assistant role. It is short, it is plausible, and it is timed perfectly.

Some of those messages are not real, and the reason you will not catch them is that you are checking the wrong thing.

Everyone has seen the red flag list: bad grammar, a Gmail address, an offer too good to be true. That list was built for a scam that announced itself. The current one does not. The FTC's own guidance for students warns about emails that look like they came from a professor or an office at your college, and separately about scammers taking outdated ads from real employers, editing them, and reposting them on Indeed and LinkedIn so they read as legitimate openings at legitimate companies.

Read that again, because it changes the whole defense. The message is clean. The company is real. The name is real. Polish is no longer evidence of anything.

So stop screening on how it looks. Start screening on where it came from and what order things happen in. Here is that filter.

Short on cash? Get up to $750, no credit check.

Access up to $750* from your upcoming paycheck within minutes for a small fee, or wait 3 days and get it for free. No credit check. No late fees. 

*Not all users will qualify. Advances range from $25–$750; average advance is $170. Express transfer fees may apply.

3,789 BRAND NEW internship positions freshly posted today. View the full list below and start applying!

Your .edu address is a targeting list, not a safe zone

Students treat the school inbox as pre-vetted. It is the opposite. A university directory is public, addresses follow a predictable format, and the whole population is young, broke, and actively job hunting on a known calendar. That is a marketer's dream and a scammer's too.

Nothing about arriving in your school email confirms a sender. Nothing about a Handshake or career portal listing confirms an employer either, because those feeds ingest postings at volume and the vetting is not what students assume it is. Career offices across the country publish their own scam warnings for exactly this reason.

Treat your .edu inbox as the channel scammers most want to use, because the trust is already built in and they did not have to earn it.

Verify out of band, always

This is the single highest value habit in this issue, and it comes straight from the FTC: if the message looks like it came from a professor or an office at your school, confirm with them directly, and do not use the email address or phone number in the message.

That last clause is the whole thing. A spoofed sender will happily answer your reply and confirm they are real. Verification only counts if you leave the conversation to do it.

Concretely: look the professor up in the department directory yourself and email that address fresh. For a company, ignore the link and navigate to the employer's own careers domain, then find the req there. If the role does not exist on the company's own site, you have your answer in under two minutes.

Read the sequence, not the polish

Real early career hiring runs in a predictable order. A posting exists publicly. You apply. Time passes, usually a lot of it. A scheduled interview happens with a named person. An offer comes. Paperwork follows the offer.

Scam sequences compress that. Unsolicited contact you did not initiate, a "screening" conducted entirely over text or a chat app, and an offer inside a day or two. If you never applied and you are being hired, the order is wrong, and wrong order is a stronger signal than any wording.

One clean question exposes it:

"Thanks for reaching out. Can you point me to the public posting for this role on your careers site so I can apply through the normal process?"

A real recruiter sends a link without blinking. A scammer explains why this opportunity works differently.

Short on cash? Get up to $750, no credit check.

Access up to $750* from your upcoming paycheck within minutes for a small fee, or wait 3 days and get it for free. No credit check. No late fees. 

*Not all users will qualify. Advances range from $25–$750; average advance is $170. Express transfer fees may apply.

The harvest happens at onboarding, not at the posting

Here is where most student defenses fail. People brace for a scam at the offer and relax the moment they get one, which is exactly backwards. The FTC has documented fake onboarding portals built to collect Social Security numbers and bank account details from brand new "hires."

The tricky part is that real employers ask for the same information. So the discriminator is never what is being asked, it is when and where. Legitimate collection happens after a signed offer, on the employer's own HR system or a named payroll provider, through actual tax and eligibility forms. Not before an offer, not on a form that lives on a consumer document tool, and not over email or chat.

If someone wants your SSN, date of birth, or direct deposit details before you have a signed offer in hand, stop there. That is the payload, and everything before it was setup.

The scam that never asks you for a dime

The version people miss entirely is the one where no money is requested at all. You are hired as a remote operations or logistics assistant. Packages arrive at your apartment. You repackage them and ship them onward. Or your role is to receive payments and forward them to a vendor account.

In both cases the goods and the money are stolen, and you are the layer that launders them. Nobody scammed you out of a payment, so the usual alarm never fires. But your name is on the shipping labels and your account is in the transaction chain, and unwinding that with a bank or law enforcement is a genuinely awful semester.

The rule is simple. A legitimate internship never routes other people's money or merchandise through your personal accounts or address.

If you already gave something up, move today

Speed matters more than embarrassment here, and this happens to sharp people constantly.

If you shared bank details, call your bank now and ask about closing or locking the account. If you deposited a check, do not spend a dollar of it, because when it bounces the bank takes back the full amount. If you handed over your SSN, place a free credit freeze with all three bureaus. Then report it: your career center (so they can pull the listing and warn everyone else), ReportFraud.ftc.gov, and ic3.gov.

You are going to get a lot of messages this fall. Most will be real. The ones that are not will look exactly like the ones that are, so let the channel and the sequence do the work your instincts cannot.