Description

This scam involves impersonation of a well-known company—Anderson Trucking Service, Inc.—using a spoofed email domain (remote-atsinc.com) that mimics the legitimate domain (atsinc.com). The scammers claimed to be hiring for a remote Network Engineer position. The process began with a seemingly legitimate job inquiry and a request to complete a screening questionnaire via email. There were no phone calls or video interviews—only email-based communication with individuals using fabricated names such as “Raymond Chock” (later changed to “Raymond Chonk”) and “Greg Koenigs,” who claimed to be a Talent Onboarding Manager. After submitting the questionnaire, the target was informed they were “hired” and sent a fake offer letter in .rtf (Rich Text Format). This letter requested a signature and a scanned copy of a government-issued ID. The job offer included an unusually high hourly rate and vague benefit descriptions. The scammers stated that the new hire would receive a check to purchase “remote workstation equipment” through a certified vendor. The individual would be responsible for ordering the equipment—this is the key element of a fake check/money mule scam. Typically, victims deposit the counterfeit check, forward real money to the fake vendor, and are left financially responsible when the check bounces. The scammers also promised onboarding, a training bonus, and future portal access—but only after the equipment purchase. No secure portal, official HR contact, or traceable company phone numbers were ever provided. The email communications showed several signs of fraud: A fake domain with no SPF or DKIM security records Inconsistent names and poorly written messages Pressure to act quickly and provide personal information Requests for financial transactions before any real onboarding This is a sophisticated scam that uses job-seeking platforms and public resume databases to impersonate reputable companies and exploit victims. The goal appears to be a mix of identity theft and check fraud.