Alert · Employment & Task Work
Business named in this report
BrightPath Task Hub recruits through messenger apps for paid 'listing optimisation' work. Early payouts of $20 to $60 are genuine, then tasks require the worker to deposit their own funds to unlock a commission tier, and a deliberate task error locks the balance until a correction fee is paid. Six workers reported $27,800. The platform remains online and recruiting.
Elevated: Multiple objective indicators and reported payments, with verification still in progress.
Do not wire funds to brightpath-task-hub.example.com. If anyone using the details on this page asks for payment before you are holding documents you can independently check, stop the transaction — the same numbers and addresses reappear behind new company names.
Sample recordAn illustrative alert used while the live intake feed is being connected. The domain belongs to the reserved example.com documentation namespace and does not name a real business.
Objective, checkable findings behind this severity level
What happened, in order
May 29, 2026
Domain registered
Jul 2, 2026
Recruitment begins
Unsolicited messenger contact citing a job board profile.
Jul 18, 2026
First reported deposit
$1,200 deposited to unlock a commission tier.
Jul 25, 2026
First alert filed
Aug 13, 2026
Mule requests reported
Two workers asked to receive and forward payments from strangers.
Aug 19, 2026
Still recruiting
Registration and onboarding chat active at the last check.
First-hand descriptions from people who paid. Names are shortened at the reporter's request.
Priya
Selangor, MY
$9,400
Was contacted about a remote listing-optimisation role after posting a CV on a job board. The first three days paid out about $140 in total, which arrived. Task four required a $1,200 deposit to unlock a higher commission tier. A 'system error' on task six locked the balance and a correction fee was demanded to release it. She paid three times before stopping.
J.C.
Manila, PH
$6,100
Kept depositing because the group chat was full of colleagues posting successful withdrawal screenshots. Later noticed the same screenshots reposted by different accounts with different names.
E.B.
Lagos, NG
$2,300
Was asked to receive payments from strangers and forward them onward as part of 'client settlement duties'. Stopped after the bank froze the account and flagged the transactions.
What was checked and what it showed
Domain age
whoisRegistered 2026-05-29, under 60 days old at the first reported deposit.
Deposit-to-earn structure
paymentPayouts are gated behind worker deposits, which no legitimate employer requires.
Copied company identity
contentAbout page, team bios, and client logos taken from a real e-commerce services agency.
Manufactured social proof
communicationIdentical withdrawal screenshots reposted by multiple named accounts in the group chat.
Mule recruitment
paymentWorkers asked to receive and forward third-party funds, exposing them to laundering charges.
Contact points, wallets, and payment details as reported
Domain
Operator name
Aliases used
Approach platforms
Handles & accounts
Wallet addresses
Phone numbers
None on record
Email addresses
Addresses claimed
Payment routes requested
Bank beneficiaries (masked)
Assets copied from
Related domains
Bank and card numbers are published in masked form only. Full details are retained for law enforcement requests and are not disclosed publicly.
The questions people search before they pay, answered from this record
brightpath-task-hub.example.com, operating as BrightPath Task Hub, carries a severity of "elevated" in the Scam Alerted feed — multiple objective indicators and reported payments, with verification still in progress. BrightPath Task Hub recruits through messenger apps for paid 'listing optimisation' work. Early payouts of $20 to $60 are genuine, then tasks require the worker to deposit their own funds to unlock a commission tier, and a deliberate task error locks the balance until a correction fee is paid. Six workers reported $27,800. The platform remains online and recruiting. This alert was first published Jul 25, 2026 and last updated Aug 17, 2026.
$27,800 across 6 reporting parties who supplied payment evidence. Read that as a floor, not a total: this figure counts only losses backed by documents we have seen, so it can move in one direction as further reports arrive.
The domain was registered May 29, 2026 through Privacy-shielded registrar, making it about 4 months old. Genuine employment and task work operators do not run a business of this size on a domain that new, so registration age alone is a significant warning sign.
The address published for this business is Claims a Kuala Lumpur office address occupied by a coworking provider. Buyers were dealt with by email at hr@brightpath-task-hub.example.com. The website is brightpath-task-hub.example.com. Related domains on record: brightpath-worker-portal.example.com. These are published so that anyone searching a number, an address, or a domain before paying finds this record first. An address or phone number shown on a website is not proof that a business trades from it — verify it against the state business register and independent imagery before you send funds.
Reported payment routes: USDT (TRC-20), Bank transfer to rotating individual accounts. Beneficiaries on record (masked): Rotating individual names at Retail bank, MY. A beneficiary name that does not match the advertised brand is one of the strongest single indicators of fraud.
Brand names and aliases: BrightPath Remote Team, BP Task Center. Handles and accounts: @brightpath.hr (recruiter), Trainer 'Coach Wen' in a 40-person group chat. Wallet addresses: TRC-20 ••••••••1a77e. Searching these identifiers is usually what links a brand-new site to an operation already on record.
The window is set by the rail you paid on, and it starts closing the moment the payment settles rather than the moment you realise. A wire is the narrowest: while the funds are still sitting in the receiving account, your bank can ask the beneficiary bank to send them back, which is why the first call is your own bank's fraud line and not the seller. Card and PayPal goods-and-services payments carry a formal dispute route that stays open for weeks. Cryptocurrency has none at all. Once your bank has opened a recall, file with your national fraud body so investigators can approach the receiving institution independently of you. Anyone who contacts you afterwards offering to recover the money for a fee up front is running a second attempt on the same victim.
Act on the payment route first, the paperwork second
Elsewhere in the feed
superiorequipandrent.com
A buyer reports losing $26,000 to Superior Equipment & Rental of Sheldon, Iowa, on a 2017 Kubota SVL95-2s compact track loader advertised at superiorequipandrent.com/listing/2017-kubota-svl95-2s. What makes the account checkable is the paperwork rather than the sale. A used machine crossing state lines normally generates an invoice naming a legal entity, a bill of sale carrying the machine PIN, a lien search, a bill of lading against a carrier with an MC number, and a cargo insurance certificate. By the reporter's account, not one of those documents was ever issued. The seller required the full amount by bank wire ahead of release, the funds settled, and the phone and sales address went quiet.
Reported lost
$26K
Reports
1
verdant-solar-rebate.example.com
Verdant Solar Rebate Scheme advertises a government-backed solar rebate and collects a processing fee plus identity documents through a portal. No confirmed loss has been reported yet, but the scheme name does not appear in any government programme register, the domain is nine weeks old, and the document upload flow requests more identity material than any rebate requires.
Reported lost
—
Reports
0
asset-reclaim-unit.example.com
Asset Reclaim Unit approaches people who have already lost money, quoting the exact amount and platform involved. It presents a case portal showing 'recovered' funds and requests a retainer, a blockchain gas fee, and a release tax. Five people who had already been defrauded lost a further $46,900. The contact handle is shared with a trading platform in this feed.
Reported lost
$46.9K
Reports
5