Giving people unrestricted access to your endpoint is up there with run in a tor exit node.
While they were never outward about the end goal it was a mix of money laundering and identity laundering. No joke I stopped using Upwork after the novelty wore off and it was a regular occurrence. Also of note, they almost always said something about how they were Chinese and wanted to do this because they could not get legit work with their identity or some other BS. This was not one time but at least half a dozen. Would love to hear from someone who took them up on these offers.
edit: will add that I speak some Chinese, I had Zoom calls with them on one occasion. I was able to glean that maybe they were not being aboveboard about their nationality and also that there were a bunch of people in the background running the same script. All so bizarre. Best guess? They use compromised PayPals to pay people out without a care what happens, launder some of the money because why not? And then they get access to a Stateside identity with an endpoint they can do god only knows what with.
The actually "crimey" stuff is the minority. If it weren't it'd be too easy to crack down on. Same math as laundering through a real business.
But now the Nigerian "format" scammers are into job scams. I got an email that reeked and played along a bit. I was "hired" after a curiously simple interview via signal, and had to wait for my "supervisor" to come train me.
Eventually I got the "boss" on the line to talk, he went absolutely postal when I asked if he was an African scammer. Apparently that's racist now.
I've gotten that too, now that everyone ITT is talking about it. I had no idea what was going on with it at the time and ignored it. Amusing to know that there could be state actors behind it.
The version I got explicitly suggested that I create such an account for the purpose if I don't already have one (I didn't, and of course still don't).
> But now the Nigerian "format" scammers are into job scams.
Sorry, "format"?
They offered to help me setup an Upwork account too. Tiresome creeps.