She answered the door expecting to find a package. Instead she found a sheriff – with a search warrant in hand.
And she had absolutely no idea why.
She thought she had a job. A real one. Work from home, receive packages, photograph the contents, log everything into an online portal, and reship using prepaid labels. Easy work. Decent pay. First paycheck after 30 days.
Except the paycheck never came. And the packages she’d been so carefully logging and reshipping? Stolen merchandise. Every last one of them.
Her name was on all of it.
That’s a reshipping scam. And right now, people are falling for an active version of it.
Prefer to read? Keep scrolling.
So How Does This Thing Actually Work?
It starts with a job posting. Could be LinkedIn. Could be Indeed. Could be a direct message out of nowhere. The job title sounds perfectly normal. “Package Processing Specialist.” “Logistics Coordinator.” “Warehouse Quality Control.” Something that would show up in a real search.
The pitch is simple. You work from home. Packages come to your address. You open them, photograph the contents, log the details into a portal, and reship using prepaid labels they provide through their online portal. They make it sound like quality control. Like you’re doing something important.
You go through an actual hiring process. There’s paperwork. A contract. Instructions in how to do the job. They tell you the first paycheck comes at 30 days.
And then the packages show up. Just one or two at first, but more once you’ve proven you can do the job right.
Here’s what’s in them. Merchandise bought with stolen credit cards. Stuff ordered through hacked Amazon accounts, Verizon accounts, Apple IDs, Best Buy accounts. You name the retailer – scammers have figured out how to compromise it.
They can’t have those packages shipped to themselves. That would be the end of the operation in about three business days. So they need someone else’s name and address on the label.
Yours.
Here’s Where It Gets Really Bad
The people whose cards were stolen or whose accounts were hacked are going to figure it out. Maybe not today. Maybe not next week. But they will notice the charges, call the bank, contact the merchant.
And the merchant is going to check the shipping details.
Your name. Your address. Right there in the order record.
Law enforcement gets involved. They show up looking for the packages and the person responsible for receiving them.
That person is you.
I’ve seen this happen firsthand. Years ago, I helped a woman who had been unknowingly participating in exactly this kind of scam. By the time I got involved, she’d already had the sheriff at her door with a search warrant. I was able to speak directly with the law enforcement officer and explain how the whole operation works, so that officer understood she was a victim, not the one running the show.
She wasn’t a criminal. But she was the one standing in her doorway trying to explain herself.
And here’s the part that really stings. At the end of that 30 days? Nothing. No paycheck. No explanation. The “company” just disappears. These victims work an entire month, receive and reship stolen goods, and get ghosted. The scammers, meanwhile, are on the other end of a cargo ship collecting their merchandise.
Used for 30 days and thrown away.
About This Investigation
About This Investigation
I’m currently investigating an active iteration of this scam operating under the name Forwardleag.
Here’s the timeline of what I’ve found. And I want you to pay attention to how quickly this thing was built.
March 2025: The domain forwardleag.com is registered. A professional-looking logistics website goes up.
March 9, 2026: Forwardleag LLC is officially incorporated as a legal business entity in New Jersey, registered with the NJ Department of the Treasury Division of Revenue and Enterprise Services. Entity ID 0451426563. City of record: New Brunswick.
March 8, 2026: The Forwardleag Facebook page makes its first post. One day before the LLC is even registered.
April 22, 2026: Two new domains are registered on the same day. shipping-forwardleag.com, used to email victims. And hr-forwardleag.com, used for the fake hiring operation.
April 23, 2026: One day later, forwardleag.group appears. That domain houses an “Employee Login” portal with the tagline: “Sign in to continue working with your package queue.”
Let that sink in for a second. Your package queue. That’s not how a legitimate logistics company talks to business clients. That is a system built to manage people who think they have a job.
Read that timeline again. A website. Then a real legal entity. Then a Facebook presence. Then the operational infrastructure to recruit, manage, and communicate with victims. Built out in stages, over about 14 months, piece by piece.
That is not a scammer borrowing someone else’s name. That is a deliberate build.
I called the phone number listed on forwardleag.com. Didn’t matter which option I selected on the automated menu. Every single one sent me in a circle, directing me to contact them through their online form. Round and round. No human. No answers.
There’s no active website at shipping-forwardleag.com or hr-forwardleag.com. Just enough infrastructure to send convincing emails.
There’s also a press release floating around pay-to-publish wire services about Forwardleag LLC. I want to be clear about what those are. Anyone with a credit card can submit to those services. It’s not journalism. It’s not validation. It’s a tactic, and a cheap one, to manufacture the appearance of legitimacy.
The Facebook page is its own story:
The Forwardleag Facebook page posted for the first time on March 8, 2026. Every single image on that page is AI-generated or pulled from a stock photo library. Not one original photo. The page has around 3,200 followers, but for a company that claims to be based in New Jersey, the follower base is almost entirely non-US. That’s not what a legitimate American company’s audience looks like.
There are 29 reviews on that page. Every one of them positive. 100%. Now, I’ve been doing this long enough to know that 100% positive reviews on a brand-new page should always raise an eyebrow. But when I dug in, it got worse. Two reviewers have different names but identical profile photos. Two separate people posted the exact same review text, word for word. Many of the reviewer profiles show dozens of reviews left for other companies, which is a classic sign of paid review farms. Accounts that exist only to leave positive feedback for hire. Facebook doesn’t allow it. Scammers do it anyway.
How I found a victim:
I came across a young man who had listed Forwardleag as his current employer on his public LinkedIn resume. He was job hunting, doing everything right, and genuinely believed he’d landed something real. I reached out through the email address on his profile. He called me back within minutes. And I had to tell him, on that phone call, that the job he was so relieved to have found was a scam. That the packages arriving at his home contained stolen merchandise. That he needed to stop immediately.
He did. Not everyone gets that call.
Where the investigation stands:
The evidence I’ve gathered points clearly in one direction. But I’m a thorough person, and I’ll keep digging. If there’s more to report, I’ll bring it to you in a follow-up. What I can tell you right now is that real people are receiving stolen merchandise at their homes because they believe they work for this company. And that’s enough to warn you.
How to Spot a Reshipping Scam Before It Spots You
If a remote job wants packages shipped to your home address, it’s a scam. Full stop. Real companies have warehouses. Real logistics operations have fulfillment centers. Nobody running a legitimate business needs merchandise shipped to their employee’s living room.
Check the email domain. If you apply to a company and emails start coming from a slightly different version of the name, like company-shipping.com instead of company.com, that’s a deliberate tactic. Scammers register secondary domains so they can vanish quickly without burning the main site.
Search the company name and the word “scam” before you do anything else. These operations rotate through company names but run the same playbook. A few minutes of research upfront can save you an enormous amount of pain.
The 30-day paycheck delay is a trap, not a policy. Most states have laws about how often employees must be paid. A month-long wait for your first check is not normal. It’s a way to keep you working just long enough to be useful, then disappear before you realize you’ve been had.
A nice website doesn’t mean anything. A professional-looking site, an Instagram page, and a pile of glowing reviews can all be built in a weekend. Always go deeper than the homepage.
Look at the reviews. Do the profiles look like real people? Do they have actual post histories, friends, normal activity? Or do they look like accounts that woke up six months ago and have spent every waking moment leaving five-star reviews for companies nobody has heard of? Trust your gut on this one.
If You Think You’re Already In This
Stop accepting deliveries. Right now. Don’t reship anything that’s already at your home.
Get ahead of it with law enforcement. Walk in and explain what happened before they come looking for you. It matters.
Report the job posting to whatever platform you found it on. LinkedIn, Indeed, wherever. Other people are seeing that same posting right now.
File a report with the FTC at ReportFraud.ftc.gov.
Hold onto every email, every text, every piece of communication with whoever hired you. All of it.
You didn’t do anything wrong. But you need to move fast.
One More Thing Before You Go
The people who fall for this aren’t gullible. They’re not careless. They’re people who needed work and found what looked like a legitimate opportunity. The young man I mentioned was doing everything right. Built his resume, networked on LinkedIn, followed up on leads. He just happened to find one that was a lie.
This scam works because someone put real effort into making it work. The contracts, the portals, the fake reviews, the professional websites. All of it designed to make you believe.
The only thing that breaks it is knowing what to look for.
So share this. Send the video to anyone you know who’s looking for work right now. It only takes one person seeing this at the right moment to change everything.
I’m Grammy. Stay sharp out there, friends.
Have you or someone you know been targeted by a reshipping scam? Reach out through AskGrammy.com. Your experience could help protect someone else.