Is Mercor Legit? Real Pay, Screenshots, and a 2026 Data Breach

If you’ve ever uploaded an ID to Mercor, look for a notice letter dated June 25, 2026. It offered free credit monitoring after hackers took data from Mercor’s systems in March, with an enrollment deadline of October 1, 2026, and the letter says the activation code stops working after that date. Missed it? The protections that matter most, a free credit freeze and the breach call center, don’t expire.

Mercor itself is legit. It’s a real San Francisco company, valued at $10 billion in late 2025, that pays experts by the hour to train AI models for labs like OpenAI and Anthropic. People do get paid, weekly. But the breach, the mandatory screenshot software and the way projects vanish without warning all belong in the picture before you hand over a passport scan.

Our verdict: Caution. Real work, real money, and a serious data-handling failure that’s still in court.

Last checked: September 25, 2026; breach steps updated October 1, 2026 for the enrollment deadline. How we checked this is explained at the end.

Already worked with Mercor? Do this first

Mercor’s breach notice, filed with the Massachusetts regulator, says an attacker got into some of its systems between March 24 and 30, 2026, and downloaded data that included contractors’ personal information. Here’s what the letter tells affected people to do, in order:

1. Find the notice. Mercor emailed contractors in early April, then sent the full notice dated June 25, 2026. Search your inbox and spam folder for “Notice of Data Breach” from Mercor.
2. Check whether you enrolled. The letter’s free offer (24 months of single-bureau credit monitoring plus identity restoration help from TransUnion’s Cyberscout, at bfs.cyberscout.com/activate) had an enrollment deadline of October 1, 2026. If you missed it, ask the call center in the next step what’s still available, and ignore anyone who wants payment to “reopen” the offer.
3. No letter, or no code? Call the breach call center listed in the notice: 1-844-507-8047, 8 a.m. to 8 p.m. Eastern, Monday to Friday.
4. If you’re in the US, freeze your credit with Equifax, Experian and TransUnion. The notice points out that credit bureaus can’t charge you to place or lift a freeze.
5. Treat any message about “your Mercor data” as suspect. Mercor’s own help pages say official email only comes from addresses ending in @mercor.com, and it never asks contractors for payment.

Credit monitoring only watches for new accounts. It can’t un-leak a passport scan or a recorded interview, so the freeze and your own caution do more of the work here.

What the hackers say they took

By April 1, Mercor had publicly confirmed it was hit through LiteLLM, a popular open-source AI library that had been poisoned with credential-stealing malware. The hacking group Lapsus$ then claimed about four terabytes of Mercor data, including a database of more than 200GB and a 3TB drive of “video and verification data,” Cybernews reported. Those size figures come from the attackers, not from Mercor.

What makes this worse than a typical password leak is what Mercor collects. According to one of the lawsuits described by Staffing Industry Analysts, the platform gathered Social Security numbers, birth dates, passports, face and voice biometric data and recorded video interviews. By April 13, six suits seeking class action status had been filed in federal courts in California and Texas, and a source told SIA that Meta had paused its work with Mercor.

None of those cases had been decided when we checked. They’re allegations, and Mercor hasn’t admitted wrongdoing. The breach notice itself, though, is Mercor’s own confirmation that contractor data was downloaded.

What Mercor is, and what it pays

Mercor was founded in 2023 and started as a way to match freelance programmers with US companies, using an AI interviewer. It has since pivoted to AI training work: lawyers, doctors, bankers and engineers write and grade tasks that teach chatbots to handle expert questions. The company says it manages more than 30,000 contractors.

Rates are listed openly, which is more than most rivals do. When we opened Mercor’s opportunities board on September 25, 2026, these were among the listings:

Advertised isn’t guaranteed. You’ll apply, often record an AI-run video interview, and may never hear back. Hours are capped per project, and the cap can drop.

How payday works (and why the clock is Indian time)

Mercor’s pay week runs from Saturday 12:00 a.m. to Friday 11:59 p.m. India Standard Time, whatever country you’re in. According to its time-tracking and pay policy, payouts for that week are processed by the end of the following Wednesday, Pacific time.

Mercor’s time-tracking and pay policy page, screenshot taken September 25, 2026.

That Friday cutoff lands at 11:29 a.m. in Los Angeles and 2:29 p.m. in New York during US daylight saving time, 11:29 p.m. in Pakistan, and 2:29 a.m. Saturday in Manila. Anything you log after that rolls into the next week, which means waiting almost two weeks for it.

Money goes out through Stripe in most countries and Wise where Stripe isn’t available. Mercor’s docs flag three catches: Stripe holds your very first payout for 7 days, Wise payments don’t move until you accept an emailed transfer, and Stripe’s Instant Payout option costs 1%. There’s no PayPal.

The screenshot app you have to install

You can’t get paid without Insightful, a time tracker whose desktop app is called Workpuls. Mercor’s policy says it “may take periodic screenshots (a few per hour)” while the timer runs, manual time entries aren’t allowed, and only tracked hours are paid. It doesn’t run on Chromebooks, iPads or phones.

If reviewers decide logged time wasn’t project work, they can remove hours. Mercor says a human reviews each case, emails you before payout, and gives you until the next pay period to dispute. Its own example adds that if hours get removed, you shouldn’t expect to stay on that project.

Practical fix: work in a separate computer user account or browser profile with nothing personal open. Screenshots capture whatever’s on screen, and after this year, it’s fair to assume anything Mercor stores could leak.

What contractors complain about

Mercor scores 4.3 out of 5 on Trustpilot from 775 reviews, and 765 of those arrived in the last 12 months. That’s 72% five-star and 12% one-star. Trustpilot notes that Mercor invites reviews and had replied to just 4% of negative ones.

The praise is consistent: easy onboarding, on-time weekly pay. So is the criticism. Two reviewers writing in September 2026 described being offboarded without notice or a clear reason. One said they were told 40 hours a week would be available and rarely got 10. A one-star reviewer summed up the rest: volatile projects, heavy data collection up front, and mostly automated replies when something goes wrong.

Longer reporting points the same way. Contractors interviewed by The Verge, New York Magazine and Wired described a stressful environment, poor management and falling pay. That’s the same pattern we found with Outlier AI and Handshake AI: the pay is real, the work isn’t steady. If you’re weighing alternatives, our Alignerr review covers a similar platform that also asks for ID verification and screenshot tracking.

Should you apply now?

If you have a specialty Mercor pays well for (law, finance, medicine, senior engineering), it’s one of the better-paying options in AI training. Go in knowing you’ll hand over an ID, a recorded interview and hours of screenshots, and that this data has already leaked once.

Skip it if you can’t afford the gaps between projects, or if the thought of your passport scan on a hacker forum is a dealbreaker. That’s a fair line to draw. Our guide to healthcare AI trainer jobs covers similar work if you’re comparing options.

Whatever you decide, only apply through work.mercor.com and ignore “Mercor recruiters” writing from any other domain. Mercor says applying, interviewing and starting work are all free.

FAQs