12 Signs a Remote Employee Is Working Two Jobs
The most reliable signs that a remote employee is working two jobs are a calendar that is permanently blocked, chronically delayed responses during core hours, a sharp drop in output once onboarding ends, and tracker activity that looks mechanical rather than human. No single sign is proof — every one of them has an innocent explanation, from caregiving to a bad ISP. What matters is the pattern: three or four of these signals appearing together, and persisting for weeks, is what justifies a closer, evidence-based look. Here are the twelve signals employers report most often, and how to verify them without wrongly accusing anyone.
1. The calendar is always blocked
Overemployed workers defend their second job's meeting hours by filling their first job's calendar with vague "focus time," "personal appointment," and "do not book" blocks — every day, at the same times. One or two protected blocks is healthy time management. A calendar where you can never find thirty minutes, week after week, especially in the late morning or early afternoon when another employer's standups would run, is one of the most commonly reported tells.
2. Camera off and mic muted in every meeting
People juggling two jobs often sit in your meeting on mute with the camera off so they can keep working the other one. Plenty of employees dislike being on camera, so this means little on its own. The red flag is the combination: camera permanently off, long pauses before answering direct questions, and answers that suggest they only heard the last sentence.
3. Delayed responses during core hours
Slack and email replies that reliably take 45–90 minutes during agreed core hours — then arrive in bursts, several at once — suggest someone toggling between two employers' chat windows on a schedule. Everyone goes heads-down sometimes. But an employee who is consistently unreachable at the same times each day is following someone's schedule; the question is whose.
4. An output cliff after onboarding
A classic overemployment pattern: strong performance during probation, then a steep and permanent decline once the employee judges they've built enough trust to coast. Ordinary performance dips recover, or correlate with a life event. The cliff pattern doesn't — output settles at a level just high enough to avoid a performance conversation, and stays there.
5. They dodge pair work and screen sharing
Pair programming, co-working sessions, and "can you just share your screen?" moments are dangerous for someone with another employer's Slack, calendar, or codebase open. Watch for employees who always volunteer for solo tasks, deflect live collaboration to async handoffs, and become unavailable whenever real-time work together is proposed. A one-off is a preference; a perfect record of avoidance is a pattern.
6. Metronomic, too-perfect tracker activity
If you use time-tracking software, human activity looks bursty: intense stretches, short lulls, natural idle time. Auto-clickers and mouse jigglers produce the opposite — steady, uniform input for hours with no idle periods at all, which is how people simulate presence at job A while actually working job B. SCREENish flags these stretches automatically for human review; see how mouse jiggler detection works and why legitimate causes like remote-desktop sessions are identified before anyone is accused.
7. Hard stops and sudden schedule rigidity
An employee who abruptly develops immovable "hard stops" at the same hour every day — and refuses even occasional flexibility they used to offer — may be running up against another job's start time. This is only meaningful as a change: someone who has always guarded their evenings is just someone with boundaries. Someone who became rigid the same month their output dropped is worth a closer look.
8. A LinkedIn profile that never updates — or quietly disappears
Overemployed workers commonly avoid listing your company on LinkedIn, set their profile to private, or "hibernate" it entirely, because a public profile risks the two employers discovering each other. Also watch for the opposite signal: a second current role listed, a personal LLC or "consultant" line that appeared after they joined, or their name showing up in another company's new-hire announcement or press release.
9. Recurring "connectivity issues" in meetings
Workers who double-book two employers' meetings sit in both on mute and drop one the moment they're asked a live question — "sorry, my connection died." Real connectivity problems are random. Suspicious ones cluster: they happen precisely when the employee is called on, at recurring times of day, and never during meetings the employee scheduled themselves.
10. Device and background clues
A second laptop glimpsed on video, constant glances at an off-screen monitor, typing sounds while they're supposedly listening, phone notifications firing all day, or the wrong company's name slipping into conversation — individually trivial, together telling. Some teams also notice login patterns from unexpected machines. If identity matters for the role, consent-based remote employee identity verification can confirm the person tracking time is actually the person you hired, which also protects against outsourced-job schemes.
11. Burnout with no visible workload
Working 60–80 real hours across two jobs is exhausting, and it shows: fatigue on calls, irritability, sick days that cluster around one employer's crunch periods. If an employee shows every symptom of overwork while their tracked workload for you has gone down, the missing hours are going somewhere. Treat this one carefully — burnout has many causes, most of them sympathetic — but note it alongside other signals.
12. Payroll, tax, and paperwork anomalies
Administrative trails surface overemployment more often than managers expect: an employment-verification request from another company's lender or landlord, benefits coordination flags showing duplicate coverage, tax-withholding forms adjusted in ways that only make sense with a second W-2, or a background check that turns up an overlapping current employer. HR usually sees these before the manager does, which is a good reason to loop HR in early rather than investigating alone.
Before you accuse anyone
Every sign on this list has an innocent explanation. Blocked calendars protect deep work. Cameras stay off for bandwidth, anxiety, or a messy room. Output drops because of divorce, illness, a sick parent, or plain disengagement — none of which are firing offenses, and all of which deserve a different conversation than "we think you have another job."
Context matters too. Overemployment went from niche to movement in the early 2020s: the Wall Street Journal profiled white-collar workers secretly holding two remote jobs back in August 2021, the r/overemployed community has since grown to hundreds of thousands of members trading tactics, and outlets like Marketplace have documented workers running overlapping remote jobs for years since. The playbook your employee may be following is public, which is exactly why the signs above recur so predictably.
It also matters what kind of second job you're dealing with. There is a real difference between an employee holding a second part-time contract they never disclosed — a policy violation, possibly an honest misunderstanding of their obligations — and an employee billing two employers for the same hours, which is time fraud. The first calls for a policy conversation and a decision. The second calls for evidence. Moonlighting itself is legal in many places, and some jurisdictions restrict what employers can prohibit, so involve HR and check your contracts before acting.
So verify first. Gather objective data over two to four weeks rather than reacting to one bad sprint. Have a human review anything a tool flags — automated suspicion is a starting point, never a verdict. Then have the honest conversation: lay out what you're seeing, ask for their account, and listen. Most performance mysteries end there, whichever way the answer goes.
Getting from suspicion to facts
The gap between "I have a feeling" and "I have grounds for a conversation" is exactly what time-tracking data is for. SCREENish records tracked hours with periodic screenshots, measures activity levels from keyboard and mouse use (never from what employees type), and flags mechanical input patterns for human review — no time is rejected and nobody is penalized unless you decide to act. If several of the signs above sound familiar, our guide to overemployment detection walks through what the data can and can't tell you, and how to use it fairly.