One morning I got what looked like a normal website enquiry. A small clothing business wanted an ecommerce site. By the second message it was obvious this was a scam, and it’s one that targets web designers and developers over and over again.
Here’s how it played out, how the scam actually works, and the red flags to watch for so you don’t get caught.
The first message
This is what landed in my inbox (their spelling and grammar, not mine):
Here is the job details, I have a small clothing business for both male and female, now am trying to expand the business and i want you to build an eCommerce website for it for advertisement. I need you to checkout this site but I need something more perfect than this if possible [link to a real clothing store]. The site would only be eCommerce, So i need you to get back to me with an estimate for the web design, The estimate should include hosting and i want the site to have not more than 15 pages since it is eCommerce. I have a private project graphic designer, he has the text content, images and the logos for the site.
It read like plenty of leads I get. A bit rough, but nothing alarming. So I replied with a time frame and a quote.
The reply that gave it away
Thanks, I’m very much satisfied with the total estimate, quite affordable. Here’s an exclusive just to show some seriousness and dedication. I am willing to pay up the sum of $1,000 as an upfront payment so that you can start making my website design. I have my credit card available for the payment. But first I want you to pay attention to this. I have been advised to take a long rest for an easy and fast recovery after my ear surgery I went through, hence the reason why I need your favor. I haven’t paid the private graphic designer that has the text content and the logo for my website, he does not have credit card facility. Regarding this fact, I will be giving you my credit card for the total of $5,300. Once the funds clears to your account $1,000 will be deducted as an upfront payment for the graphic design, $200 for yourself as tip and the remaining $4,100 will be sent to the private graphic designer that has the text content and the logo for my website.
That was it. I’d seen this exact script earlier that year. An excuse, a favour, and “I’ll pay you, but you need to pay someone else.”
How the web developer scam works
- A vague job with a decent budget. They point you to someone else’s website and ask for “something like this but better”.
- Your quote gets accepted straight away. No questions about scope, no haggling.
- A third party appears. Usually a “private graphic designer” or consultant who has the content and logo but can’t take card payments.
- They overpay you by card. Then they ask you to forward the difference to that third party by bank transfer, remittance or crypto. Often there’s a “tip” in it for you.
- The card is stolen. The real card holder spots the charge and disputes it. The payment gets reversed, sometimes weeks later.
By then the money you forwarded is gone and you can’t get it back. Worse, your business name is on the stolen card’s statement. To the card holder and their bank, you look like the scammer. You can also cop chargeback fees, and your payment provider may freeze or close your account.
Red flags to watch for
- No business name, ABN, phone number or website of their own
- A reason they can’t talk on the phone, like surgery, being hearing impaired or travelling
- They accept your first quote without asking a single question
- They want to pay more than your quote
- They ask you to pay a designer, consultant or supplier on their behalf
- They push you to act fast
- A free email address and a message that reads like a copy and paste template
One red flag on its own might be nothing. Two or three together, walk away.
How to protect yourself
- Never pass client money on to a third party. A real client pays their own suppliers.
- Only take the amount on your invoice. Don’t accept overpayments, and never refund an overpayment to a different account.
- Get on a call before quoting bigger jobs. A quick phone or video call makes most scammers disappear.
- Check who you’re dealing with. Look up their ABN on ABN Lookup and search their business name.
- Don’t treat “cleared” funds as safe. Card payments can be reversed well after they land in your account.
What to do if you get one of these messages
Don’t reply and don’t send anything. Report it to Scamwatch so others can be warned.
If you’ve already taken a card payment or sent money, contact your bank or payment provider straight away. You can also report it through ReportCyber. The Australian Cyber Security Centre explains how on its recognise and report scams page.
Other web designers have seen it too
This isn’t new. The same script has been doing the rounds since at least 2015, with the type of business swapped out each time. Other designers have written about it here:
- Web Design Scam! Heads up! (Treehouse Community)
- Web Designers Beware: Don’t Fall for This Common Scam (Minimist)
Quick answers
Is it a scam if a new client wants to pay more than my quote?
Almost always, yes. Especially if they then ask you to send the extra to someone else. Real clients don’t overpay on purpose.
Why would a scammer pay me at all?
They aren’t paying you. They’re using a stolen card. The goal is to get you to send your own money to them before that payment is reversed.
What if I’ve already sent money?
Call your bank straight away and ask them to try to stop or recall the transfer. Then report it to Scamwatch and ReportCyber.
More on scams and genuine projects
Scammers keep changing their methods. My guide to the fake Cloudflare verification scam covers another threat that can affect both website owners and visitors. If you’re after a genuine online store, my ecommerce web development service explains the work I offer.
