How to protect your small business from buyer scams

Getting a new order or customer is usually good news, but sometimes a sale isn't what it seems. Small businesses can be targeted with fake payments, overpayment scams, stolen cards, chargeback fraud, and customers who manipulate refunds or delivery disputes.

Key takeaways:

• Never rely on a payment screenshot or confirmation email. Check your bank or payment account directly.
• Be suspicious if a buyer overpays and asks you to return the difference.
• Use your normal payment, shipping, and refund procedures, even when a customer asks you to make an exception.
• Keep invoices, customer messages, tracking information, and other proof of the transaction.
• Treat unexpected links and attachments from potential customers carefully. A fake order can also be a phishing or malware attack.

What are buyer scams?

Buyer scams happen when someone poses as a legitimate customer to steal money, products, services, or information from a business.

Depending on what you sell, the scam might start with an online order, an email asking for a quote, a marketplace message, or someone contacting you directly about a large purchase.

Not every unusual customer request is fraud, of course. Payments fail, people enter the wrong address, deliveries go missing, and genuine customers sometimes dispute charges. The important thing is knowing which situations deserve a closer look before you send your products.

Common buyer scams targeting small businesses

These are some of the situations small business owners should know about.

1. Fake payment confirmation scams

A customer tells you they've paid and sends a screenshot, email, or other supposed proof of payment. The confirmation may look convincing, but the money isn't actually in your account. Scammers can create fake payment screenshots or emails that imitate banks and payment services.

If you ship the product based on the confirmation they sent you, you may discover later that no payment was ever made.

How to protect your business: Don't use screenshots or emails as proof that you've been paid. Open your banking or payment account and confirm that the transaction is actually there.

2. Overpayment scams

A buyer agrees to purchase something from you but sends, or claims to have sent, more than the agreed price. They then contact you with an urgent request: I accidentally paid too much. Can you send the difference back?

In some cases, the original payment is fake. In others, it may come from a stolen account or payment method and later be reversed. Either way, the money you send back comes from you.

Some scammers may also ask you to send the extra money to a third party, such as a courier or supplier.

How to protect your business: Never return an overpayment until you've verified the transaction with your bank or payment provider. If something doesn't look right, contact the provider before doing anything else.

3. Chargeback and refund scams

Chargebacks and refunds are legitimate consumer protections, but dishonest buyers can abuse them.

A customer may receive a product or service and then dispute the transaction, claim the order never arrived, return a different or used product, or attempt to get more than one refund for the same purchase.

How to protect your business: Keep invoices, customer communication, tracking and delivery information, and other proof that you fulfilled the order. Have a clear return policy and, whenever possible, issue refunds through the original payment method.

4. Purchases made with stolen credit cards

A scammer may use stolen card details to buy products from your business. By the time the real cardholder notices and reports the transaction, you may already have shipped the goods. The payment can then be reversed, leaving you without the product or the money.

High-value orders, unusually large quantities, mismatched customer information, or requests for very fast shipping deserve a closer look, particularly when several warning signs appear together.

How to protect your business: Be cautious with unusual or high-value orders, especially when billing and shipping information don't match. If something looks suspicious, check the transaction with your payment provider before shipping.

5. Fake check and cashier's check scams

A buyer sends you a check for a product or service, sometimes for more than the amount you requested. They then ask you to return the extra money or send part of it to someone else.

The problem is that a check appearing in your account doesn't necessarily mean it has fully cleared. If the check later turns out to be fraudulent, the bank can remove the money from your account, while the money you sent to the scammer is already gone.

How to protect your business: Don't send products, refunds, or third-party payments simply because a check appears to have been deposited. Wait until your bank confirms that the funds have cleared.

6. Shipping and delivery scams

Sometimes the unusual part of the transaction isn't the payment. It's the delivery.

A buyer might ask you to:

·change the delivery address after the purchase

·use a specific shipping company

·pay a courier on their behalf

·remove tracking or signature requirements

There can be legitimate reasons for some of these requests. But they can also make it harder to prove where an order was delivered or recover your money if the transaction is disputed.

How to protect your business: Use your normal shipping procedures and keep tracking and delivery records. For expensive products, consider requiring a signature on delivery.

How to protect your small business from buyer scams

Many buyer scams rely on getting you to act quickly or step outside your usual procedures. Knowing what to check before you accept a payment, ship an order, or issue a refund can help you avoid them.

Verify payments independently

Instead of clicking a link in a payment confirmation email, open your bank or payment provider yourself and check the transaction there. If the money isn't showing where it should be, don't ship the order.

Stick to trusted payment methods

Be cautious when a buyer asks you to accept an unfamiliar payment method, move a transaction outside a marketplace, or handle part of the payment separately. Stick to your usual checkout and payment procedures.

Don't refund money you haven't actually received

If someone says they've overpaid, verify the original payment before sending anything back. A genuine customer can wait while you check what happened with your bank or payment provider.

Have clear refund and return policies

Define how customers can request refunds, where returns should be sent, and how refunds are processed. Clear procedures make legitimate customer issues easier to handle and give scammers fewer opportunities to persuade you to make exceptions.

Keep records of every transaction

Keep the buyer's messages, emails, invoices, payment details, and shipping information. Contact your bank or payment provider if money is involved, and report suspicious activity to the marketplace or platform where the transaction took place. If you've lost money or goods, report the fraud to the appropriate authorities in your country.

Use tracked shipping for valuable orders

Tracking provides evidence that an order was shipped and delivered. For expensive products, signature confirmation can provide additional proof that someone received the package.

Take a closer look at unusual orders

If someone you've never dealt with before suddenly wants to place an unusually large order, it's reasonable to check the details before fulfilling it. Look at the whole transaction. Does the payment make sense? Do the billing and shipping details match? Is the customer asking you to do something outside your usual process?

What to do if you think a buyer is scamming your business

If something doesn't look right, don't rush to complete the transaction. If possible, pause the order and verify the payment before shipping products, providing services, issuing a refund, or sending money anywhere.

Keep the buyer's messages, emails, invoices, payment details, and shipping information. Contact your bank or payment provider if money is involved, and report suspicious activity to the marketplace or platform where the transaction took place.

If you've already sent money or goods, contact your bank, payment provider, or shipping company as quickly as possible to see whether the transaction or delivery can still be stopped.

Buyer scams aren't always just about payments

Sometimes a fake customer isn't trying to buy anything at all. Cybercriminals can pose as potential customers to get you to click malicious links, open infected attachments, reveal passwords, or hand over sensitive business information. For example, someone might contact your business asking for a quote and attach a supposed list of requirements. Another person may send a link to a “purchase order,” “payment confirmation,” or “shipping document” that takes you to a fake login page.

For small businesses, buyer fraud and cybersecurity risks can sometimes overlap.

This is why protecting your business accounts and devices matters alongside checking payments. Use unique passwords, enable multi-factor authentication, keep your devices and software updated, and use security software on the devices you use for work.

Bitdefender Ultimate Small Business Security helps protect small businesses against phishing, malware, account compromise, and other online threats across the devices employees use for work.

Try Bitdefender Ultimate Small Business Security free for 30 days. No credit card required.

You may also want to read:

• New Client Scam Targeting a Therapist: "He Wanted to Pay for 32 Sessions Upfront. Something Felt Off…"
• How Scammers Use Fake Checks and Why You Could Lose Money Even When It Feels Like You're Being Paid
• 7 Types of Credit Card Fraud & How Your Businesses Can Avoid Them

FAQs

How can I tell if a buyer is trying to scam my business?

Look for unusual payment or shipping requests, overpayments, pressure to act quickly, mismatched customer details, fake payment confirmations, and requests to send money to third parties. One unusual request doesn't necessarily mean fraud, but several warning signs together should prompt you to verify the transaction.

What should I do if a buyer sends too much money?

Don't immediately refund the difference. Verify the original transaction directly with your bank or payment provider first. If the payment appears suspicious, contact the provider for advice before sending any money.

Can a customer reverse a payment after receiving an order?

In some circumstances, yes. Customers can dispute card transactions through their bank, which may result in a chargeback. Keep invoices, communication, tracking information, delivery confirmation, and other records that can help you respond to a dispute.

How can a small business prevent chargeback fraud?

Keep detailed transaction and delivery records, clearly describe products and services, use tracked shipping, maintain clear refund policies, and respond promptly to chargeback notifications from your payment provider.

What should I do if a customer uses a stolen credit card?

Contact your payment processor as soon as you discover or suspect the fraud. If the order hasn't been shipped yet, don't fulfill it until the transaction has been investigated. Preserve the order information and communication with the buyer in case they're needed by your payment provider or authorities.