Skip to main content

    SiteKiln gives you plain-English information, not legal advice. If you need advice specific to your situation, talk to a qualified professional.

    Scams that target contractors (and how not to get caught)

    6 min read·Reviewed August 2026
    By Scott JonesFirst published Jul 9, 2026Updated Sep 5, 2026
    Scams & Digital Safety

    How this site is funded →

    The scams aimed at tradespeople almost all work the same way: they create urgency, they push you to move money fast, and they rely on you not stopping to verify. The single most expensive one is the fake "we changed our bank details" email that diverts a client's payment to a criminal. Slow down, verify by phone to a number you already had, and you defeat nearly all of them. Here are the ones that actually go around, and the one habit that stops each.‍‌‌​​‌‌‌​​​‌​​‌​​‌​​​​‌‌​‌‌​‌​​‌​‍

    The big-money one: payment diversion (BEC)

    A criminal gets into an email thread (yours, your client's, or a supplier's), waits, then sends a message saying the bank account has changed and to send the next payment to a new one. The money goes straight to them and is often gone for good. This "business email compromise" costs businesses more than any other online scam.

    Beat it: never act on changed payment details from an email or text alone. Call the other party on a number you already had (not one in the message) and confirm the change out loud. Tell your clients up front that your bank details will never change by email, so they call you too.

    The overpayment / fake check trick

    A "customer" sends a check for more than the job, then asks you to refund the difference or pay a "supplier" they nominate. Days later the check bounces, and the money you refunded was real and is gone.

    Beat it: never refund against a check until it has truly cleared (funds "available" is not "cleared"). Be very wary of anyone who overpays or wants you to route money to a third party.

    Fake materials deposits

    You find materials or a tool deal online, pay a deposit or the full amount by wire, Zelle, or gift card, and the "supplier" vanishes. Same story with too-good-to-be-true tool listings on marketplaces.

    Beat it: buy from known suppliers, use payment methods with buyer protection, and treat any demand for wire, Zelle, or gift cards as a red flag. (For buying and selling tools safely, see Tool theft and security.)

    Government and license impersonation

    A call or email claims to be the IRS, a licensing board, or a utility, threatens you with arrest, a lawsuit, or a shutoff, and demands immediate payment, often by gift card, wire, or crypto.

    Beat it: no real government agency or utility takes payment in gift cards, and the IRS does not open with a threatening phone call. Hang up, look up the real number yourself, and call to check. It is always a scam if they want gift cards.

    Lead-generation and "guaranteed work" traps

    You are pressured to pay upfront for exclusive leads, a "verified badge," or guaranteed jobs. The leads are recycled, fake, or worthless.

    Beat it: be skeptical of anyone charging upfront for guaranteed work. Build your own reputation and referrals instead (see Getting work), and check reviews of the platform before you pay a cent.

    Fake certificate and phishing requests

    Emails asking you to "update your insurance certificate," "verify your account," or click a login link are often phishing to steal your logins or plant malware.

    Beat it: do not click links in unexpected emails. Go to the site directly by typing the address, and never enter your password from an emailed link.

    The digital-safety basics that cover most of it

    • Turn on multi-factor authentication (MFA) on your email and bank. Your email is the master key to everything, so protect it hardest.
    • Use a password manager and unique passwords. One reused password breached elsewhere can open your accounts.
    • Verify money changes by voice, every time, to a known number.
    • Keep phones and laptops locked and updated, and back up your files.
    • Be wary of AI-cloned voices. A voice on the phone that sounds like a client or supplier urgently asking you to move money is not proof. Verify through a separate, known channel.

    If you get hit

    Move fast. Call your bank immediately to try to stop or recall the payment, then report it: the FTC at ReportFraud.ftc.gov, and online crime to the FBI at ic3.gov. If a check or account is involved, the sooner the bank knows, the better your odds.

    Common questions

    Does the IRS or a licensing board really call to demand immediate payment?

    No. The real IRS opens contact by mailed letter, never with a threatening phone call, and it will never demand a specific payment method like gift cards, wire, or crypto, or threaten to have police arrest you. A licensing board or utility does not take gift cards either. If a caller does any of that, it is a scam. Hang up, look up the agency's real number yourself, and call to check.

    Why do scammers always want gift cards, wire transfers, or crypto?

    Because those payments are fast and almost impossible to reverse. Once you read out a gift card code or send a wire, the money is usually gone for good, with none of the chargeback protection a credit card gives you. Treat any demand for gift cards, wire, Zelle, or crypto, especially with urgency, as a red flag by itself, whoever the person claims to be.

    Can a scammer fake a phone number or a voice I recognize?

    Yes. Caller ID can be spoofed to show a real government or company number, and AI can now clone a voice from a few seconds of audio, so a call that sounds like your client or supplier urgently asking you to move money is not proof of anything. Verify any money request through a separate channel you already trust, such as calling back a number you had before the request came in.

    Where do I report a scam if I've been targeted or lost money?

    Call your bank first to try to stop or recall any payment, then report it. Report fraud to the FTC at ReportFraud.ftc.gov, and internet-enabled crime to the FBI at ic3.gov, where the Recovery Asset Team can sometimes claw back a wire if you move fast. Your state attorney general's consumer protection office also takes reports.

    How can I tell a real supplier email from a spoofed one?

    Check the sending address character by character, since scammers use lookalikes like acmesupplies.co instead of acmesupplies.com, and be suspicious of any unexpected message that changes bank details or pushes urgency. Do not act on it from the email alone. Call the supplier on a number you already had, not one in the message, and confirm out loud before you send a cent.

    The honest bit

    • Scams evolve constantly, and new ones (especially AI-driven voice and video fakes) appear all the time. The defense does not change: slow down and verify independently.
    • Reporting routes here are federal and current for 2026. Your state attorney general may also take reports.
    • This is general guidance, not legal or financial advice. If you have lost money, talk to your bank and, for larger losses, an attorney.

    Know someone who needs this?

    Share on WhatsApp

    Templates you might need

    How this site is funded →

    Was this guide useful?

    Didn't find what you were looking for?

    Spotted something wrong or out of date? Email us at hello@kilnguides.co.uk.

    In crisis? 988 Suicide & Crisis Lifeline 988 ·

    How this site is funded →