The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
Reminder for those getting client inquiries: people asking you to run code on your system before they've given you any money is likely a scam. Get real contact info, get a face to the name, and do your best to vet the client before you start doing anything like installing packages.
@Contra HQ does a really phenomenal job of handling issues once you flag them, if they don't catch them by the time you open your messages. There's a handy 'Report' button. Best to use that and not even let the scammer know you're onto them.
Stay safe, fake clients are everywhere. The only obstacle to you making more money is losing it all to a scam.
I'd add one hard line: don't run a stranger's code on the same machine that holds client work. If it needs inspection, use a clean test machine and walk away if they push back.
Thanks for the heads up on this! I would not run anything without a signed contract and knowing who they are
Good call on the Report button over calling them out directly, I hadn't thought about tipping off the scammer that way. Did something specific happen recently that made you write this up, or is it more a pattern you keep seeing in inquiries?
It is not a common scam but I did have someone do that exact thing yesterday. Down to fake commit history and a script in the repo leftover to generate commit history
“Yeah, I’ve been noticing it quite a bit lately. By the way, what kind of work are you currently focused on? I’m also working in AI and digital solutions, so I’m always interested in seeing what others are building
Agreed bro!! 🚀
thanks for sharing your advice, Andrés! stay safe out there <3 we do our best to prevent any spam from getting through, but sometimes they make it through our safeguards so reporting any suspicious convo is a huge help.
we have this article about how to detect and report potential scams as well!
help.contra.com
How to detect and report potential scams | Contra Help Center
Reporting scams on Contra
Like I said, y'all are killer. I often see something that looks like spam and by the time I go to open Contra it's already handled. Those safeguards are super helpful
🙌
facts, this one goes around way too often
Getting a face to the name is such practical advice, but it's easy to skip when you're excited about a lead. What's your go-to way of verifying someone's real identity before you commit any time, video call, LinkedIn cross-check, something else?
Day 12 here, still no inquiries...
this is really helpful
Thank you for the heads up.
you should not write code for them, or not accept code from them?
Thanks for the warning. I will watch out
One check that has saved me time: look up the client's company domain yourself and see if the person's name shows up on that site, on a team page or in the footer. If the email is a free address and the company site doesn't mention them, I ask for a short video call before anything else. Nobody legit minds a 10 minute call.
The fake commit history detail you mentioned in the replies is a scary touch, since it makes a repo look legit at a glance. Do you now ask for a quick video call before even opening a client's repo, or is that too much friction for small gigs?
This one nearly caught me earlier this year. A prospect pushed me to install their packages before any contract existed, and the vetting step you describe is exactly what made me walk away. I now insist on a video call with a face to the name before I touch anything a stranger sends me.
The fake commit history is the detail that should scare people. A polished repo is not proof of anything anymore. My rule now: no contract and no video call, no clone — and if I do need to look, it is in a sandbox, never on the machine with client work and keys. Building agentic...
+1. A good rule is that any "test task" should run in a sandbox or VM, never your main machine, and never anything that wants your env vars or wallet. Real clients don't mind that.
Important reminder, Andrés. A potential client asking you to run unknown code or install software before establishing trust is a serious red flag.
Verifying who you're dealing with and keeping access boundaries clear should be standard practice for freelancers. Good to see this being highlighted. 👏
Thank you for posting this, Andrés. As a developer, the “run this code or install this package” request is the one I’d be most careful with. Have you noticed other red flags that tend to show up before that point, like vague briefs or pushing to move off Contra?
yes, well said. i experienced same incident too. Really appreciate it
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
300 followers on Contra! 🎉
Thank you to everyone who follows my journey and supports my work. Your support means a lot! 🙌
Looking forward to connecting with more creatives, collaborating on exciting projects, and continuing to grow together.
#freelancerlife #Contra #independent #webdesign #uidesign
A little reminder that freelancers are humans, too. ❤️
This freelancer is moving apartments next week, and not all stress comes from work.
After a year of amazing clients, projects, and even winning Contra hackathons that helped make this new chapter possible, it feels like a lot is changing at once. I'm scared, but happy.
And right after the move, I’m off to Europe to visit Christmas markets, something I’ve dreamed about for years. 🎄
So I probably won’t be as available as usual for a little while, and I’m learning to be okay with that.
Sometimes growth looks like new projects. Sometimes it looks like a new home, a long-awaited trip, and making room for life outside your laptop.
Here’s to new beginnings. ✨
totally agree! I’m learning to adapt to the quieter periods between projects and enjoy the extra free time. Wish you a nice trip!
One of my posts went SUPER VIRALLLL. 🚀
80K+ views. 300+ likes. 50+ UpGoats. Hundreds of conversations.
All from one line I wrote straight from the heart.
"The miracles you're looking for are in the work you're avoiding."
I wrote it because that's genuinely how I felt. No strategy. No expectations. Just something I believed in.
I never imagined it would resonate with so many people, let alone become one of the most talked-about lines on my profile.
And now, looking at these numbers, the line hits differently. Sometimes, the sign you're waiting for is the work you've been putting off. Maybe the miracle really is on the other side of doing it. 🖤
Congratulations, Anky! It’s encouraging to see your hard work paying off. I just joined Contra and I’m still figuring things out, so seeing posts like this gives me a little extra motivation. Hopefully, I’ll have my own milestone to share here someday!