Reminder for those getting client inquiries: people asking you to run code on your system before ...Reminder for those getting client inquiries: people asking you to run code on your system before ...
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Reminder for those getting client inquiries: people asking you to run code on your system before they've given you any money is likely a scam. Get real contact info, get a face to the name, and do your best to vet the client before you start doing anything like installing packages.
@Contra HQ does a really phenomenal job of handling issues once you flag them, if they don't catch them by the time you open your messages. There's a handy 'Report' button. Best to use that and not even let the scammer know you're onto them. Stay safe, fake clients are everywhere. The only obstacle to you making more money is losing it all to a scam.
Nagaraj's avatar
Snapzoom logo
yes, well said. i experienced same incident too. thanks for sharing.
Eric's avatar
I'd add one hard line: don't run a stranger's code on the same machine that holds client work. If it needs inspection, use a clean test machine and walk away if they push back.
Scott DS's avatar
Thanks for the heads up on this! I would not run anything without a signed contract and knowing who they are
Diego's avatar
Good call on the Report button over calling them out directly, I hadn't thought about tipping off the scammer that way. Did something specific happen recently that made you write this up, or is it more a pattern you keep seeing in inquiries?
Andrés's avatar
Red Mage logo
It is not a common scam but I did have someone do that exact thing yesterday. Down to fake commit history and a script in the repo leftover to generate commit history
Tan's avatar
Agreed bro!! 🚀
Madi's avatar
thanks for sharing your advice, Andrés! stay safe out there <3 we do our best to prevent any spam from getting through, but sometimes they make it through our safeguards so reporting any suspicious convo is a huge help.
we have this article about how to detect and report potential scams as well!

help.contra.com

How to detect and report potential scams | Contra Help Center

Reporting scams on Contra

Andrés's avatar
Red Mage logo
Like I said, y'all are killer. I often see something that looks like spam and by the time I go to open Contra it's already handled. Those safeguards are super helpful
Nazar's avatar
Yasno Design Agency logo
facts, this one goes around way too often
Maty's avatar
Getting a face to the name is such practical advice, but it's easy to skip when you're excited about a lead. What's your go-to way of verifying someone's real identity before you commit any time, video call, LinkedIn cross-check, something else?
Jetmir's avatar
Day 12 here, still no inquiries...
Olamide's avatar
this is really helpful
Asif's avatar
The fabricated commit history is the tell most people miss, since a real repo has messy issues, PRs, and several contributors over time while a scam repo is one author spraying commits in a single day. I check the contributors graph and issue tab before running anything, and if...
Amanda's avatar
Thank you; I'm just starting out on this platform.
Olorunfemi's avatar
Thank you for the heads up.
prreeya's avatar
you should not write code for them, or not accept code from them?
Back to feed
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started