(800) 689-1273
Facebook Twitter Youtube Linkedin
Prospect Genius logo

Prospect Genius

Menu
Log In
You are here: Home / Archives for scams

ScamWatch: AI-Powered Fake Leads: The Next Big Scam?

Last Updated: March 3, 2025

Leer en Español

We’ve all seen AI technology evolve at an insane pace, sometimes for the better, sometimes… not so much. AI customer service bots, Google’s AI making restaurant reservation calls, and even deepfakes, have become normal. But what’s the next scam we should be watching out for?

Here’s a prediction: AI-generated fake leads.

The Rise of Fake AI Leads

Right now, plenty of lead generation companies sell small businesses “qualified leads.” Some are legit, some… not so much. But what if scammers took this to the next level?

Imagine a HomeAdvisor- or Thumbtack-style business that promises to connect you with paying customers, but those “customers” don’t actually exist. Instead, AI-generated voices call you, ask the right questions, and sound just human enough to make you think it’s a real lead. You talk to the “lead” for a few minutes and it either fizzles out, you’re given a brush off like “I have to talk to my husband about it,” or even worse, you book a completely bogus appointment. You are then charged for this lead, regardless of the outcome.

And here’s the real kicker: Even legitimate lead-gen companies could be tempted to do this. If just 1 in 10 leads were AI-generated fakes, they increase revenue by 10% and it’s almost entirely profit! After all, they don’t get paid when you land a customer, they get paid when you buy a lead. See the problem?

At Prospect Genius, we’ve always avoided business models where our success isn’t directly tied to our clients’ success. We believe in (and harp on) aligned goals. And this is why it’s so important for small businesses to stay ahead of potential scams.

How to Protect Yourself

Since this isn’t a scam that’s happening yet (that we know of), the best thing you can do is prepare. Here’s some suggestions:

1. Track Everything

If you’re buying leads, you need to know which ones are actually turning into paying customers, not just which ones feel productive. A campaign might seem busy, but if it’s not bringing in real revenue, it’s not working.

Here’s how to track your leads effectively:

  • Use a metered phone number like our CallTrax to track and record inbound calls from each campaign.
  • Implement PhoneSwap to automatically swap phone numbers on your website, so you can segment data based on where leads are coming from.
  • Review your call recordings—if something seems off, you’ll have proof.

A major bonus of using CallTrax? Spaminator technology. It blocks known spam numbers, saving you time and keeping bogus calls from clogging up your pipeline.

Why Tracking Matters More Than Ever

Now is the time to establish your baseline numbers, before AI scams start creeping in. If you suddenly notice a 10–20% shift in your metrics, that’s a red flag. Being proactive now will make it easier to spot suspicious activity later.

For lead-gen campaigns, make sure you’re tracking:

  • Average leads received (per day, week, or month)
  • Close rate (percentage of leads that turn into paying jobs)
  • Average revenue per completed job
  • Overall cost per lead
  • Total cost per closed job (this one’s key!)

Most businesses focus too much on cost per lead, but what really matters is cost per completed job. It’s not just the price of the lead, it’s the total amount spent on all leads, plus the cost to fulfill the jobs you booked, divided by the number of closed jobs.

For example:
A $20 lead might actually cost $100 per completed job once you factor in the big picture. That changes the way you evaluate lead-gen campaigns, and it’s exactly why tracking every step of the process is so important.

2. Trust Your Gut

AI voices are getting better, but they’re still not perfect. If something feels “off” about a call—maybe they respond too quickly, avoid answering direct questions, or use strange phrasing, take a closer look.

If a company can’t provide real proof that their leads are legitimate, walk away.

The Bottom Line

AI is changing the game for businesses, but it’s also creating new ways for scammers to take advantage of hard-working people. Fake AI leads might not be everywhere yet, but it’s only a matter of time.

Stay smart, stay skeptical, and most importantly—stay in control of your marketing.

ScamWatch: Scammers Threatening to De-List GBP Unless They Get a Ransom

Last Updated: January 15, 2025

Leer en Español 

Remember the old “I will sell you one of the top 3 positions in Google” con? It lingered, for years, in one form or another but now it’s evil cousin is back. The new version of this old scam is now about removal of your listing, rather than placing it at the top. What’s terrible about this is that it leverages the much more powerful fear-of-loss frame work rather than the weaker want-of-gain. And that’s why people are falling for it.

One of our clients, a tax resolution specialist, recently became the target of this scam. They were threatening him with removal of his Google Business Profile (GBP) from Google Maps unless he paid them.

How the Scam Works

Here’s how these scammers operate:

  1. They contact business owners, often through phone calls or emails, with urgent and threatening messages.
  2. They claim they have control over your Google Business Profile and that they’ll delete it or make it invisible unless you pay them a fee.
  3. Some even offer “services” to boost your GBP ranking for a price—an offer that sounds enticing, but is pure fiction.

The goal? To scare you into forking over your hard-earned cash.

Why This Has An Air Of Truth

Most people know that it’s Google who controls the presence (or lack thereof) of the GBPs in both Google Maps and their search results. Many people also realize that it’s possible to community-edit content on there. In fact, there’s still quite a bit of bad behavior related to this, especially between competitors. The ability to affect a change to someone else’s listing is exactly why this scam sounds like it could be believable.

How to Protect Yourself

Stay ahead of the scammers by following these tips:

  1. Verify Claims: If someone contacts you about your Google Business Profile, do not take their word for it. Log into your GBP account to check its status.
  2. Trust Only Known Companies: You should either reach out to Google directly, or to your trusted marketing partner (if you have one). Don’t even trust someone claiming to be Google if THEY initiated the call to you. That is another common scam tactic.
  3. Stay Calm: Scammers thrive on urgency. Take a breath and evaluate the situation before responding to any threats or demands.

The Bottom Line

Scammers are always finding new ways to exploit small business owners, but with a little knowledge and vigilance, you can stay one step ahead. Remember: if it sounds too good to be true, or if someone is pressuring you with threats, it’s likely a scam. When it comes to your Google Business Profile, trust only Google—no one else has the keys to that kingdom.

Stay safe, stay informed, and as always, keep an eye on ScamWatch for updates!

Domain Renewal Letters Sent By Snail Mail Are Scams

Last Updated: October 2, 2024

Leer en español

In this edition of our ScamWatch series, we’re highlighting a specific type of scam that’s has been around for years, but just won’t go away—fake domain registration renewal letters sent by good old-fashioned snail mail.

What Are Fake Domain Registration Renewal Letters?

Picture this: You’re sorting through your mail, and you find a letter that looks official. It says your domain is about to expire, urging you to renew immediately. The letter looks professional and uses scary language like “final notice” or “urgent action required.” But here’s the catch—it’s a scam.

(Click an image to expand it)

Fake domain renewal notice letter

These fake domain registration renewal letters are designed to trick you into thinking your website will go offline unless you take immediate action. The scammers hope to get you to pay for a bogus renewal service or to charge you way more than what your actual domain registrar would ask.

The critical thing to remember is this: if it arrives by mail, it’s almost certainly a scam. Unlike emails, which can sometimes be legit (though they require careful scrutiny), you can safely assume that 100% of domain-related letters sent via snail mail are fraudulent. Just throw them out.

Why Do Scammers Send These Letters?

While many scams these days target your inbox, domain renewal scams have a retro twist—they often arrive by postal mail. Scammers choose this method because it feels more official and less likely to be questioned. After all, most people are cautious about clicking on email links but may be less skeptical of a physical letter that looks official.

These fraudsters use public domain registration data, pulling your contact information from databases like WHOIS (whois.com). Then they mail you a letter, hoping the official-looking document convinces you to part with your money.

How to Spot and Avoid Fake Domain Letters

It’s easy to avoid falling victim to these scams once you know what to look for. Here’s a quick checklist to help you stay safe:

  1. They’re always demanding way too much money. Domain registration should cost you between about $10 and about $20 per year. These scams are typically looking for several hundred dollars.
  2. If it’s by mail, it’s a scam: As we mentioned, no legitimate domain registrar sends renewal notices via postal mail. All genuine renewal notifications come through email or your registrar’s online portal.
  3. Verify through your registrar’s website: If you’re ever in doubt about the status of your domain, log into your account with your official registrar directly. Don’t trust any information that comes from a letter in the mail. Popular registrars include Porkbun, Godaddy, Ionos, Namecheap, Bluehost, and DreamHost. (We have no affiliation with any of these, they’re just popular providers. If you need a recommendation, please reach out to us and we’ll give you our thoughts on them.)
  4. Keep track of your domain expiration date: One of the best ways to avoid these scams is to stay on top of your renewal schedule. Make a note of when your domain actually expires and set reminders to renew it through your registrar. (Pro tip: Include the name of your registrar in the reminder because MANY people forget who they registered the domain with)
  5. Enable domain privacy protection: Protect yourself by enabling privacy protection when you register your domain. This keeps your contact details out of public databases, making it a bit harder for scammers to target you.

Related Scams We’ve Covered

Fake domain renewal letters aren’t the only scam targeting business owners. In fact, we’ve written about domain listing scams in the past, which work in much the same way. These scams also arrive with official-sounding language, urging you to pay for a “listing service” that your domain doesn’t need. Reading through that older, but highly-related post is a smart way to keep yourself protected.

Final Thoughts: Toss That Letter!

As part of our ScamWatch series, our goal is to help small business owners like you stay ahead of scams and keep your operations running smoothly. When it comes to domain renewal letters that show up in your physical mailbox, you can be confident they’re not legit. Throw them away immediately and stick to managing your domain renewals through trusted, verified channels.

By staying alert and informed, you can avoid falling for these tricks and ensure your business stays protected. If you ever have questions or come across something suspicious, feel free to reach out or revisit our articles for guidance.

This Scary Email Scam Is Tricking Tons of Website Owners

Last Updated: February 15, 2024

Have you recently received an email stating that your website is “violating copyrighted images”?

This is a fabricated message that’s circulating like wildfire right now. It’s meant to scare website owners into clicking a link, which would then install trojan ransomware onto your computer.

Please, if you receive this email, delete it immediately. Do not click on the link.

Thanks to the email logs in our client portal, we were able to view multiple versions of this message in our clients’ inboxes. Take a look at the handful of versions that were spun, with different senders and slight variations in wording:

Version #1: From “Allison”

"Hi! My name is Allison. Your website or a website that your organization hosts is violating the copyright protected images owned by myself. Check out this doc with the URLs to my images you utilized..."

 

Version #2: From “Megan”

"Hi there! My name is Megan. Your website or a website that your company hosts is violating the copyrighted images owned by me personally. Check out this report with the hyperlinks to my images you utilized..."

 

Version #3: From “Kayla”

"Hi there! My name is Kayla. Your website or a website that your organization hosts is infringing on a copyright protected images owned by me personally. Check out this official document with the URLs to my images you utilized..."

 

Version #4: From “Monica”

"Hi there! My name is Monica. Your website or a website that your company hosts is violating the copyright protected images owned by myself. Take a look at this report with the hyperlinks to my images you used..."

 

As you can see, the nearly identical messages come from “Allison,” “Megan,” “Kayla,” and “Monica”—and probably many more. Written with intimidating legalese, they have the potential to scare lots of regular folks into taking the bait. After all, average email users and small business owners may not know how to recognize malware and internet scams right off the bat.

Fortunately, a number of our clients called us immediately upon receiving these emails, so we were able to advise them against clicking on the link and reassure them that their websites do not infringe on any copyright laws.

If you want to find out more about this malware scam, check out the impressive digging done by Josh Kirschner over at Techlicious.

How to Respond When Your Domain Is Held Hostage

Last Updated: February 15, 2024

From time to time, our team is reminded of a very depressing truth: Many SEO providers out there do scummy things.

The latest reminder? Just the other day, we were talking to a small business owner, and he told us how skeptical he was of the SEO industry. At first, we couldn’t understand why he was so mistrusting of us. But after some prodding, he revealed where his trust issues came from…

As it turns out, his last SEO provider registered his domain for him, and then held it hostage when he tried to quit. Since his whole online presence had been tied to that URL, his traffic and calls plummeted.

And the worst part? This didn’t even surprise us. We’ve heard versions of this same story dozens of times before.

In fact, we’ve even seen some SEO companies demand thousands of dollars in payment (a.k.a. ransom) before they give the domain back!

But instead of getting down about the slimy state of SEO, we’ve decided to turn our angst into action. In this blog post, we’re going to help you fight back against these bad guys by giving you advice on how to proceed when they hold your domain (and/or associated phone number) hostage.

What you’re about to find out will save you a ton of headaches and money going forward. Keep reading!

When You Can’t Get Your Domain Back

Unfortunately, as we mentioned, this scenario is not uncommon. But the good news is, you’re not powerless. There’s a solution. We’ve helped countless business owners in the same jam reclaim domains that were rightfully theirs to begin with.

The process involves working closely with GoDaddy (or whatever registrar you originally used) to prove you are, in fact, the business owner and that the domain is yours. This process is more successful when your business name is in the URL that was used in your SEO campaign, but it’s not a requirement.

In the past, we’ve helped business owners work with their registrar and obtain sufficient evidence that the domain belongs to them. The steps involved in obtaining access to your domain vary from business to business and will depend on the extent of your current online footprint.

However, in rare instances where there isn’t enough concrete proof that you own your website, you might have to rebuild your web presence from scratch. This means getting a whole new domain, wiping the slate clean on your web presence, and starting your SEO from scratch. This is not ideal, but it does sometimes happen.

Keep in mind, though, that starting over with a clean slate and a consistent URL is far more effective than clinging to a patchwork web presence with conflicting details.

Need help building your case? The specialists at Prospect Genius are happy to listen to your story and advise you on the next best steps. Give us a call!

When They Keep Your Phone Number From You

Along a similar vein, unscrupulous vendors and SEO providers have tarnished our industry’s reputation by withholding metered phone lines from former clients. It’s the same as what they’re doing with domains: They set up a metered phone line for your campaign, and once you quit, they refuse to give you access to that line.

This issue is critical because your metered phone number (alongside your URL) was probably the primary contact detail in all of your online advertising. By not giving you access to it, they’re essentially tying your hands behind your back.

Thankfully, the law is on your side here. FCC regulations forbid this practice. In fact, the FCC stipulates that if a phone number ever rings to your phone, it’s yours. So if you have a metered line out there that was ringing to your business at one point in time, then your old vendor or advertiser cannot withhold it from you without violating federal law. They are legally required to port your number when you request it.

Again, if you’re having difficulty communicating with them or convincing them they’re in the wrong, let us know. We can point you towards some information and resources that may help.

Simple Ways to Protect Yourself

Before we wrap things up, let’s make one thing very clear: It’s not your fault that a sleazy SEO company took advantage of your trust and acted spitefully against your interests.

Furthermore, it’s a natural response to mistrust other advertising teams after this kind of experience. We know how you feel. Nonetheless, SEO campaigns and metered phone lines remain critical marketing tools. If you want to bring in new customers and keep track of incoming leads, then you can’t avoid using them.

So, instead of forgoing online marketing altogether out of fear, you can take a few simple measures to protect yourself the next time around:

  • Ask your prospective marketer what their standard cancellation procedures are.
    • If you own the website content and domain, how will they return these assets to you upon cancellation?
    • If you purchase a metered phone line, how will they port the number back to your phone?
  • Make sure you have a contract with your marketer that clearly states you have ownership of all website assets (domain, images, content, etc.) upon final payment.
  • Ask your marketer which company will be hosting your website and get that company’s contact information.
  • Ideally, you should buy your own domain in your name so it’s 100% yours from the beginning. (GoDaddy is a popular domain registrar for this purpose.)
    • Note: Some SEO companies prefer to register your domain under their own account so they can monitor your website and receive alerts. This is usually done as a service that you purchase so you don’t have to monitor everything yourself. In this situation, being 100% clear about cancellation procedures (including how you can transfer domain ownership) and having a signed contract are crucial.

Prospect Genius Is Here to Help

Of course, even your best efforts sometimes aren’t enough to protect you from a particularly nasty or vindictive agency. If you find yourself stuck dealing with such an agency, call Prospect Genius for help right away. We’ve been working in this field for more than a decade, and we’re very familiar with the laws around these topics.

Keeping our industry honest is something we’re passionate about. We’ll be more than happy to help you protect your rights however we can.

And, hey—if you want to work with a company that won’t hold your web presence hostage, you know where to find us.

Sign up for our newsletter!

Join our mailing list and receive regular updates on how to effectively market your small business, along with exclusive service promotions.
Please enable JavaScript in your browser to complete this form.