If a client sends you more than the agreed deposit and asks you to wire the difference back, stop. Do not refund anything. That money is not yours yet, and the request to return part of it is the entire scam.
Here's the mechanic. The client 'accidentally' overpays — a $2,000 deposit becomes a $5,200 payment. They're apologetic, maybe embarrassed, and they ask you to send back the $3,200 difference. You refund it from cleared funds in your account. A week later the original $5,200 payment reverses — the check bounces, the ACH is recalled, the card charge is disputed as fraud. You're out the $3,200 you wired, and the deposit you thought you had is gone too.
Why the overpayment is the tell
No legitimate client overpays a contractor by thousands and needs it back the same week. Businesses don't wire money by accident in round-ish figures and then get anxious about the return. The overpayment isn't a mistake — it's the setup. The urgency to refund before the deposit clears is the payload.
The scam works because of a timing gap most contractors don't think about: the money shows up in your balance as 'available' long before it's actually irreversible. A wire can look settled and still be recalled. An ACH deposit posts in a day but can be clawed back for weeks. A card payment is disputable for months. When you refund from that not-yet-final money, you're advancing your own cash against a payment that's designed to vanish.
The refund always has to clear faster than the original payment. That asymmetry is the whole business model of the scam.— Payments fraud investigator
Shut it down with structure, not vigilance
You can try to catch every one of these by feel, but the tell isn't always this obvious, and you're busy running jobs. The durable fix is a payment structure where overpayment refunds are impossible by design.
When deposits and milestones run through an escrow-style system, the client funds a specific, agreed amount — not a number they choose. There's no loose overpayment sitting in your operating account waiting to be 'returned.' Funds are held and only release to you when the milestone is met. If a client somehow puts in more than the agreed figure, the correction happens inside the platform against held funds, never as a same-week wire out of your own pocket.
That one change removes the mechanism entirely. There's no cleared-vs-uncleared gap for you to guess about, because you're never advancing your own money to cover someone else's payment. The 'accidental overpayment' has nothing to grab onto.
The rule to run
Refunds only go back through the same channel the money came in, and only after that original payment is fully, irreversibly settled — never before. If a client resists that, or insists the difference go out to a different account or as a wire, the deal is the scam and you walk.
Better still, don't hold refundable overpayments at all. If your deposit and milestone payments are structured so the client can only fund the exact agreed amount, held until work is verified, the overpayment scam never gets off the ground — and neither do the slower, quieter versions of clients clawing back money after you've already delivered.