A New Scam Targeting Web3 Contractors: Fake Overpayment via Edited USDT “Proof”

I want to share a fresh case from the “scammer posing as a client” category—this time with a heavy dose of social engineering and transaction forgery.

The setup: a perfect, proactive “client”

The script was familiar and, honestly, designed to lower your guard:

• They talk for a long time and in detail about the project.
• They ask you to estimate timelines and budget.
• They’re ready to start immediately—same day.
• They offer a 50% prepayment up front.

We created a working chat. Then the “client” supposedly sent the payment and dropped a screenshot as proof.

The “payment” screenshot vs. reality

In the screenshot, the amount was 3,643 USDT. But our agreed prepayment was 2,000 USDT.

I opened my wallet expecting to see either 2,000 or 3,643.

Instead, I received… $3.64.

The screenshot was simply photoshopped.

How the scheme works: the fake overpayment scam

This is a classic fake overpayment play, adapted for crypto. The scammer hopes you’ll believe the screenshot, assume they “accidentally” overpaid, and then refund the difference—from your real funds.

In other words, the whole “project” is just a pretext. The goal isn’t to hire you. The goal is to get you to send money back that they never sent in the first place.

Why it’s dangerous

• Time gets wasted on a fake deal.
• The project is not real.
• All activity is aimed at triggering a refund of the “extra” amount.

These scams hit hardest when you already have crypto in your wallet and you’re moving fast—because one moment of inattention can turn a fake screenshot into a real outgoing transaction.

My rules to avoid getting burned

• Verify on-chain. Always confirm the transaction on the blockchain (or via your wallet’s actual balance/history), not via screenshots.
• Never refund “overpayments” you didn’t receive. If the funds aren’t there on-chain, there’s nothing to return.

If you work in Web3—development, consulting, product, or operations—treat “proof of payment” images as untrusted input. The blockchain is the source of truth.