Small businesses are trusting by nature. That trust is also their greatest vulnerability. This article is written for every business owner who has ever extended goodwill to a client in need — and ended up paying for it. It is a practical guide to recognising the signs of client fraud before it happens, the specific payment scams being used against small businesses right now, and a real documented account of how SpouseBusters encountered a sophisticated client named Jacqueline Ruth Casten — and what the experience taught us about protecting a service business from people who will consume your resources without paying for them.
The Vulnerability Nobody Talks About
Most business owners think about fraud in the abstract — a stranger, a scammer, someone obviously dishonest. The reality is far more uncomfortable. The most effective client fraud is committed by people who are warm, credible, and present a genuine emergency that triggers your instinct to help.
In the private investigation industry, we deal with people at their most vulnerable moments every single day. A person whose partner is cheating. A parent worried about their child. A business owner being defrauded. And sometimes — a person whose ex-partner has stolen their belongings and disappeared, owing them significant money. These are real situations with real emotional weight. And occasionally, the person sitting across from you telling that story is also planning not to pay.
That does not make them a monster. In some cases it makes them desperate. But desperation does not cover your costs, pay your staff, or compensate for the resources you deployed on their behalf. Understanding how this happens is not cynicism. It is professionalism.
The Payment Scams Being Used Right Now
Before we get to the warning signs of a fraudulent client, every business owner needs to understand the specific payment methods being exploited by people who intend not to pay. These are not theoretical — they are active scams being used against small businesses across Australia.
⚠️ PayPal — Avoid for Service Businesses
PayPal’s buyer protection system works against service providers. Once a job is complete, a client can raise a dispute with PayPal claiming the service was not delivered or not as described. PayPal almost always sides with the buyer. The burden falls on you to prove the service was delivered, and even with evidence, you will frequently lose. The time and energy spent fighting the claim is itself a cost. For service businesses, avoid PayPal entirely as a payment method.
⚠️ Credit Card Without Proper Authorisation
Only accept credit card payments where the client completes the transaction themselves using their phone authentication code — confirming they are the rightful cardholder. Never manually key in card details provided over the phone or by message. The scam works like this: the client provides card details, you process the payment, the job is done — then weeks later they contact their bank claiming they did not authorise the transaction and someone else used their card. No matter what evidence you supply, the bank will almost always side with the cardholder on an “unauthorised transaction” claim. If you processed the card yourself without their direct confirmation, you will lose the chargeback and lose the money.
⚠️ Sending a Receipt Before the Funds Actually Clear
A client sends you a screenshot or PDF of a bank transfer receipt. It looks legitimate. You trust it and proceed with the work. The scam is that immediately after sending the receipt, they contact their bank and reverse the payment — or the receipt was manipulated in the first place. By the time you discover the funds never arrived, the job is done and they have the results. The rule is simple: wait for the funds to appear in your account before commencing any work. A receipt is not payment. Cleared funds in your account is payment.
⚠️ Wrong Account or BSB Number on the Receipt
A variation of the above. The client sends a receipt but there is a subtle error in the account number or BSB — a digit transposed, a number slightly wrong. If you do not spot it and verify it matches your actual details, the payment goes nowhere and you do the job unpaid. Always verify that every digit of the account number and BSB on any receipt matches your actual banking details exactly before proceeding. Do not assume. Check every time.
The Warning Signs of a Fraudulent Client
1. The Sympathetic Emergency
The most effective setup for client fraud is a story that is almost certainly true. A real grievance. A real emergency. A real injustice being done to them. The details are specific, the emotion is genuine, and everything they tell you checks out. You find yourself on their side before the first invoice is raised.
This is not necessarily deception — many clients with genuine emergencies also have genuine payment problems. The issue is that once you are emotionally invested in someone’s situation, your financial judgement loosens. You push ahead when you should pause. You extend trust when you should extend an invoice.
Warning: The more sympathetic the client’s situation, the more rigorous your payment controls should be — not less. Sympathy and credit are two different things.
2. The Immediate Urgency That Bypasses Normal Process
A client who presents with an emergency requiring immediate action is also a client who bypasses your normal onboarding process. There is no time to complete paperwork, get signatures, confirm payment methods, or follow protocol. Everything needs to happen right now.
This urgency — whether genuine or manufactured — creates the conditions under which normal financial controls get skipped. Authorisation forms don’t get signed. Payment thresholds don’t get enforced. A newer staff member handling the intake doesn’t know to pause at a certain cost level. By the time anyone looks up from the work, significant resources have been deployed without proper financial safeguards in place.
Warning: Urgency is not a reason to skip process — it is a reason to be more disciplined about it. A genuine emergency client will understand a five minute pause to confirm payment. A client who resists that pause is worth pausing over.
3. Payment From Multiple Accounts
A client who pays from multiple different accounts — a credit card here, a bank transfer there, a different account for the next instalment — is either genuinely disorganised or deliberately creating confusion. Multiple payment sources mean multiple clearing timescales and a paper trail that is difficult to reconcile in real time when you are focused on delivering work.
Warning: Establish one payment method per client at the outset and require all funds to clear from that single source before proceeding.
4. Weekend Payment Timing
Bank transfers initiated on Friday afternoons or over weekends do not clear until Monday at the earliest — and sometimes Tuesday. A client who consistently initiates payments late on Friday or over the weekend may be doing so deliberately to buy time. By the time you discover the funds have not arrived, the work is already done.
- Never commence work based on a payment initiated on a Friday after 3pm
- Never commence weekend work unless funds have already cleared — not just been sent
- Screenshot your bank balance before commencing every job stage
- Cleared funds in your account only — not pending transfers, not receipts
5. The Ongoing Job With Escalating Costs
Standard jobs have a predictable scope. When a job begins expanding — more days required, travel beyond the original area, additional resources — the costs escalate quickly. A client who was able to fund the initial scope may not be able to fund the expanded scope, but may not tell you this because they still want the result.
Best practice: For any job that extends beyond its original scope, pause before continuing. Require cleared payment for the additional scope before proceeding and confirm authorisation in writing via SMS or email. Set a hard internal threshold — for example, no work continues once outstanding amounts exceed $2,000 without cleared funds — and ensure every staff member knows and follows this rule without exception.
6. The Evolving Excuse Pattern
A client whose explanations for non-payment keep changing — and never resolve into actual payment — is not experiencing bad luck. They are managing you. The excuses follow a recognisable pattern: the payment was sent but delayed by the bank, then the superannuation funds are coming, then a loan is being arranged, then a car is being sold, then a trust fund will cover it. Each story is plausible in isolation. Together they form a pattern of deliberate delay.
- Payment delayed due to bank processing — for the third time
- Waiting on superannuation funds to clear
- Selling assets to cover the payment
- Trust fund or financial planner will arrange payment
- Confirmed payment by phone but no funds ever arrive
- Stops responding, then resurfaces with a new excuse
- Claims to have been in hospital, lost their phone, or had a family emergency
Warning: An excuse that evolves rather than resolves is not a delay — it is evasion. Issue a formal letter of demand and commence legal proceedings before more time and resources are lost.
7. The Completed Job Withdrawal
A client who has received the result they wanted has fundamentally less motivation to pay any remaining balance. Once the work is delivered, the power dynamic shifts entirely. The only protection is ensuring payment is current before each deliverable is provided. Never deliver final results until all outstanding funds have cleared.
A Practical Payment Protection Framework
Based on hard experience, here is the framework SpouseBusters now applies to every engagement:
- Require a deposit of at least 50% of estimated costs before any work commences — cleared funds only
- For multi-day or multi-stage jobs, require payment at the start of each day or stage before work proceeds
- Accept payment from one nominated account or card only — no exceptions
- Never commence work based on a receipt — wait for funds to appear in your account
- Verify every digit of the account number and BSB on any receipt before proceeding
- Only accept credit card payments where the client completes the transaction themselves with phone authentication — never process card details manually
- Never accept PayPal for completed service work
- Set a hard internal threshold — no outstanding amount to exceed $2,000 without cleared funds before work continues
- For jobs expanding beyond original scope — pause, requote, require cleared payment before continuing
- Confirm all instructions and authorisations in writing via SMS or email — never verbal only
- Verify that onboarding forms and contracts have actually been received — follow up if no response comes back
- Never deliver final results until all funds are cleared and confirmed in your account
- If excuses begin — issue a formal letter of demand immediately rather than waiting
Real Case Study — NSW, 2020–2021
The Jacqueline Ruth Casten Matter
In July 2020, SpouseBusters was engaged by a client named Jacqueline Ruth Casten. The engagement began with a sympathetic and entirely plausible scenario — her ex-partner had taken her belongings and money, had moved out and was relocating, and she needed to find him before she lost everything. She had previously been a paying client on smaller jobs, which established credibility. The story was believable, her distress appeared genuine, and she presented as a trustworthy older woman with a real injustice being done to her.
How It Unfolded
On 23 July 2020, as surveillance was beginning, Casten informed us she had no remaining funds but would be paid the following Tuesday and promised to cover all costs from that payment. We trusted her based on her prior payment history.
When the subject was not located on the first day, Casten insisted surveillance resume. She was kept informed constantly via phone calls — the nature of the job required it, as the subject was highly mobile. At one point when the subject drove from Sydney to Oberon, Casten used our live information to physically travel to Oberon herself, where she was guided to the location in person by our investigator. That investigator is willing to provide an affidavit confirming this. She was not a passive client unaware of what was happening — she was an active participant directing the investigation in real time.
Throughout the job she was informed of invoice amounts, escalating travel costs, and extended hours. She approved surveillance continuing past the Blue Mountains to Bathurst and beyond. She received estimate invoices during the surveillance period via email addresses she had previously replied to.
The full timeline of her payment excuses after the work was completed:
- 28 JulySaid she did not get paid as expected — would be paid Thursday
- ThursdayHad medical bills and rent to pay — selling cars over the weekend and would pay in full once sold
- Car soldEx-partner claimed the car was his — could not give us the proceeds
- NextHas a trust fund of approximately $320,000 — will organise payment from there
- 24 AugustBy SMS requested our banking details to give to her banker who would transfer in full from the trust fund
- 31 AugustWent to the bank in person to confirm the transfer — called to confirm payment made in full
- One week laterFunds never arrived — resumed pursuing her
- 4 SeptemberIn contact with bank again — attempting transfer that day
- After 4 SeptStopped responding to all contact entirely
- LaterRecontacted only after we communicated one of her addresses to her via SMS
- SaidHad not had her phone for a whole week — that is why she did not respond
- 14 SeptSMS that she went back to the bank to check why money has not arrived
- 19 SeptSMS from her number signed “Karen” claiming Jackie had been in hospital the whole time
- 26 NovSMS offering $3,900 cash — insisted on a physical meeting to “see who she was dealing with”
- 30 NovMet our agent at a cafe — arrived with an ACA reporter instead of cash
The ACA Ambush
On 30 November, Casten arranged to meet our agent, supposedly to hand over $3,900 in cash. Instead she arrived with a reporter from A Current Affair who demanded answers about why we were pursuing her for payment. Casten had told the reporter that she had not authorised the surveillance — a claim directly contradicted by months of SMS messages, phone calls, her real-time direction of investigators, her physical presence at surveillance locations, and invoice communications throughout the entire engagement. SpouseBusters elected not to respond to ACA’s commentary, correctly assessing that selective editing would not serve an accurate public record.
The Dispute and Court Outcome
When SpouseBusters pursued recovery of the outstanding $4,577, Casten disputed the debt claiming she had not authorised portions of the work. Her position relied on the fact that an authorisation form had never been signed — due to a typographical error in the email address that meant it never reached her. What she could not account for was the extensive written record of her real-time involvement throughout the entire engagement.
Internal lesson learned
The missing signed form created an unnecessary complication that was ultimately overcome by the weight of other evidence. Always verify that onboarding documents have been received and returned. A quick follow-up confirming receipt takes minutes and removes any ambiguity about authorisation.
Jacqueline Ruth Casten did not appear in court. Default Judgment was entered against her on 4 March 2021. A Garnishee Order for Wages or Salary was issued by the Local Court of NSW, Wollongong Registry on 9 March 2021 under case number 2020/00347063 — ordering her employer, Anglicare Op Shop, to deduct wages and remit them to SpouseBusters until the full judgment amount of $6,730.27 was recovered.
⚖️ The Local Court of NSW ruled entirely in SpouseBusters’ favour. Default judgment was entered against Jacqueline Ruth Casten on 4 March 2021. The court-issued Garnishee Order confirmed that the debt was legitimate, the work had been authorised, and the amount was legally recoverable. It was subsequently established that Casten had defrauded other small businesses in the community using similar methods.
What the Casten Matter Taught Us
Looking back at the Jacqueline Ruth Casten engagement, every warning sign described in this article was present. A sympathetic emergency. Prior payments establishing false credibility. An escalating job scope with no payment keeping pace. A textbook sequence of evolving payment excuses — each plausible in isolation, each buying more time. A completed job followed by a disputed debt.
The specific tactics she used — evolving excuses across months, claiming a trust fund, claiming car sales, sending fake payment confirmations verbally by phone, going silent and then resurfacing with new stories, ultimately bringing a media crew instead of cash — are not unique to her. They are the playbook of a practised fraudster who has done this before and gets better at it each time.
Document everything. Require cleared funds at every stage — not receipts, not promises, not phone confirmations. Verify all payment details. Set hard internal thresholds and enforce them without exception. And if excuses begin, act immediately rather than giving the benefit of the doubt one more time.
If You Have Been Defrauded — What to Do
- Preserve all written communications — every SMS, email, and message record
- Document all payments received — method, date, amount, and account they came from
- Issue a formal letter of demand via registered post before taking legal action
- For debts under $20,000 in NSW — lodge a claim through the NSW Local Court Small Claims Division
- Once a judgment is obtained, apply for a garnishment order against the debtor’s wages — a powerful enforcement tool that requires no further cooperation from the debtor
- Research whether the person has defrauded other businesses — a pattern of behaviour strengthens your case and may be relevant to the court
