⚠ A helper or impersonator sends payment links pointing to their own account, or changes payout details, diverting clients' deposits.
Mitigation
Use restricted, link-only access to the customer's own Stripe or Square. Never hold payout credentials. Alert the customer by text on any payout or bank change.
⚠ A scammer posing as a cleaner texts a fake schedule so we send payment links to strangers, effectively running a phishing operation.
Mitigation
Verify each customer by call and ID at setup. Accept schedules only from the registered number. Cap new clients per week and manually review unusual spikes.
⚠ Schedules, addresses and empty-home times leak through shared spreadsheets, group chats or a helper's personal phone, enabling burglary or stalking.
Mitigation
Keep data in one access-controlled workspace. Forbid personal-device copies. Delete schedule details 90 days after the job. Log every helper access.
⚠ Reminder and follow-up texts reach wrong numbers, or pester clients after opt-out, causing harassment complaints and carrier blocking.
Mitigation
Honor STOP instantly across all customers. Cap follow-ups at two per unpaid job. Confirm numbers at first booking and use only customer-approved wording.
⚠ A client disputes a deposit and the customer blames us for chargebacks, or a helper mislabels paid status and prompts a double charge.
Mitigation
Read payment status only from Stripe or Square webhooks, never manual entry. Stop reminders automatically once paid. Show refund steps in customer terms.