Let me tell you about the dumbest thing I ever paid for – and I didn’t even know I was paying for it. Almost four years ago, I hired a freelancer on Fiverr to do some IT work on one of my cloud servers. The guy had over 200 five-star reviews on his profile. Solid history. He did the job, collected his five stars, and disappeared. Or so I thought.
Fast forward to now. I’m going through my setup with Cloud Code, actually reviewing what’s running on my own infrastructure, and I find it: a crypto scam, running on the back of my droplet. Put there by the freelancer. Sitting there for years, on my server, under my account, without me having a clue.
Why am I telling you this? Because if you’re a contractor or a service business owner thinking about hiring some cheap freelancer from Fiverr or Upwork to work on your website, your SEO, or your Google Ads, you need to understand what you’re actually buying. It’s not a task. It’s access. And access in the wrong hands can hurt your entire business.
What Actually Happened
Here’s the timeline. Nearly four years ago, I needed IT work done on one of my cloud servers – a droplet. Like a lot of business owners, I went to Fiverr, found a guy with more than 200 five-star reviews, and hired him. By every signal the platform gives you, this was a “trusted” seller. Not a brand-new account. Not a guy with no history. Two hundred plus happy customers.
He did the work I paid for. And apparently, he also set up a little side business for himself on my infrastructure – a crypto operation running on the back of my droplet. Everything on the surface looked completely normal. The only reason I caught it, years later, is because I was reviewing my own stuff with Cloud Code and digging into what was actually running. If I hadn’t looked, it would still be running today.
Over 200 five-star reviews. And he was running a crypto scam on my server the whole time. Reviews tell you the work got delivered – they tell you nothing about what else came with it.
Five-Star Reviews Don’t Mean What You Think They Mean
This is the part that should genuinely scare you. We all use reviews as a shortcut for trust. I did it too. But think about how those 200 reviews actually got there: 200 people hired him, he completed the visible task, they left five stars, and they moved on with their lives. How many of them checked what else was running on their server afterward? How many would even know how to check?
Reviews measure the deliverable you can see. They don’t measure intent, and they definitely don’t measure what a freelancer does in the background of your accounts after the job is “done.” I live and breathe this digital stuff every day, and it still took me almost four years to catch what was happening on my own server. If it can happen to me, it can absolutely happen to a busy contractor who’s just trying to get the phone to ring.
The $100 SEO Guy Is Not a Bargain
Now let’s talk about you. If you own an HVAC company, a plumbing shop, a roofing crew, whatever – you’ve seen the offers. Someone from Pakistan, from India, from wherever, promising to “do your SEO” for $100 or $200. And he’s got good reviews, so it feels like a low-risk test. What’s the worst that can happen for a couple hundred bucks?
The worst that can happen is that he negatively impacts your entire business. That’s not me being dramatic. Unless you actually know this person – and unless you can see and verify what they’re doing – you have no idea what’s being done in your name. A real home services marketing company charges real money because real work takes real hours. A $100 price tag doesn’t mean you found a deal. It means you’re not the customer in the way you think you are.
Take backlinks, because that’s the classic cheap-freelancer move. Buying backlinks is shitty anyway – it’s a shortcut that was never a real strategy. But when you pay a stranger $150 to “build links,” you don’t know where those links come from, what’s attached to them, or what else that person is doing with the access you handed over. The cheap option isn’t cheap. It’s a bet where your business is the stake.
When You Hire Cheap, You’re Really Handing Over Access
Here’s what most contractors miss about outsourcing marketing and IT work. The money is the smallest part of the transaction. The real thing you’re giving up is access – and access is where the damage happens.
Your website and server
Someone working on your site often needs hosting logins, admin access, sometimes server-level access – exactly what my Fiverr guy had. Whatever they install or leave behind runs on infrastructure that belongs to you, under accounts that trace back to you. A crypto scam on my droplet was my problem, not his.
Your ad accounts
Hand someone your Google Ads account and you’re handing them the engine that feeds your business. If you can’t see what they’re doing in there, you’re trusting a stranger with your livelihood – the same way I trusted a profile with 200 five-star reviews.
Your reputation
Everything a freelancer does from your accounts, your server, or your domain carries your name on it. When it goes sideways – and with the wrong person, it will – you’re the one holding the bag, not the anonymous profile on the other side of the world.
The Two Rules That Keep You Safe
I’m not telling you to never outsource. I’m telling you to stop outsourcing blind. It comes down to two rules.
Rule 1: Know what’s going on
The only reason I found that crypto scam is because I sat down and reviewed my own setup. You don’t have to be technical to do this. Ask questions. Look at your accounts. Demand to know what your freelancers are actually doing. If someone can’t explain their work in plain language, that answer is your answer.
Rule 2: Only work with a trusted service provider
Not the cheapest profile. Not the one with decent reviews. A provider you actually know, whose work you can verify, and who’s accountable when something breaks. Because otherwise – and I’m saying this from personal experience – you could get fucked real bad.
That’s the whole game. Know what’s happening inside your own business, and work with people you’ve actually vetted. If you’d rather skip the gambling and work with a home service marketing agency that shows you exactly what’s being done and why, that’s literally what we built Local Service Mastery for – real Google Ads, local SEO, and Facebook Ads training and management for contractors, with nothing hidden on the back of your server.
Local Service Mastery








