LSM Short · Hiring Freelancers

My Fiverr Freelancer Ran a Crypto Scam on My Server for 4 Years (A Warning for Contractors)

  • A Fiverr freelancer with 200+ five-star reviews secretly ran a crypto scam on Lior’s cloud server.
  • It ran for almost four years before anyone caught it – and it was only caught because Lior reviewed his own setup.
  • That $100-$200 “SEO guy” from overseas isn’t a bargain – he’s a stranger with access to your business.
  • Five-star reviews tell you the work got delivered. They tell you nothing about what’s happening behind it.
  • Protection comes down to two rules: know what’s going on, and only work with providers you actually trust.
Read the full breakdown →

Watch the full video, then read the breakdown below.

Let me tell you about the dumbest thing I ever paid for – and I didn’t even know I was paying for it. Almost four years ago, I hired a freelancer on Fiverr to do some IT work on one of my cloud servers. The guy had over 200 five-star reviews on his profile. Solid history. He did the job, collected his five stars, and disappeared. Or so I thought.

Fast forward to now. I’m going through my setup with Cloud Code, actually reviewing what’s running on my own infrastructure, and I find it: a crypto scam, running on the back of my droplet. Put there by the freelancer. Sitting there for years, on my server, under my account, without me having a clue.

Why am I telling you this? Because if you’re a contractor or a service business owner thinking about hiring some cheap freelancer from Fiverr or Upwork to work on your website, your SEO, or your Google Ads, you need to understand what you’re actually buying. It’s not a task. It’s access. And access in the wrong hands can hurt your entire business.

What Actually Happened

Here’s the timeline. Nearly four years ago, I needed IT work done on one of my cloud servers – a droplet. Like a lot of business owners, I went to Fiverr, found a guy with more than 200 five-star reviews, and hired him. By every signal the platform gives you, this was a “trusted” seller. Not a brand-new account. Not a guy with no history. Two hundred plus happy customers.

He did the work I paid for. And apparently, he also set up a little side business for himself on my infrastructure – a crypto operation running on the back of my droplet. Everything on the surface looked completely normal. The only reason I caught it, years later, is because I was reviewing my own stuff with Cloud Code and digging into what was actually running. If I hadn’t looked, it would still be running today.

200+five-star reviews on his profile
~4 yearsthe scam ran undetected
$100-$200what cheap “SEO” typically costs

Over 200 five-star reviews. And he was running a crypto scam on my server the whole time. Reviews tell you the work got delivered – they tell you nothing about what else came with it.

Five-Star Reviews Don’t Mean What You Think They Mean

This is the part that should genuinely scare you. We all use reviews as a shortcut for trust. I did it too. But think about how those 200 reviews actually got there: 200 people hired him, he completed the visible task, they left five stars, and they moved on with their lives. How many of them checked what else was running on their server afterward? How many would even know how to check?

Reviews measure the deliverable you can see. They don’t measure intent, and they definitely don’t measure what a freelancer does in the background of your accounts after the job is “done.” I live and breathe this digital stuff every day, and it still took me almost four years to catch what was happening on my own server. If it can happen to me, it can absolutely happen to a busy contractor who’s just trying to get the phone to ring.

The $100 SEO Guy Is Not a Bargain

Now let’s talk about you. If you own an HVAC company, a plumbing shop, a roofing crew, whatever – you’ve seen the offers. Someone from Pakistan, from India, from wherever, promising to “do your SEO” for $100 or $200. And he’s got good reviews, so it feels like a low-risk test. What’s the worst that can happen for a couple hundred bucks?

The worst that can happen is that he negatively impacts your entire business. That’s not me being dramatic. Unless you actually know this person – and unless you can see and verify what they’re doing – you have no idea what’s being done in your name. A real home services marketing company charges real money because real work takes real hours. A $100 price tag doesn’t mean you found a deal. It means you’re not the customer in the way you think you are.

Take backlinks, because that’s the classic cheap-freelancer move. Buying backlinks is shitty anyway – it’s a shortcut that was never a real strategy. But when you pay a stranger $150 to “build links,” you don’t know where those links come from, what’s attached to them, or what else that person is doing with the access you handed over. The cheap option isn’t cheap. It’s a bet where your business is the stake.

When You Hire Cheap, You’re Really Handing Over Access

Here’s what most contractors miss about outsourcing marketing and IT work. The money is the smallest part of the transaction. The real thing you’re giving up is access – and access is where the damage happens.

Your website and server

Someone working on your site often needs hosting logins, admin access, sometimes server-level access – exactly what my Fiverr guy had. Whatever they install or leave behind runs on infrastructure that belongs to you, under accounts that trace back to you. A crypto scam on my droplet was my problem, not his.

Your ad accounts

Hand someone your Google Ads account and you’re handing them the engine that feeds your business. If you can’t see what they’re doing in there, you’re trusting a stranger with your livelihood – the same way I trusted a profile with 200 five-star reviews.

Your reputation

Everything a freelancer does from your accounts, your server, or your domain carries your name on it. When it goes sideways – and with the wrong person, it will – you’re the one holding the bag, not the anonymous profile on the other side of the world.

The Two Rules That Keep You Safe

I’m not telling you to never outsource. I’m telling you to stop outsourcing blind. It comes down to two rules.

Rule 1: Know what’s going on

The only reason I found that crypto scam is because I sat down and reviewed my own setup. You don’t have to be technical to do this. Ask questions. Look at your accounts. Demand to know what your freelancers are actually doing. If someone can’t explain their work in plain language, that answer is your answer.

Rule 2: Only work with a trusted service provider

Not the cheapest profile. Not the one with decent reviews. A provider you actually know, whose work you can verify, and who’s accountable when something breaks. Because otherwise – and I’m saying this from personal experience – you could get fucked real bad.

That’s the whole game. Know what’s happening inside your own business, and work with people you’ve actually vetted. If you’d rather skip the gambling and work with a home service marketing agency that shows you exactly what’s being done and why, that’s literally what we built Local Service Mastery for – real Google Ads, local SEO, and Facebook Ads training and management for contractors, with nothing hidden on the back of your server.

Real owners · Real results

Don't take my word for it.

See it in action

How LSM AI Works

Still got questions?

Let's find the right fit for you.

Answer a few quick questions about your business. If it's a fit, we'll get you on a call with me. If not, I'll point you to what actually makes sense for where you're at.

— Lior

Free · Real Google data · 60 seconds

How many calls can your market get?

Real numbers — pulled straight from Google Ads. Not an agency pitch. 🎯

$ /mo

No credit card  ·  No commitment  ·  We verify your details before showing results

The honest truth

Agency vs. owning it.

The agency model
  • $2,000–$5,000/month in fees just to manage your account
  • They own your Google Ads account — you start from zero when you leave
  • Random results. No explanation of why.
  • Zero visibility into what they're actually doing
The LSM way
  • Costs less than one missed job
  • Your Google Ads account. Your campaigns. Your data — always.
  • AI manages it daily. Full transparency — you see every decision.
  • Cancel anytime. Your campaigns stay yours forever.
The LSM way

How it works.

The opposite of an agency. We build it inside your accounts. You own it all.

1

Pick your coverage

One city or your whole service area. The free audit tells you exactly what to expect in your market.

2

Your LSM AI builds everything

Your AI marketing manager builds your Google Ads, call tracking, fraud protection, and landing page — inside your accounts. You approve before a single dollar is spent.

3

Your phone starts ringing

Most clients are live within 48 hours. Your AI optimizes bids and keywords daily — results compound over time.

Google Ads campaign (your account) Call tracking setup Competitor click blocking High-converting landing page Daily bid & keyword optimization Monthly performance report You own every account, always Personal LSM AI manager 24/7 Q&A in Lior's voice 7-day money-back guarantee
Real client wins and results using LSM
Included in every plan

Your own AI account manager.

Built on 8,600+ real LSM coaching sessions. Trained in Lior's exact voice.

⚡ Powered by LSM AI · Trained on 8,600+ real LSM coaching sessions
🔐

It already knows everything about you

The moment you sign up, your LSM AI knows your plan, your city, your service. No setup call. No briefing a stranger.

🏗️

Builds your entire setup — while you watch

Google Ads. Call tracking. Fraud protection. Your landing page. Built inside your accounts, step by step.

Nothing goes live without your sign-off

Before a single dollar is spent, your AI walks you through everything it built. You approve. Then it goes live.

💬

On call 24/7 — in Lior's exact voice

Ask it anything, anytime. 8,600+ real LSM coaching answers. Available instantly.

claude
Membership verified — Growth plan · Dallas TX
Client profile loaded — HVAC, 3 cities
Building your Google Ads campaign…
Campaign created (PAUSED for review)
47 keywords added across 3 ad groups
3 responsive ads created
Setting up call tracking…
4 tracking numbers created
Call tracking installed on your site
Competitor click blocking active
Building landing page…
Site backed up · Page builder detected
Landing page live at dallas-hvac.yourdomain.com
Everything looks good. Budget: $75/day · Targeting: Dallas 25mi · Ready to go live?
You: Yes, turn it on.
Campaigns activated. Your phone should start ringing.
Real session · Google Ads + Call Tracking + Landing Page built in one go
Free · 2 minutes · No call required

See what your market can do.

Real estimate — pulled directly from Google's own data. Not a made-up projection. 🎯

No credit card  ·  No call  ·  Results in 30 seconds

If this sounds familiar…

You've been burned before.

🔒

They own your accounts. Not you.

The day you leave an agency, your Google Ads account, tracking numbers, and landing page are gone. You spent $30,000 building their asset.

💸

The reports look great. The phone doesn't ring.

Impressions. Clicks. CTR. Beautiful PDF every month. But when you ask how many jobs you closed — nobody has a straight answer.

🤷

You ask a question. You get an email 48 hours later.

You need answers now. A human account manager you can never reach isn't service — it's a subscription to uncertainty.

Lior Vaknin
Who's behind this

I'm Lior. 15 years making sure you never get locked out of your own marketing again.

I built Local Service Mastery because I watched too many great contractors get burned by agencies — overcharged, locked out, left with nothing. So I flipped the model: your accounts, your data, your asset. We build it. You own it.

500+owners coached
$20M+revenue generated
15+years in the game

Peace,
Lior Vaknin

Good questions

Questions,
answered.

Is it safe to hire freelancers on Fiverr or Upwork for SEO or website work?

It can be, but reviews alone don’t make it safe. Lior hired a Fiverr freelancer with over 200 five-star reviews for IT work, and the guy ran a crypto scam on his server for almost four years. Unless you know the person and can verify what they’re actually doing, you’re taking a real risk.

Can cheap $100-$200 SEO actually hurt my business?

Yes. As Lior puts it, a freelancer you don’t know can negatively impact your entire business – whether that’s through garbage backlinks you paid for or through something hidden running on your own accounts. The low price doesn’t limit your downside; it just hides it.

How does a scam run on a server for four years without anyone noticing?

Quietly. Everything on the surface looks completely normal – the site works, the job got done. Lior only caught it because he was actively reviewing his own setup with Cloud Code. If you’re never looking at what’s running in your accounts, you’ll never see what doesn’t belong there.

Do five-star reviews mean a freelancer is trustworthy?

No. Reviews measure the visible deliverable – did the task get done on time. They say nothing about what the freelancer did in the background of your server or accounts afterward. Two hundred people left five stars for a guy who was running a crypto scam on their infrastructure.

Should I buy backlinks for my contracting website?

Lior’s answer is blunt: buying backlinks is shitty anyway. It’s a shortcut, not a strategy. And when you pay a stranger overseas to build them, you don’t know where those links come from or what else comes attached to the deal.

What’s the safest way to outsource my marketing?

Follow the two rules from the video. First, know what’s going on – review your own accounts and demand transparency. Second, only work with a trusted service provider – someone you actually know, whose work you can verify, and who’s accountable when something breaks.

Which plan should I pick?

Start with Starter if you want to get your phone ringing in one city and grow from there — one new campaign gets added each month. Go with Growth if you're ready to cover your full service area right away. Pro adds local SEO, Facebook Ads, and weekly coaching with me directly. If you're still not sure, run the free audit — it'll tell you what to expect in your market.

How fast will my ads go live?

Most clients are live within 48 hours of completing setup. Your LSM AI builds everything, you review and approve, then it goes live. The only exception is if Google requires advanced verification for your category (locksmith, garage door) — that's a direct process between you and Google, and we walk you through it.

What results can I expect?

Depends on your trade, your city, and your ad budget. The free audit gives you a real estimate pulled directly from Google's own Ads data — not a made-up projection. In a medium-to-large market with a $1,000/month ad budget, most clients get 15–40 qualified calls per month. Run the audit first to see what's realistic in your specific area.

Do I really own everything?

Yes. The Google Ads account, the call tracking numbers, the landing page — all built inside your accounts, in your name. If you ever cancel, you walk away with everything you paid to build. That's not a policy. That's the whole point.

Is there a contract?

No contract, ever. Every plan is month-to-month. Cancel anytime — if we stop earning your business, you should stop paying.

What if I already have my own call tracking or fraud protection?

No problem. You can connect your existing accounts, or we set everything up fresh for you. Your call — you pick during onboarding.

I'm a locksmith or garage door company. Anything I should know?

Yes — Google requires advanced verification for locksmith and garage door services before ads can run. We build your campaign and all your keywords, but you'll need to complete that verification with Google directly (we walk you through it). If for any reason you can't complete it, you're covered by our full 7-day refund.

Do you work with my trade?

We specialize in home and local services — HVAC, plumbing, electrical, roofing, locksmith, garage door, pest control, carpet cleaning, water damage, tree service, and more. Run the free audit and you'll instantly see if we're a fit.

What exactly is my LSM AI account manager?

It's your personal AI marketing manager — trained on 8,600+ real LSM coaching sessions. Sign up and it's ready to go: builds your full campaign setup inside your accounts, reviews everything with you before anything goes live, and stays on 24/7 to answer any question about your campaigns, leads, or marketing strategy. In Lior's exact voice.

What's the 7-day money-back guarantee?

If you sign up and decide within 7 days that this isn't right for you — for any reason — you get a full refund. No hoops. We'd rather lose a bad fit early than keep a client who isn't seeing value.

The bottom line

Know Who’s Touching Your Business

A freelancer with over 200 five-star reviews ran a crypto scam on Lior’s server for almost four years. Nobody caught it – not the platform, not the review system, not the other 200 customers. It only surfaced because Lior went looking. That’s the whole lesson in one story: the platforms don’t protect you, the reviews don’t protect you, and the cheap price definitely doesn’t protect you.

So before you hand your website, your SEO, or your ad accounts to a stranger from Fiverr or Upwork, remember what you’re really handing over. It’s not $200. It’s access to the business you spent years building. Know what’s going on inside your own accounts, and only work with service providers you actually know and can verify.

That’s exactly why Local Service Mastery exists. Instead of shipping your marketing off to an anonymous profile, you learn to understand and run your own Google Ads, local SEO, and Facebook Ads – or have it handled transparently, by people you know, with nothing hidden. No black box. No surprises on the back of your server. Just lead generation you actually control.

Want this handled for you?

Get a free 30-second marketing audit and see how Local Service Mastery helps you own your lead generation instead of renting it.

Get my free audit →

Stop renting leads.

Check your market, pick your plan, or grab 15 minutes with me. Let's get your phone ringing.

See what your market can do

Your trade