Common P2P Payment Scams Targeting Small Businesses

Peer-to-peer platforms have made getting paid fast and easy, but they’ve also opened new doors for fraudsters. P2P payment scams targeting small businesses exploit speed, trust, and mobile convenience to siphon funds before you notice. 

This guide explains how modern P2P payment scams work, why they’re rising in the U.S., and what practical steps a small business can take to prevent losses. You’ll learn the most common scam patterns, recognizable red flags, platform policy nuances, and the exact playbooks you can implement with your team. 

Because P2P payment scams move quickly, the best defense is a mix of clear policies, rigorous verification, and training that turns every frontline employee into a fraud sensor. This article is written for U.S. merchants, freelancers, farmers market vendors, consignment stores, and niche retailers who rely on instant payments. 

Throughout, we’ll use plain language, short paragraphs, and repeat key concepts so your team can absorb and act. The goal is simple: make your business a hard target for P2P payment scams while keeping checkout fast for good customers.

Why P2P Payment Scams Are Rising in the U.S. Small Business Market

P2P payment scams targeting small businesses have grown because instant transfers leave almost no window to intervene. Traditional cards and ACH have dispute rails. P2P apps often function like digital cash, which means reversals are limited or slow. 

Fraudsters love that certainty and speed. When a small business accepts a P2P transfer, the criminal can walk out the door with goods before the merchant spots a fake screenshot or a mismatched name. 

Attackers also scale socially. They reuse scripts, spoof profiles, and automate outreach on marketplaces. The same story hits dozens of shops in a week.

Another driver is smartphone ubiquity at checkout. Busy vendors multitask and trust what they see on a customer’s screen. A realistic payment confirmation image or a spoofed SMS looks convincing in a loud store or outdoor stall. 

Small teams lack dedicated fraud tools, so policies are informal and variable. That inconsistency is exactly what organized scammers probe. They’ll push urgency, ask you to “just check later,” or distract a new employee.

Finally, the economy of stolen identities fuels P2P payment scams. Cheap SIM swaps, leaked credentials, and throwaway email accounts make creating burner profiles trivial. Criminals know that small businesses want to say yes to sales. 

They exploit kindness, speed, and the desire to please. The fix is not to slow every sale, but to add simple, repeatable checks so risky scenarios can’t slip through and become costly losses.

How P2P Payment Scams Work: Anatomy of an Attack

P2P payment scams follow a predictable arc, even when surface details differ. First comes social engineering. The scammer builds credibility with a real-looking name, a profile photo, and a plausible story. They might reference a local event or a mutual marketplace listing. 

The goal is to lower your guard and push to a P2P method that offers limited buyer/seller protections. Next comes urgency. They say they’re late for work or need a gift “right now,” nudging you to accept a quick transfer and skip verification. Many P2P payment scams hinge on urgency because it erodes the process.

The payment “proof” step follows. Attackers show a confirmation screen on their device, send a doctored email, or display a fake bank alert. They rely on the merchant not cross-checking the receiving account and transaction ID in the business’s own app. 

If the business doesn’t see the funds yet, scammers blame “bank delays” or “network congestion.” They may even overpay on purpose and request a partial refund via another rail, locking in profit before the merchant realizes the original transfer never cleared.

Finally, dispute evasion. If a payment did post, it may have originated from a compromised account. Once the legitimate owner reports it, the platform may claw funds back. Scammers will have already resold the product or disappeared. 

The core lesson is consistent: P2P payment scams win when the merchant trusts a screenshot or a customer’s phone instead of verifying the transaction inside the business’s authenticated account. Build your process to break that pattern every time.

Top P2P Payment Scams Targeting Small Businesses in 2025

P2P payment scams targeting small businesses cluster into a handful of repeatable patterns. Understanding each helps you deploy focused defenses. The first is the overpayment and refund scam. A buyer “accidentally” sends more than the invoice amount via P2P. 

They immediately request a refund to a different account or rail. The overpayment never truly settles, or it came from a stolen source and later reverses. Your refund becomes the attacker’s clean profit. A strict policy to never refund until the original transfer is indisputably settled defeats this scam.

Another common pattern is the fake confirmation screenshot. A customer flashes a convincing confirmation image, sometimes animated, that mimics a real app. They may also show a forged email or SMS. 

If your staff accepts this as proof, the goods walk out the door. Require employees to check the business account directly, confirm the exact payer handle, and match the transaction ID. Screenshots on a customer device are never proof. Criminals count on you skipping that vital step in the rush.

Business impersonation and spoofed profiles also dominate P2P payment scams. Attackers pose as your vendor, landlord, or a known customer and send a new “pay me here instead” handle. They rely on look-alike names, swapped characters, and urgent invoices. 

Defend with an allowlist of approved payment handles and a change-request callback protocol using a phone number you already trust. When in doubt, staff should halt, call the contact of record, and document the verification. These small habits stop big losses.

Overpayment and Refund Manipulation

Overpayment is a classic among P2P payment scams targeting small businesses because it leverages goodwill. The customer claims a typo or app glitch caused an extra zero. They show a pending transfer and ask you to “make it right” by refunding the difference via a different P2P app or even gift cards. 

If you comply, you send real money while their original payment either never arrives or is reversed as unauthorized. The scam scales because it plays on customer service instincts and fear of a poor review.

Build a rule that no refunds are issued against unsettled funds. Your POS or accounting system should require proof of settlement inside your own receiving app. Train staff to say, “We can process a refund once your original payment fully clears to our business account.” 

Provide a printed card or a screen notice that explains settlement timelines for major P2P apps. This reduces confrontation and gives employees a script. Also, lock down who can approve exceptions. Owner-only overrides limit pressure on new hires.

Finally, audit for partial refunds. Criminals probe for weak branches, like a junior cashier who will “just send back $150” to ease tension. Require dual control for any cross-rail refund. Document payer handle, transaction ID, timestamps, and reason code. 

These small controls turn a profitable scam into a stalled attempt and protect your audit trail if you later need evidence for law enforcement or your bank.

Fake Payment Confirmations and Screenshot Spoofing

Among P2P payment scams, forged confirmations are the most visible at the counter. Attackers present a confirmation screen, sometimes with a timer or moving elements to look authentic. They may also forward a fake receipt email with exact brand colors. 

The visual looks right, but the money isn’t there. Your defense is simple and absolute: never accept a customer-provided screen as proof of payment. Treat it as a claim that must be verified inside your own authenticated account on a business-controlled device.

Equip every checkout with fast access to your P2P merchant profile. Create a one-page checklist: open the app, refresh the activity feed, match the handle, match the amount, match the timestamp, and record the unique transaction ID. 

If anything is missing, pause the sale. Advise the customer that you have not received funds. Real buyers will understand. Scammers will push urgency or try to distract. Your team should feel safe saying no.

To strengthen the process, disable Wi-Fi dead zones that prevent your device from refreshing. Keep two internet connections at markets—primary and hotspot—so you can check transactions live. 

Also, update your signage: “We confirm P2P payments on our business device before releasing goods.” Clear expectations reduce arguments and make it harder for scammers to pressure a new employee. Consistency across staff and shifts is crucial to stopping these high-pressure P2P payment scams.

Business Impersonation and Handle-Swap Attacks

Impersonation is increasingly common in P2P payment scams targeting small businesses because it bypasses checkout. Attackers contact you through email, text, or marketplace chat, claiming to be a known supplier or repeat client. 

They announce a “new payment handle” due to “security upgrades” or “account migration.” The new handle is a look-alike: a swapped letter, added underscore, or a different platform entirely. If your team pays without independent verification, funds go straight to the criminal.

Defend with a change-management policy. Any request to change payment details triggers a callback to a known phone number on file, not the number in the new message. Require dual approval for handling changes above a set dollar threshold. 

Maintain an allowlist of verified P2P handles for each vendor and customer account. Store it centrally, not in personal phones. Version it and review monthly, just like you would a vendor master in accounting.

Teach visual hygiene. Show staff examples of common look-alike tricks, like rn vs m, lower-case L vs I, and homoglyphs. Add a rule that first-time payments to a new handle start with a $1 test and a shared code in the memo. 

If the recipient can’t echo back the code by phone, stop. Small rituals like these frustrate scammers and create a documented process that auditors and insurers respect. Most importantly, they keep real money from leaving your account during a chaotic day.

QR Code, Invoice, and Link-Swap Tampering

P2P payment scams often tamper with the payment endpoint. A fraudster places a counterfeit QR code sticker over your real code on a countertop sign. Customers scan and pay the attacker instead of your business. 

At pop-ups and markets, this simple trick can drain a day’s revenue before anyone notices. Similarly, scammers send invoice links that lead to look-alike pages or hijack shared payment links in social posts.

Harden your signage. Laminate QR codes and add tamper-evident seals. Print your business name and handle next to the code in big type so customers can cross-check. 

Add a daily opening checklist: inspect code signs, compare the handle on the sign to the allowlist, and take timestamped photos. Train staff to stop if a customer says, “The name looks different.” Quick visual checks block a surprising share of P2P payment scams.

Digitally, prefer one-time invoice links that expire, not static links in bios or old posts. If you must use public links, rotate them on a schedule and monitor click patterns. Teach your team to preview any shortened URL’s destination before sharing. 

If you accept payments at events, pre-print a few backup signs and store them in a sealed folder. The combination of physical tamper controls and link hygiene cuts off an easy revenue siphon that thrives on distraction.

Account Takeover, SIM Swap, and Social-Support Hoaxes

Some P2P payment scams begin with account takeover rather than tricking your staff. Attackers phish employee credentials or convince a carrier to port a phone number via SIM swap. Once inside, they change the receiving handle, add new devices, and drain incoming payments. 

Social-support hoaxes also target merchants by posing as platform support, urging “urgent verification” through a fake site that captures your login and 2FA code.

Reduce blast radius with layered security. Enforce strong, unique passwords and app-based MFA for every P2P and email account. Prefer hardware security keys for admin logins. Lock down carrier accounts with a unique PIN and a no-port note. 

Keep recovery emails on a separate domain and protect them with the strongest MFA you can deploy. Teach employees never to share one-time codes, even with “support.” Real support won’t ask for them.

Operationalize detection. Turn on login alerts, device approval prompts, and transaction notifications. Review access logs weekly. If you see a new device or location, pause P2P acceptance until you verify settings and recent payouts. 

Maintain a written takeover response: freeze transfers, rotate credentials, revoke sessions, notify the platform, and document all changes. A rehearsed playbook converts a potentially devastating compromise into a manageable event with limited losses.

Red Flags and Behavioral Indicators to Spot Early

Most P2P payment scams targeting small businesses telegraph risk if you know what to look for. Urgency is the number-one signal. Phrases like “I’m double parked,” “I’ll miss my flight,” or “I need this before they sell out” push you to skip verification. 

Overexplaining is another tell. Scammers volunteer technical jargon about “batching” or “network congestion” to rationalize why your app shows no funds. Authentic buyers rarely talk like that.

Watch for payment handle inconsistencies. If the name on the customer device doesn’t match the handle that actually sent funds to your account, halt the sale. Be wary of mismatched memos or wrong amounts designed to create confusion. 

Requests to refund to a different rail are a classic marker. So is resistance to waiting a minute while you refresh your transaction feed. Real buyers can wait sixty seconds.

Train staff to notice environmental manipulation. Scammers create noise, involve friends, or shift your line of sight when they show a screen. They may compliment, flirt, or threaten to post a bad review. 

Build a culture where employees know the owner backs them when they follow the process. Post a sign that says, “For your security and ours, we verify P2P payments on our device.” That simple statement defuses pressure and helps your team turn away risky transactions with confidence.

Platform Policies That Matter for U.S. Merchants

P2P payment scams thrive on misunderstanding policy. Many P2P transfers are designed for trusted people sending money, not for commercial sales. Protections that exist for card payments often don’t apply. 

For U.S. small businesses, the practical takeaway is this: treat P2P like digital cash unless you are using a platform’s specific business features and following their eligible use rules. Even then, buyer protection tends to focus on the consumer, not the merchant.

Understand settlement and irreversibility. Some rails post instantly but can still be reversed if the sending account was compromised. Others are effectively final once accepted. Read the business documentation for the apps you actually use and train against it. 

Keep a laminated “rails matrix” at the checkout showing whether the app supports business profiles, what fees apply, what proof is required in disputes, and how long you should wait before issuing refunds.

Finally, separate personal and business. Use a dedicated business profile and bank account. Mixing funds creates reconciliation chaos and weakens your evidence if something goes wrong. 

Keep your display name, handle, and profile photo consistent across platforms so customers can recognize you. When your team says, “We only accept payments to these verified handles,” and points to your official profile, you reduce confusion that scammers exploit to redirect funds.

U.S. Legal and Regulatory Considerations (Plain-English Overview)

P2P payment scams intersect with U.S. laws that protect consumers and govern electronic transfers. For unauthorized electronic fund transfers from a consumer account, the Electronic Fund Transfer Act (Regulation E) outlines responsibilities for banks and timing for error resolution. 

Merchants are not the protected party under Reg E, but understanding timelines helps you anticipate when a buyer’s bank might reverse funds if the payment came from a hacked account.

Commercial transactions often fall under the Uniform Commercial Code and state unfair or deceptive acts and practices statutes. If a scam involves impersonation or forged instruments, you may be a victim in your own right, especially if your business identity was misused. 

Document everything: messages, handles, transaction IDs, serial numbers of goods, video, and staff notes. Strong documentation helps when filing police reports or responding to bank inquiries.

This is not legal advice. Speak with counsel about your vertical, whether you sell regulated goods, and your refund/verification policies. Ask your bank about their fraud escalation path and whether they require specific language on receipts.

If you operate at events, check local rules for signage and surveillance. The goal is to align your anti-fraud process with laws and contracts so you don’t accidentally assume liability you could have avoided with clearer terms and consistent verification.

Operational Controls That Reduce P2P Payment Scam Risk

Operational controls make or break your defense against P2P payment scams targeting small businesses. Start with a written policy. Specify which P2P apps you accept, the only approved handles, and the exact verification steps. 

Include a no-exceptions rule for confirming receipt inside your business device. If the payment doesn’t appear, the transaction pauses. Post the policy at registers and in your team handbook so procedures survive staff turnover.

Next, script the conversation. Give employees friendly but firm language: “Thanks for sending. I’ll just refresh our business app and confirm the transaction ID. 

It takes about a minute.” Provide a second script for overpayment: “We’ll process any refund after the original payment fully settles to our account.” Scripts reduce emotional pressure and keep behavior consistent. Pair scripts with role-play drills during onboarding.

Finally, manage permissions. Limit who can change payment handles, approve refunds, or accept first-time payments from new vendor/customer accounts. Require dual control for exceptions over a dollar threshold you set. 

Keep a shared log of verification calls and handle updates. These routines sound simple, but they neutralize the social tactics that P2P payment scams rely on. When your whole team follows the same steps the same way every time, scammers move on.

Device Security, Access Hygiene, and MFA

Great policies fail if the devices that enforce them are compromised. Lock down the phones and tablets that run your P2P apps. Use mobile device management where possible. Enforce strong passcodes, biometric unlock, and automatic timeouts. 

Keep operating systems and apps updated. Restrict app installs to business needs only. Turn on device-level encryption and enable remote wipe.

Access hygiene matters. Every staff member should have their own login where the platform allows it. Never share passwords over chat. Store recovery codes securely offline. Protect the email accounts tied to P2P profiles with app-based MFA and, ideally, hardware keys. 

If your carrier offers a no-port or port-freeze setting, enable it and add a unique PIN. SIM swaps are a door into takeover-driven P2P payment scams.

Monitor signals. Enable alerts for new device logins, password changes, payout changes, and large transactions. Review activity weekly. If you see something unusual, pause P2P acceptance until you confirm. 

Keep a “break glass” binder with emergency contacts, platform support steps, and a checklist to rotate credentials and revoke sessions. A prepared team reclaims control fast, limiting the damage when attackers inevitably target your systems.

Staff Training, Role-Play, and Mystery-Shop Drills

P2P payment scams exploit human factors, so invest in people. Build a short, recurring training cycle that focuses on one scam pattern per week. Use real screenshots, handle look-alikes, and messages from past attempts. 

Have staff practice saying the verification scripts out loud. Confidence grows when people rehearse in a safe environment instead of improvising under pressure at a busy counter.

Run mystery-shop drills. Ask a manager or trusted friend to attempt a common scam, like showing a screenshot or pushing a refund on an overpayment. Observe without shaming. Afterward, debrief what went well and what to improve. 

Celebrate correct refusals. Consider a small reward program for employees who catch attempted P2P payment scams. Positive reinforcement locks in habits that protect revenue.

Document attendance and outcomes. Keep a training tracker with dates, topics, and participants. New hires should complete the core modules before handling payments alone. Rotate fresh examples so the content stays current. 

This lightweight, continuous approach builds muscle memory. Over time, your team will spot subtle calls and shut down scams smoothly, while keeping interactions friendly for legitimate customers.

Technical Controls and Tooling for Risk-Aware Payments

Even small businesses can add low-cost technical layers that frustrate P2P payment scams. Start with allowlists and webhooks where supported. Restrict payments to verified handles and trigger alerts when funds arrive from high-risk sources. 

Use simple rules: first-time payer over $X requires manager approval, or any refund over $Y needs dual control. If your e-commerce or booking system integrates with P2P rails, enable server-side verification of transaction IDs before marking orders as paid.

Add velocity and amount thresholds. Sudden spikes in small transactions or an unusual run of overpayments signal active probing. Basic dashboards in your POS or spreadsheet can flag anomalies. 

If your website or social profiles expose payment links, rotate tokens and add rate-limits or CAPTCHA to any form that generates payable links. Control the endpoints scammers target for link swaps.

Finally, keep logs. Store transaction IDs, payer handles, IP addresses from online orders, and device fingerprints where appropriate and legal. When a pattern emerges, you can harden policies and, if necessary, provide evidence to platforms or law enforcement. 

Technical controls won’t stop every attempt, but they add friction. Combined with training and scripts, they turn fast-moving P2P payment scams into obvious, stoppable events.

Incident Response Playbook: From First Minute to Next Week

When a P2P payment scam hits, speed and sequence matter. In the first 60 minutes, freeze related activity. Stop accepting payments on the compromised rail. Secure devices, rotate credentials, revoke sessions, and confirm payout settings. 

Capture evidence: screenshots, transaction IDs, messages, camera footage, and staff notes. If a physical item was just taken, record serial numbers and notify local authorities promptly.

Within 24 hours, notify your bank or platform through their fraud channel. Provide a concise summary with a timeline and artifacts. If account takeover is suspected, request a security review and device audit. 

Inform impacted customers with a calm, factual note. Explain what happened, what you’re doing, and how they can protect themselves. Update your signage or online posts if a public QR code or link was involved.

By day seven, complete a retrospective. Identify the policy or control that failed. Update scripts, checklists, and training. If a new scam pattern emerges, share it with your team and peer businesses in your area. 

Consider notifying your insurer if the loss exceeds your deductible or if your policy requires notice. A written, rehearsed playbook keeps emotions in check and turns a bad day into a learning moment that hardens your defenses against future P2P payment scams.

Industry-Specific Tips for Higher-Risk Merchants

Certain sectors face unique pressures that P2P payment scams exploit. Firearm retailers operate under strict compliance and higher ticket sizes. Require dual control for any P2P acceptance and verify government-issued ID for in-store pickups tied to P2P orders. 

Maintain a zero-refund-until-settled policy and never release serialized items until funds are fully posted and verified inside your account. Add cameras focused on the payment area to capture attempted screenshot scams.

Consignment shops juggle split payouts. Attackers may impersonate consignors and request payout handle changes via text or social DMs. Adopt a change-request form that requires in-person verification or a notarized signature for large balances. 

Farmers market vendors face noise and urgency. Use a wearable or countertop device logged into your business profile for instant verification and post signage that sets expectations. Keep two internet connections so you can refresh transactions on the spot.

Freelancers and mobile service pros encounter remote impersonation. A scammer may book urgent work, “overpay,” and ask for a refund before the original clears. Use e-invoices with itemized scope and require deposits through trusted rails only. 

For first-time clients, cap remote work until payment is verified. These targeted guardrails recognize your industry realities while directly countering the specific P2P payment scams you’re most likely to see.

Metrics and KPIs to Track Fraud Exposure

You can’t improve what you don’t measure. Define a simple fraud dashboard that surfaces early signals of P2P payment scams targeting small businesses. 

Track attempted scam count per week, successful verifications, and refused transactions due to non-receipt. Monitor refund volume by rail and reason code, plus time-to-settlement for each platform you accept. Spikes reveal pressure points and training gaps.

Add leading indicators. Count handles change requests, first-time payer transactions over your threshold, and incidents where staff reported urgency or pressure tactics. If your volume allows, examine approval rates by employee and by shift. 

Outliers may need coaching or more support. Tie metrics to small incentives for following process, not to raw sales, so people feel safe pausing risky transactions.

Review monthly. Identify the top two scam patterns and deploy one new control or script each cycle. Share results with your team so they see progress and purpose. Numbers create accountability and momentum without blame. 

Over time, a light but consistent metrics rhythm makes your business systematically better at detecting and defeating P2P payment scams.

Customer Communication Templates You Can Adapt

Clear communication protects relationships when you enforce anti-fraud steps that slow down a sale. Here’s a language you can adapt to. At checkout: “For your security and ours, we confirm P2P payments on our business device. 

This takes about a minute. Thanks for your patience.” For overpayments: “We appreciate your payment. Our policy is to issue refunds after the original transfer fully settles to our account. We’ll notify you as soon as it clears.”

For handle changes: “For fraud protection, we can only send payments to handles on your approved profile. If you need to update details, please call us at the number on file, and we’ll verify and document the change.” 

After an attempted scam: “We did not receive your P2P transfer in our business account, so we can’t release the order. If you believe this is an error, please contact the app’s support and share the transaction ID.”

Tone matters. Be polite, firm, and consistent. Post the same language on signage and online FAQs so customers aren’t surprised. When your team has ready-made words, they can enforce the process without escalating emotions. 

That confidence is a quiet, powerful deterrent to P2P payment scams, and it preserves goodwill with honest customers who want a secure purchase experience.

FAQs

Q.1: What is the quickest way to verify a P2P payment at the counter?

Answer: Open your business’s authenticated app on a store-owned device. Refresh the activity feed, match the payer handle, match the amount, and capture the transaction ID. Do not rely on a customer’s screenshot. 

This habit blocks many P2P payment scams by anchoring the decision in your own account rather than the buyer’s phone.

Q.2: Are P2P transfers reversible?

Answer: Some are effectively final, while others can be clawed back if the sender reports unauthorized use. Treat P2P like digital cash unless you are using a platform’s business tools with clear protections. 

Build refund rules around settlement, not promises. This approach narrows your exposure to P2P payment scams rooted in overpayments and compromised accounts.

Q.3: Should I accept P2P from new customers?

Answer: Yes, but with guardrails. Set a dollar threshold that requires additional verification for first-time payers. Consider a small test payment or a slower rail for higher amounts. These steps prevent big first-order losses driven by P2P payment scams and keep your everyday checkout fast for repeat customers.

Q.4: How do I handle a customer who gets upset when I won’t accept a screenshot?

Answer: Use your script and point to the posted policy. “We can’t release products until the transaction appears in our business account. It usually takes under a minute.” 

Most legitimate buyers understand. Scammers typically push harder or leave—both are signals you avoided a loss from P2P payment scams.

Q.5: What records should I keep after an incident?

Answer: Save transaction IDs, payer handles, timestamps, messages, video stills, and staff notes. If physical goods were taken, record serial numbers. Good documentation supports platform investigations, insurance claims, and police reports. 

It also teaches your team how to improve defenses against future P2P payment scams targeting small businesses.

Q.6: Does using a business profile help?

Answer: A business profile often adds branding, reporting, and sometimes stronger tooling. It also keeps personal and business funds separate, which simplifies reconciliation and evidence gathering. 

While it doesn’t eliminate P2P payment scams, it raises your professionalism and reduces confusion that criminals exploit.

Q.7: What about QR code security?

Answer: Treat QR codes like cash registers. Use tamper-evident seals, print your business name and handle next to the code, and photograph signs at open and close. Rotate public links periodically. These simple habits dismantle link-swap and QR tampering P2P payment scams.

Conclusion

P2P payment scams targeting small businesses exploit speed, social pressure, and policy confusion. The fix is not to abandon P2P, but to run it like a pro. Write a clear policy. Verify payments only inside your own app. 

Refuse screenshots. Never refund until funds settle. Lock down devices and use MFA everywhere. Train your team with scripts and drills. Add small technical controls like allowlists, velocity checks, and link rotation. Track a few metrics and improve one control every month.

Taken together, these steps convert chaotic risk into a manageable process. You’ll still move fast for good customers, but scammers will find your shop too disciplined to bother. That’s the goal of this U.S.-focused guide: practical, repeatable defenses that protect revenue without sacrificing service. 

Share it with your team, post your policy where customers can see it, and start rehearsing the scripts. With a little structure and steady practice, your business can shut down P2P payment scams before they start.