A client of mine came to me confused about a deal he was running on subscription: roughly 50 “24-hour” MCA lead packages a day, at two dollars a package.
Sit with that for a second. Fifty freshly-generated, same-day merchant inquiries. Every single day. At two dollars each.
He told me himself — before I ever said a word — that it felt too good to be true. He was right. No legitimate lead broker on earth is generating that kind of same-day volume at that price. The economics don’t exist. Real-time MCA data — a merchant filling out a form today, verified, consented, delivered today — costs real money to generate, because someone had to pay for the ad spend, the funnel, the call center, or the affiliate that produced it.
What he was actually buying was month-old data with the dates changed. The same file, sold on repeat, to him and who knows how many other buyers in the same WhatsApp thread — each one told it was fresh, each one told it was theirs. By the end of one week running that “deal,” he was out $2,500 with nothing to show for it.
That’s the scheme this article is about.
The Setup
It starts innocently enough. You get added to a WhatsApp group — sometimes 300, 600, a thousand members deep — full of ISOs, funders, and brokers all hunting for the same thing: fresh MCA leads at a price that makes sense. Then someone posts a package labeled “24-hour” or “same day.” Not at market rate. At 80–90% off what real-time data actually costs to produce.
The subscription structure is what makes it especially effective. It’s not a one-time too-good-to-be-true offer you might scrutinize hard before buying. It’s a daily drip — a package lands in your inbox or your DMs every morning, which trains you to stop questioning it after the first few days. The routine does the selling.
The Fraud, Specifically
Doctored timestamps. Leads that are three weeks to a month old — sometimes older — get relabeled “24-hour” or “same day.” The submission date on the record itself gets edited or replaced before it’s repackaged and resold.
Recycled inventory sold on repeat. The same lead file doesn’t get sold once. It gets sold — and re-dated — again and again, to different buyers. That’s how a broker can advertise fifty “24-hour” packages a day at two dollars each: they’re recirculating a much smaller, aging pool and repainting the timestamp every cycle.
No consent trail. Real leads come with a documented opt-in. Stolen or misrepresented leads have none, which means you — the buyer — are exposed if a merchant complains about being contacted without consent.
The Real Cost
Every ISO that gets burned by one of these packages doesn’t just lose the spend — they lose trust in the whole lead-gen channel, which hurts every legitimate operator running compliant, real-time delivery.
What to Actually Look For
Do your due diligence on every provider before you hand over money:
- Get references. Ask for other ISOs or brokers currently buying from them, and actually call those references.
- Run a background check on the provider. Who’s behind the business, and do they have a track record you can verify?
- Check how long their website has been active. A domain that’s a few months old, or recently repurposed, is a red flag.
- Verify timestamps you can independently confirm. Don’t take “24-hour” as a label — ask how the date is captured and whether you can see it.