Is This Wedding Inquiry a Scam? How to Spot the Link Trap

It is a Tuesday in June and you are answering email between culling passes. An inquiry lands: one sentence, a date six weeks out, no venue, no guest count, no mention of how they found you.

You are busy, so you do what you always do and send the price list and calendar link. They book within minutes. They're fast and decisive—the kind of lead you want—followed by radio silence. Then, a message arrives saying that your meeting link doesn't work for them, asking you to use theirs to join instead.

That is the moment the whole thing turns.

In this article:

• What photographers are actually reporting

• The threat is not hypothetical

• Why this works on wedding photographers specifically

• Five signals to check before you reply

• What not to do

• What to do instead

• If you already clicked

• The underlying problem is time

What photographers are actually reporting

A thread on r/WeddingPhotography posted in July 2026 documents this precisely. The photographer received four of these inquiries in a couple of weeks, all by email.

Every one followed the same arc. A vague one-line inquiry arrived with a last-minute date and no real detail. The consultation was booked immediately but then came silence, until a request to use their link instead landed right before the call.

The reasons varied:

• Their partner was out of the country and could not use her Zoom invite, so could she use theirs.

• They had ALS and needed to use a specific app for people with disabilities.

• They said her link was broken. When she sent a fresh one, they ghosted.

• They simply sent a link and asked her to click it. When she declined, they dropped it and disappeared.

Three more tells came out of the thread. The client booked consultations instantly with fake phone numbers in the inquiry form. When the time came, they pressured the photographer to use the link.

One commenter got the identical run-around, but with the link arriving as a Docusign contract.

The threat is not hypothetical

Phishing and spoofing was the most reported crime type in the FBI's 2025 Internet Crime Report, with nearly $21 billion in reported losses. The goal is remote access to your device, from which they get access to your email, your client contracts, your banking, your cloud galleries, and your saved passwords.

The fake meeting page is also a documented delivery method. You land on what looks like a live call. Other participants appear with real join chimes. The audio is degraded so it feels like a connection problem. Then an "update required" prompt triggers a download, and the file installs remote access software.

But legitimate Zoom and Google Meet sessions will never prompt you to download anything during the call. The same goes for DocuSign — legitimate notifications only come from docusign.net domain and should contain a 32-character security code.

Why this works on wedding photographers specifically

You are not falling for it because you are careless. You are falling for it because the scam is engineered around how your business actually runs.

As a photographer,

• You are trained to be accommodating. Wedding clients are stressed, emotional, and often working across time zones and families. Flexing to make someone comfortable is a professional skill, not a weakness. Scammers price that in.

• Peak season destroys your judgment. If you shoot thirty to forty weddings a year, inquiry triage happens in gaps between culling, editing, and delivery. Attention is the scarce resource. A one-line inquiry gets a fast, reflexive reply because slowing down feels expensive.

• A last-minute date is plausible. Six weeks out sounds like a couple whose original photographer cancelled. That is a real thing that happens and it is a real booking opportunity, which is exactly why it is the chosen cover story.

• Thin inquiries no longer register as strange. Between directory listings, ad forms, and social DMs, most photographers field a steady stream of one-line messages that go nowhere. You have been trained to read a vague inquiry as ordinary noise rather than as a warning sign, which is exactly the cover a scammer needs.

Five signals to check before you reply

Run these in about thirty seconds.

1. The detail. Real couples volunteer the venue, the season, the rough guest count, the vibe, and usually how they found you. Scammers give a date and want a call.

2. Urgency without substance. Instant consultation booking paired with zero follow-up questions about your packages, coverage hours, or albums is an immediate red flag. Couples spending five figures ask questions first.

3. Pressure. The single most reliable signal is if someone insists you use their meeting link, their signing platform, or their app. Why they insist does not matter.

4. Fake info. Search the name and email because real couples usually have some footprint. If not, call the phone number they gave you. Scam numbers are frequently dead or disconnected.

5. A reason that makes refusing feel unkind. The ALS claim is the sharpest example. It is deliberately constructed so that saying no feels like discriminating against someone with a serious illness. However, a genuine client with an accessibility need will accept an alternative you propose, such as a phone call. A scammer will insist on one specific link.

What not to do

This is where most photographers lose, and it is worth being explicit.

DO NOT:

• click just to see what it is. Curiosity is the payload. Modern kits fingerprint your device and start the download before you have decided anything.

• rely on hovering over the link. Attackers use lookalike domains built to survive a glance. A tired photographer at 11pm will read us01web-zoom[.]us and zooooom[.]it[.]com as Zoom.

• download anything during a video call. No legitimate meeting platform asks for a mid-call executable.

• argue, negotiate, or explain yourself at length. Every exchange gives them more information about you and more attempts at the ask. One clear sentence, then stop.

• send a contract, a deposit invoice, or a Docusign of your own to an unverified lead. You are training yourself to treat this inquiry as legitimate, and you are handing over a real document with your business details on it.

• accept a check or transfer for more than your quoted price. The overpayment scam is the older sibling of this one. A client overpays, cites an accounting error, and asks you to forward the difference to a "caterer." The original payment reverses days later.

What to do instead

The photographers in that thread who never got close to trouble all had the same thing in common: they had a rule that ran before they had to make a judgment call.

• Require real details before you send anything. Venue, date, guest count, and how they found you. Put these as required fields on your inquiry form. Legitimate couples fill them in without a second thought.

• Make a phone call your first consultation. It is a reasonable, warm-sounding policy that most couples appreciate, and it quietly filters out nearly everything malicious. Scammers cannot use it and will not persist through it.

• Make it a policy to decline. Add a line to your contact page and include something similar in your auto-reply: "As a policy, all consultations are conducted via phone or through a link sent from my account."

• Verify by a second channel before any money moves. If your banking details change, you receive an unexpected contract, or any other payment information changes, always call the number you had from the initial consultation.

• Keep your consultation stack yours. Your calendar tool, your video platform, your contract software. When it is genuinely broken, reschedule rather than switching to theirs.

If you already clicked

Do this immediately:

• Disconnect the machine from the internet.

• Run a full scan with a reputable tool.

• Change passwords for email, cloud storage, gallery delivery, and banking. If possible, do it from a different, clean device.

• Turn on two-factor authentication everywhere.

Do this also:

• Check your email account for forwarding rules or new app permissions you did not create, because that is how attackers keep reading your mail after you change the password.

• Call your bank to tell them what happened, since remote access reaches saved passwords and browser sessions, and a flagged account gets watched for transfers you did not make.

• Report it at ic3.gov (the FBI's Internet Crime Complaint Center), the same day if any money moved. The FBI routes those complaints to a recovery team that works with banks to try to freeze fraudulent transfers, and that window closes in about seventy-two hours.

Consider this as a precaution:

If client work lives on that machine, check your galleries and backups before you assume you are clean. Remote access reaches connected drives and synced folders, so damage done locally can propagate into the copy you would otherwise fall back on. Confirm you still have a version that was not connected when it happened. A wedding is the one job you cannot reshoot.

The underlying problem is time

The reason photographers still get caught is that inquiry triage happens in the cracks of an overloaded post-production schedule. When you are eight hours into culling a 3,000 image wedding, your attention is spent, and a one-line email gets a reflexive reply instead of a careful one.

That is worth taking seriously as a business risk, not just a workflow annoyance. The same fatigue that makes you miss a phishing tell also makes you miss a closed eye in a group shot, misjudge a delivery date, and answer a real inquiry three days late. Protecting your judgment is a business-protection measure.

If your culling is what is eating the hours, Narrative's AI-assisted culling can give those hours back.

A great workflow helps great work flow, and leaves you awake enough to notice when something is wrong.

💜 Try Narrative free today. Sign up to get started — no credit card required.