4 ms·
Yes. I was desperate for work and found a job building out websites for sub-prime auto loan lead generation (yes, the red flags should have been going off, but
by shaftway 5y ago
Yes.
I was desperate for work and found a job building out websites for sub-prime auto loan lead generation (yes, the red flags should have been going off, but I was young and dumb). At first it was just minor HTML changes for the UI. The company had dozens of similar looking websites, so it got harder and harder to manage. Eventually I built a UI framework so the designers could churn out site after shitty site plugging their deals.
Then I turned my attention to the backend. We had essentially been dumping these leads into Excel spreadsheets and someone was manually mailing them out to dealers to contact the victi.... uh.... potential customers. So we built a processing framework to pull credit checks and bundle the information together and send it to dealers in real-time. We also started trying to go after our drop-off by finding abandoned applications and emailing them a few times asking them to come back and finish. All of this was made dirt simple so the designers could tweak the workflow / copy / whatever.
At this point I start doing a major overhaul of the whole thing, so I'm basically heads-down for a few months. I come back and start trying to migrate the old workflow into the new system. I found a few weird extra funnels that had been jammed in, some would effectively email people with their already-filled-out application, urging them to resubmit it. Some for applications from several months before.
That's when it all finally dropped into place for me.
- The owners were defrauding the dealers by soliciting for multiple leads from the same user, often using multiple sites to make the user think they were going to a new company. Each lead submission by a user counted as a new lead.
- Some of the spam made it look like the user hadn't finished filling the form out (even though they had). The email had a handy link to a pre-filled form so the user just had to click submit. Boom, new lead.
- The dealers were reporting defaulted payments to the sales people. These profiles would be looked up and dropped back into the funnel so that right when their car was getting repossessed they'd see spam tailored for people who couldn't afford a car, needed one, and had bad credit because their car had been repossessed.
- Looking at historical data only about 15% of customers were new, the rest were all people caught in this cycle.
I couldn't do it any more. Walked off the job that day. Just dropped everything as it was and left. No malicious actions, but no more help.
Not anonymous (or at least no more anonymous than I usually am). This was a long time ago, and I was young and naive. I didn't realize how my code was going to be used and as soon as I understood I walked away. Now I try to think about how my code will be used and the ethical ramifications of it. It's important to have these lessons.