sourcing scam red flags