How-to

Mystery shopper service for a small business: test your own calls, forms and DMs

A mystery shopper service sends someone to contact a business as an ordinary customer and report what happened. A small business can do the same for itself with three tests: a phone call, a web form or text, and a social media message, each with a short script and a scorecard. Test only your own business, or one whose owner has agreed. Tell your team that tests happen, and never record a call unless everyone on it knows.

By Plato Belmont, founder of Magnet Mint, Boston. Updated

What a mystery shopper service is, and what this guide covers

A mystery shopper service hires people to contact or visit a business as ordinary customers and then report what happened. The FTC describes it as work done mostly for retailers and restaurants: the shopper tries the product or service, then reports on the experience. The value is simple. The owner rarely sees what a stranger sees, and a stranger’s view is the one that decides whether the customer books.

You do not need to hire anyone to learn the basics. This guide shows how to test your own business by phone, web form, text and social message, using a script and a scorecard. It is one part of our how customers see you series, and it feeds stages 4 and 5 of the customer experience audit.

A word on mystery shopping scams

If you landed here because someone offered you a “secret shopper” job and sent a check, stop. The FTC warns that legitimate mystery shopping is occasional part-time work, that honest companies pay workers rather than charging them, and that any upfront fee, any request to deposit a check and send money back, and any guaranteed income are red flags. You can report a scam at ReportFraud.ftc.gov. The same FTC advice applies if you plan to hire a provider: search the company name with words like “review”, “complaint” and “scam” first.

The rules: test only your own business

Read these before you make the first call.

  1. Test your own business, or one whose owner has agreed. Do not pose as a customer to a competitor. It takes their time under a false pretense, and you cannot fix what you find. Study competitors through their public site, listings and reviews instead.
  2. Tell your team that tests happen. Say it plainly: we test the phone, the forms and the messages from time to time, to fix the process. Do not say when. Never use a test to catch out one person.
  3. Do not record calls unless everyone on the call knows. Massachusetts requires all parties to a phone call to agree, according to the Reporters Committee for Freedom of the Press. It says illegal recording can bring a fine of up to $10,000 and up to five years in jail. The same summary says the law applies to secret recordings, so a call where everyone knows it is recorded is different. Other states have their own rules, and several also require everyone’s consent. The simple answer is to take written notes with times instead of recording. This is not legal advice.
  4. A test is not a review. Do not post a review of your own business. The FTC’s final rule on fake reviews, announced on August 14, 2024, prohibits fake reviews and reviews from company insiders who do not disclose their connection.
  5. Use your own details or a willing friend’s. Never use another person’s name, number or payment details. If a friend makes the test, get their agreement first and tell them what you will do with their number.
  6. Never fake an emergency. If you run an emergency line, test the process with a clearly labeled test or on a quiet evening with your on-call person told in advance, not with a made-up crisis.
  7. Clean up after. Cancel any test booking so it does not hold a real slot. Delete the test contact from your CRM so no follow-up goes to a test number. Mark test leads so they do not count in your lead numbers.

Set up the test

Write one scenario card per test so every test is comparable. A card has four lines.

  • Who I am: a plain customer in your area. Use a first name only.
  • What I want: a normal job you really do, such as “a quote for a water heater replacement” or “a first appointment for teeth whitening”.
  • One detail the business must handle: a price question, a service-area question or a time constraint, such as “I need it done before the weekend”.
  • What I will do next: book, ask for a quote, or say “I will think about it”.

Run three tests per channel at different times: a weekday late morning, a weekday evening and a Saturday. Make each test from a phone number the business does not know, ideally a friend’s.

Script 1: the phone call

Say what a customer would say. Do not trick the person answering.

“Hi, I’m looking for a quote on [job]. I’m in [town]. Do you do that, and roughly what does it cost?”

Then follow wherever the call goes, and note the following on a scorecard.

What to noteWhy it matters
Rings before an answer, or voicemailShows whether the call reaches a person
Greeting: business name, a person’s nameA caller who is unsure they dialed correctly hangs up
Did they ask for your name and number?Without it there is no callback
Did they answer the price or “it depends” question?A reasonable range is better than “someone will call you”
Did they offer a next step with a time?A booked slot beats a promise to call back
If voicemail: does the message give hours and a callback promise?Tells the caller what happens next
Did anyone call back, and when?The real reply time

Hang up politely if the call goes to booking, and cancel straight after. If you have an AI phone assistant or a call-answering service, test it the same way and check that it says it is an AI assistant and offers to take a message or reach a person.

Script 2: the web form

Fill in your own form from your phone, as a customer would.

Name: [first name]. Phone: [test number]. Message: “I’d like a quote for [job] in [town]. Is [day] possible? What does it usually cost?”

Note these things.

  • The confirmation: does the page say what happens next and when? Or does it just say “Thank you”?
  • The auto-reply: does one arrive, and does it come from an address a customer recognizes?
  • Where the notification went: check every inbox, including spam and the old address nobody reads.
  • The human reply: the time from sending to a person answering, and whether the reply answered your question or only asked you to call.
  • Forms with required fields: count them. Every extra required field is a reason to stop.

Our guide to speed to lead has target reply times by channel to compare against. If the form works and leads still do not arrive, see why your website is not getting leads.

Script 3: text and social messages

Send these from an account the business does not know. Test each channel you advertise: SMS to your business number, Instagram and Facebook messages, WhatsApp, website chat.

“Hi, do you have availability this week for [job]? Roughly what does it cost?”

Note whether anyone is watching the inbox, how long the first reply takes, whether an automatic reply says when a person will answer, and whether the answer is useful or just a request to call. If the reply comes from an AI assistant, check that it says so, that it gives approved answers and that it hands off to a person for anything it cannot answer. If your business texts customers automatically, use your own number for the test so the consent for those texts is yours.

Score it and decide

Keep the scorecard to three numbers per test: time to first human reply, whether the customer’s question was answered, and whether the next step was clear. Then put the tests side by side.

  • A pattern beats a single result. One slow reply may be a busy day. Slow replies at six in the evening on three tests is a gap in coverage.
  • Fix the process, not the person. Most bad results come from a phone that rings at one desk, a form that emails an old address or nobody owning Instagram.
  • Our guide to what missed calls cost shows how to put a number on what a gap like that loses.

Mystery shopper service or do it yourself?

Doing it yourself costs nothing but an afternoon, and it finds the broken things: dead forms, ignored inboxes, voicemail with no hours. Its limit is that you are not a stranger, and a test from a friend’s phone is only as good as the friend’s notes.

An outside tester brings fresh eyes, a consistent method and written findings. That is what our “How customers see you” check does. We contact your business as a customer would, with the number and form you agree with us beforehand. The standard check costs from $395 and includes one test call and one test inquiry, plus your website, your listings and what AI assistants say about you, with written findings. The deep version ($750-$1,500) adds several test inquiries across channels, a competitor comparison and a prioritized fix plan. You can also run the AI part yourself with our 30-minute ChatGPT self-test.

If you are not sure which route fits, ask for a free demo (30-minute call; demo shared within 3 business days).

Published . Updated .

Frequently asked questions

What does a mystery shopper service do?

It contacts or visits a business as a normal customer, follows a script or checklist, and reports what happened. The FTC describes mystery shoppers as people hired by retailers and restaurants to try products or services and report on the experience.

Is a mystery shopping service legit?

Legitimate mystery shopping exists, and honest companies pay shoppers instead of charging them, according to the FTC. Fake mystery shopper job offers that send a check and ask you to send money back are a well-known scam. Before you hire or join any provider, search its name with words like "review", "complaint" and "scam".

Is it legal to mystery shop my own business?

Contacting your own business as a customer is not a legal problem. The risks come from how you do it: recording calls without telling the other person, posting fake reviews, or testing someone else's business without permission. This is not legal advice, so ask your lawyer if you are unsure.

Can I mystery shop my competitors?

We recommend against it. You would take a competitor's time under a false pretense, and the findings are of little use because you cannot fix their business. Read their public website, listings and reviews instead, which anyone can do openly.

Do I tell my staff?

Yes. Tell them that tests happen from time to time and that the goal is to fix the process, not to catch a person. Do not tell them when a test is coming, or the result will not be real.

How often should I run these tests?

Run the full set once now, then a short version every quarter and after any change to your phone system, website form, booking tool or staffing.

Sources

  1. FTC Consumer Advice: Mystery Shopping Scams (July 2022), October 2026
  2. Reporters Committee for Freedom of the Press: Massachusetts recording guide (last updated August 2021), October 2026
  3. FTC: Federal Trade Commission announces final rule banning fake reviews and testimonials (August 14, 2024), October 2026

Related reading

Start with a free demo

See how customers and AI assistants see your business today.

A short call, then a demo for your business: what customers find, what AI answers say, and where you lose leads. No obligation.