Dual use tech, How to prevent misuse?

[dyumnin]

I recently had a technical discussion with a potential client.

While reviewing the requirements offline I realized that while the client has described  a legitimate use case, with a slight change in configuration the design also has a dual use as a credit card/banking data skimmer!

How do you handle such projects? The options as I see it are:

1. Trust what an unknown stranger on internet tell's you about his intent.
2. Do extra due diligience about the client, Clients wont like it + The extra effort is not worth the project amount.
3. Sign a contract to deliver the project code as a non-modifiable binary, tailor made for their usecase. May conflict with UpWorks TOS.
4. Withdraw my proposal.

[AleksandarD]

Hi Vijayvithal,

Could you please send me a private message with more information on this so that I can check and assist you further?

Thank you.