Here’s the reality of being a mystery shopper, and how to find a company that’s legit