While there is growing awareness of the existence and activities of Academic Custom Writing websites, which form a small part of the contract cheating industry, how they work remains poorly understood. Very little research has been done on these sites, probably because it has been assumed that it is impossible to see behind their firewalls and password protection. We have found that, with some close scrutiny, it is indeed possible to find some ‘cracks’ in these sites through which we can look to gain insights into the business processes that operate within them. We have reverse engineered the business processes that operate within some of these sites. From this we have also been able to identify three different business models that are supported by these sites. Our analysis supports important findings about how these sites operate that can be used to inform future strategies to detect and deter contract cheating.