Investment and crypto scams: how the fake platforms actually work

Australia's National Anti-Scam Centre recorded investment scams as the top category by losses in 2025, well ahead of every other type, and UK Finance reported a sharp rise in investment fraud losses to a record high. The reason is simple arithmetic: people move life savings, pensions and borrowed money into an investment, not the ninety-nine pounds they might lose to a delivery text.

These scams also run for months. A delivery scam takes a minute; an investment scam involves a relationship, regular conversations and a plausible narrative, all of which make the victim an active participant in their own loss and delay the moment of realisation.

The victim signs up through an advertisement, a messaging-app group or a personal introduction, and is given a login to a trading dashboard that looks entirely professional. The numbers on that dashboard are fiction, written by the operators. Nothing is ever invested.

The early withdrawal is the hook. A first request for a few hundred is paid promptly, which proves to the victim that the platform works and encourages a much larger deposit. When a serious withdrawal is attempted, the excuses start: a tax payment, a liquidity fee, an anti-money-laundering deposit, a conversion charge, each of which must be paid in advance and none of which releases anything.

The highest-loss variant starts as a friendship or relationship on a dating app, a wrong-number text or a social platform. There is no investment talk for weeks. Eventually the contact mentions their own success with a trading app, offers to help, and guides the victim through a first deposit on a site or app that only they recommend.

This works because the trust is real to the victim even though the person is not. The tell is structural rather than emotional: an online-only contact who introduces any money-making platform is running this script, regardless of how the relationship feels.

Adverts using well-known presenters, entrepreneurs and public broadcasters are now produced with AI voice and video cloning, and they appear on mainstream social platforms and search results. The face and voice of a trusted person carry no evidential weight whatsoever in 2026.

Cloned firm fraud is more dangerous still. Criminals copy the name, registration number and website of a genuinely authorised financial firm, then contact victims using slightly altered contact details. Always check a firm on the regulator's own register and phone the number published there, never the one you were given.

Look the firm up on the regulator's register yourself, then call the phone number the register lists and ask whether they contacted you. Cloned firms cannot survive this because the real firm answers and says no.

Then apply the structural tests. Guaranteed returns do not exist. Time pressure in a genuine investment does not exist. Payment in crypto, gift cards or to a personal account is never how a regulated firm takes client money. And any platform that charges a fee before releasing your own funds is fraudulent by definition.

Stop paying immediately, including any fee presented as the last step before release. Paying more never recovers what has gone; it is the mechanism by which losses grow. Report to your bank's fraud team the same day and ask about a payment recall, and report to your national body: Action Fraud in the UK, the FTC and IC3 in the US, Scamwatch and ReportCyber in Australia, the Canadian Anti-Fraud Centre, and 1930 or cybercrime.gov.in in India.

Expect a follow-up. Victim lists are resold, and a second wave of criminals will contact you offering to recover the funds for an upfront fee, sometimes posing as a law-firm or a regulator. Recovery scams target the same people twice; no legitimate recovery service asks for money in advance.