How the approach is engineered
Contact begins on a dating app, a social network, a gaming platform or as an apparently mistaken message. The profile is attractive but not implausible, and the photographs are stolen from real people, often service members, doctors, engineers or small-business owners working abroad. That distance is deliberate: it explains why meeting in person is impossible.
The pace is unusually fast emotionally and unusually slow financially. Within days there are good-morning messages, long conversations and talk of a future. Money is not mentioned for weeks, which is precisely why the eventual request does not feel like a transaction.
- A profile that is appealing but generic, with few tagged friends
- A job that explains being overseas and unreachable by video
- Rapid declarations of feeling in the first days or weeks
- A push to move off the platform to WhatsApp or Telegram
- Constant excuses whenever a live video call is proposed
Why the money request feels reasonable
The first request is usually modest and urgent: a phone top-up, a customs charge on a gift they sent you, a medical bill for a relative, a visa fee, a blocked bank card while travelling. It is framed as temporary and often as their embarrassment at having to ask, which triggers reassurance rather than suspicion.
After the first payment the requests grow and multiply, because a victim who has paid once has demonstrated they will. The most expensive version pivots to investment: the partner is doing well in crypto or trading and offers to help you do the same on a platform only they recommend. That is romance fraud and investment fraud combined, and it produces the largest individual losses recorded anywhere.
- A first small request framed as an emergency
- Customs or shipping fees for a gift you never asked for
- Medical, legal or travel costs with photographic 'proof'
- Requests to receive and forward money (this is money laundering)
- An introduction to a trading or crypto platform they recommend
Verification that works
Run a reverse image search on their photographs. Stolen portfolios usually surface under different names, and that single check ends most cases in under a minute. Ask for a live video call at a time you choose, and treat repeated technical excuses as an answer in itself.
Then examine the structure rather than the feelings. Consistent unavailability for live contact, a story that always has a reason why you cannot meet, and any money request at all from someone you have never met in person are each sufficient grounds to stop. Never send money, gift cards, crypto or card details to someone you have not met, however long you have been talking.
- Reverse image search every photograph
- Insist on a live video call at a time you pick
- Check whether their story details stay consistent over weeks
- Never send money, crypto or gift cards to an unmet contact
- Never let anyone use your bank account to move money
Leaving safely
Stop sending money first, before any conversation about it. Then tell one person you trust; shame is the main reason these scams continue for months, and speaking to someone breaks the isolation the scammer relies on. There is nothing embarrassing about being targeted by an organised team running a rehearsed script.
Expect anger, pleading or threats when the money stops, including threats to publish intimate images if any were shared. Do not pay. Report sextortion to the platform and to police; paying increases demands and never ends them. Block across every channel and keep the messages as evidence rather than deleting them.
- Stop payments before announcing anything
- Tell one trusted person immediately
- Keep messages, photos, profiles and payment records
- Block on every app and do not re-engage under a new account
- Report sextortion threats rather than paying them
Where to report
Report to your bank's fraud team first, because recalls are sometimes possible on recent transfers, and then to your national body: Action Fraud in the UK, the FTC at ReportFraud.ftc.gov and IC3 in the US, the Canadian Anti-Fraud Centre, Scamwatch and ReportCyber in Australia, Netsafe and the Department of Internal Affairs in New Zealand, and 1930 or cybercrime.gov.in in India.
Reporting matters even when recovery is unlikely. It supports account freezes on the receiving side, feeds the intelligence that gets networks disrupted, and creates the record you may need for a bank reimbursement claim.