§ — Crypto scams · Romance and investment scams

The relationship was the instrument The platform was only a screen.

A crypto romance scam builds a relationship first — romantic, friendly or professional — and introduces the investment later. The victim is directed to a trading platform that looks entirely ordinary, deposits crypto, watches a balance grow, and is encouraged to add more. The balance is a display. The deposits were real, and they left immediately. This page sets out how the con is structured, why the first withdrawal is allowed to succeed, and where the money actually goes — which is also why these cases are more recoverable than most people assume.
Last updated: 1 August 2026Figures as of: 30 July 2026First response: within 2 business hours
Types of crypto theft4 pages
Type 01
Type 02
Romance and investment scams
You are here
§ 01 — The structure

How the con is built.

These are not opportunists. They are organised operations working from scripts refined over thousands of attempts, and the sequence is consistent enough to recognise:

Contact, from somewhere plausible.

A dating app, a professional network, a wrong number that turns into conversation, an investment group. Nothing is asked for.

Week 1

The relationship becomes real to you.

Daily contact, personal detail, consistency. Money is not mentioned, and its absence is itself part of the design.

Weeks to months — the longest and most deliberate phase

The opportunity appears sideways.

Not a pitch — a mention. Their own trading, a family member's platform, an arbitrage method. You ask about it; that is the point.

Reluctance to explain is a technique, not modesty

A small deposit, and a successful withdrawal.

The platform works. The money comes back. Doubt collapses here, and this single step is what the whole operation is built to reach.

The most expensive part of the scheme, for you

Scale.

Larger deposits, encouraged by a rising balance and by someone you trust investing alongside you. Savings, loans, sometimes property.

Weeks to months · this is where the loss is made

The withdrawal is blocked.

A tax, a fee, an anti-money-laundering deposit, a verification payment — always payable before release, always followed by another.

The balance was never money held for you

Silence.

Or, worse, sympathy: the same person offering to help you recover it.

See the warning below — this stage is also monetised

Why the first withdrawal is allowed. It proves the platform is real in the only way that convinces anybody, and it costs the operator a fraction of what it unlocks. It is also why so many victims keep paying "release fees" long after the outcome is obvious — the memory of a withdrawal that worked makes the blockage look procedural rather than fraudulent. If you are being told the money is nearly available, you are at the most expensive moment of the scheme.

§ 02 — The money

Where the money actually went.

Nothing was ever traded. Deposits leave the receiving address almost immediately and are consolidated, split and moved onward — commonly through real exchanges, because at some point the proceeds have to become ordinary money. The balance you watched growing was a number in a web interface with no asset behind it.

This is the good news in a bad situation. Because you sent the funds yourself, every transaction is documented from your own wallet or exchange account — you already hold the evidence. And because these schemes route deposits through services with compliance teams and identified account holders, there is somebody to send a freeze request to and somebody a court can order. Compare that with a rug pull, where the proceeds go through decentralised exchanges with no operator at all. Romance and investment scams sit in the moderate band on our recoverability summary, not the hardest one.

§ 03 — Recovery

What recovery depends on.

FactorWhy it mattersOur timings
How fast the case opensStolen value is only useful once cashed out. Flagged transactions carry a marker into every service that screens depositsflagged within 4 hours of intake
Whether funds are still in a chain of accountsAn exchange can be asked to stop them; a cashed-out withdrawal cannot beexchange freeze request 2–4 days
Whether a police report existsThe formal block that survives scrutiny rests on it, and so does the eventual court order+2–3 days for the formal block
Which chain was usedEthereum, Bitcoin, Tron, BSC, Polygon and Solana are traceable. Monero is not, and we decline those cases
Then, patienceA freeze is not a repayment. The money comes back through a court decision or an issuer's payout process6–9 months from an exchange · 6–36 months if multi-jurisdictional

Full timings, and the cases we have documented, are on our data page. Our published threshold is a loss from $200,000, with smaller cases considered individually — worth noting here because money sent in instalments over months usually totals more than victims first assume.

§ 04 — What to do now

What to do now, in order.

Stop paying. Completely.

No tax, no release fee, no verification deposit, no "final" payment. There is no balance to release, so no payment can free it.

This is the one step with no exceptions

Do not confront them yet.

Accounts are deleted within minutes of being challenged, and the chat history goes with them — often the clearest record of what was promised.

Evidence first, confrontation never necessary

Save everything.

Full chat export, profile and photographs, the platform's site and app links, screenshots of the displayed balance, and above all your transaction hashes and the deposit addresses. The hashes are what we trace; without them there is no investigation.

Export conversations rather than screenshotting, where possible

Report it to the police.

Immediately, and before you feel ready — the report is the foundation the freeze and the court order are built on.

Where and how, by country: our reporting guide

Get the addresses flagged.

Send us the hashes. Flagging happens within four hours of intake; the assessment call is free and may end with us saying there is nothing to pursue.

[email protected] · +971 56 182 9077 · reply within 2 business hours

Tell someone you trust.

Not for the case — for you. Isolation is engineered into this scheme from the first week, and it is what the next approach will rely on.

The shame is manufactured; it is part of the product
§ 05 — The second scam

The approach that comes next.

Victims of this category are re-targeted more heavily than any other, for two reasons: the operators already know exactly how much was lost and how the person responds, and the loss is usually large enough to justify a second operation.

The FBI's Internet Crime Complaint Center has issued repeated advisories about fictitious law firms contacting crypto scam victims and offering to recover funds for an up-front fee. Between February 2023 and February 2024 alone, victims re-targeted this way reported losses of more than $9.9 million. Both are public: PSA240624 and PSA250813.

The rule, and it applies to us. Being contacted is the warning sign — not what the message says. We do not cold-message victims, we are not affiliated with any government agency, and no agency refers cases to us. If someone approaches you in our name, it is not us; report it to IC3. Before engaging anyone, run the ten-point check on our verification page; our registry entries are published in full on credentials.

§ 06 — On shame

On feeling stupid.

Nearly everyone who contacts us about this says a version of the same sentence, usually in the first minute. It is worth answering plainly, because it has a practical consequence.

These operations are run by teams, from scripts, over months, with the specific goal of producing the trust that made the deposits feel reasonable. The professional judgement that serves people well in ordinary life is what the design targets: consistency, reciprocity, the sense that someone who has never asked for anything is unlikely to be asking now. Being deceived by an operation engineered for exactly that is not a character failure.

Why we raise it at all. Shame delays reporting, and delay is the single factor that most reliably destroys recoverability. Every week between the last deposit and the first flagged transaction is a week in which funds move closer to being cashed out. Whatever you decide about pursuing the case, report it now.

§ 07 — Our limits

What we do not do.

Contact victims.

Ever. If we approached you, it was not us.

Reverse transactions.

Nobody can. Funds are frozen after they reach a service with an operator, and returned later by a court or an issuer.

Monero.

It cannot be traced, so we decline rather than bill the attempt.

Chinese OTC channels.

Outside what we can work effectively.

Cases where the source of the funds cannot be confirmed.

Non-negotiable.

Cases with no realistic prospect of recovery.

Declined on the free call.

Legal practice.

Forensics and the evidence base are ours; police reports, freeze filings and court applications are carried out by partner law firms in the relevant jurisdiction.

Guarantees.

Recovery is decided by courts, exchanges and token issuers. Our published figure is 68% success rate on accepted cases · measured over the past 24 months, and the remaining share is real.

Related: all six types of crypto theft and their recoverability · the platform the money was sent to · how a recovery case runs end to end.

§ 08 — FAQ

Questions we are asked about these cases.

It is a fraud in which a relationship is built first — romantic, friendly or professional — and an investment opportunity is introduced inside it later. The victim is directed to a trading platform that looks entirely ordinary, deposits crypto, watches a balance grow, and is encouraged to add more. The balance is a display; the deposits are real and were sent onward immediately. The industry also calls this pig butchering, after the practice of fattening the target before the loss is taken.

§ 09 — Authorship

Who wrote this, and who checked it.

Taras Podhorodetskyi

Founder and CEO, StarCompliance · blockchain investigations since 2022 · speaker, WOW Summit 2024 · interviewed by ForkLog, 23 July 2024

Reviewed by: compliance reviewer — name and role published with the next update of this page.

Disclaimer. This page is informational and is not legal advice. It describes how these schemes generally operate; no assessment of any individual case can be made from a general description. Recovery decisions rest with courts, exchanges and token issuers, and no outcome is guaranteed. Company figures are stated as of 30 July 2026.
§ — Engage

Have a case?
Start an intake.

Response within two business hours. Confidential. Success-fee terms on recovery work.