Romance scammers don't improvise. They follow a script — refined across thousands of operations — that's specifically designed to bypass normal skepticism. Understanding it from the inside changes what you notice.
The FTC reported $700 million in romance scam losses in 2024. That number covers people who thought they knew better. People who were careful in other areas of their lives. People who wouldn't have described themselves as easy targets.
These scams work because they're not guesswork — they're structured operations run by professional criminal organizations. Most of them follow the same basic script. Here's what it looks like, stage by stage.
The profile is built before you ever see it. An AI-generated face — produced in seconds using one of several free tools — serves as the profile photo. No need to steal a real person's photos. The face doesn't exist anywhere else on the internet, so reverse image search finds nothing.
The bio is designed to be broadly appealing and non-specific. Mentions of travel, family values, professional success. A backstory that explains why they're on the app: recently divorced, moved to a new city, looking for something real. The occupation sounds impressive — doctor, engineer, contractor, military — and explains why meeting in person will require patience.
The first message, if they send one, is warm and specific to your profile. Not a template-obvious opener. Something that reads like they actually looked at what you wrote.
The goal here is to get the conversation onto a platform where there's no moderation, no reporting mechanism, and no record tied to the original fake account. WhatsApp and Telegram are the most common destinations. Text messaging is also common.
The reason offered sounds reasonable: "I'm not on the app much," or "it's easier for me to stay in touch this way." Both are true in a sense — the app account may get flagged or removed, and external platforms are genuinely easier for running multiple operations simultaneously.
Once the conversation is off the app, the pace often increases. More frequent messages. Longer exchanges. The relationship starts to feel like it's accelerating.
This is the longest stage, and it's where most of the skill goes. The operator — or the script they're running — is creating emotional investment. The goal is a feeling of genuine connection that makes later requests feel reasonable rather than suspicious.
The tactics in this stage:
Attentiveness. They respond quickly, remember things you said, ask follow-up questions. It feels like the most attentive person you've ever talked to. That consistency is the product of professional effort, not genuine interest.
Vulnerability. They share personal things — a difficult past, a loss, something that makes them seem real and emotionally accessible. This is reciprocal vulnerability design. You're more likely to trust someone who's been honest about their struggles.
Exclusivity. You're different from other people they've met. There's something special about this connection. This primes you to protect the relationship rather than question it.
Future orientation. Plans to meet. A vision of what being together would look like. Specific trips, specific timing. These aren't commitments — they're anchors that make the relationship feel real and make walking away feel like losing something concrete.
Throughout the relationship, there's a consistent pattern: they can't meet in person, and they can't reliably video call. The reasons rotate — bad connection, long hours, camera problems, not comfortable on video yet — but the result is always the same.
This matters because it means there's never a moment where the fictional person is tested against reality. No face-to-face. No video where you could notice something wrong. The relationship exists entirely in messages, which are easy to manage.
If you push for video, some operations will use a brief, low-quality call to buy time — sometimes with AI-generated video that's just convincing enough for a few seconds of bad connection. Most will continue with excuses until you accept the pattern.
After enough time has passed, the financial request arrives. The timing isn't arbitrary — it comes when the investment is high enough that the request seems worth it, and when the relationship has been framed in ways that make helping feel natural rather than suspicious.
The ask usually takes one of three forms:
The emergency. A medical crisis. A legal problem. A customs issue with money they need to release. The amount is specific, the timeline is urgent, and wire transfer or gift cards are specifically requested because they're harder to reverse. Banks are suspicious of transfers like this, they'll explain — that's actually the point. The request for an untraceable method is a red flag, not a logistical detail.
The investment opportunity. A cryptocurrency trading platform they've been using that produces consistent returns. They want to share it with you. You send money to the platform, see apparent gains in a fake dashboard, and are encouraged to invest more. When you try to withdraw, there are fees to pay before the money can be released. The platform is entirely fake. This specific variation is called "pig butchering" and it has cost victims billions of dollars globally.
The money relay. They need you to receive a transfer and send it somewhere else — a family member, a business partner, a customs payment. You become a money mule without knowing it, and you're liable for the transfer even though you didn't initiate the fraud.
Pig butchering deserves its own section because it's the fastest-growing romance scam variant and the one most people have never heard of — until they're in it.
The name comes from the practice of fattening a pig before slaughter. The "fattening" here is the period of trust-building. The "slaughter" is the financial extraction. The operations that run these are large, professional, and often based in Southeast Asia.
Here's how it unfolds: After weeks of building a relationship, your contact mentions in passing that they've been making money through a particular cryptocurrency trading platform. They don't push it — they just mention it as something good happening in their life. Over time, they show you screenshots of returns. They offer to help you set up an account.
The platform looks real. It has a professional website, a working login, customer support, and a dashboard that shows your balance growing. You put in a small amount, see returns, and withdraw successfully — this part is real, specifically to build confidence. You invest more. Your balance grows. You invest more still.
When you decide to withdraw a larger amount, there's a fee. Then a tax hold. Then a compliance issue requiring a larger payment to release your funds. These fees keep coming, each one explained by a new regulatory requirement. Your contact encourages you through all of it — they're going through the same thing, they say. Everyone goes through this.
There are no funds. The platform is fake. The balance in your dashboard was a number in a database, not money. Every dollar that went in is gone.
The CISA and FBI have issued multiple warnings about pig butchering operations. Reported losses in the US alone run into the hundreds of millions annually — and most cases go unreported because victims feel too embarrassed to come forward.
The way to avoid it: never invest money based on a recommendation from someone you've met online and haven't met in person. Not crypto, not stocks, not any platform they've introduced you to. No matter how good the relationship feels or how real the returns look.
One thing that helps make sense of these operations: they're running at scale. The person running the account you're talking to is probably running twenty others simultaneously. The warmth and attentiveness you feel is distributed across two dozen conversations. There's a playbook, and experienced operators know when to escalate and when to hold back based on response patterns.
Some of the largest operations use forced labor — people trafficked into scam compounds in Myanmar, Cambodia, and elsewhere who are coerced into running these accounts. The people doing the typing are sometimes victims themselves. This doesn't change what's happening to the person being scammed, but it's worth knowing that "the catfish" is rarely a single individual with a personal grudge. It's an operation, and you're a number in it.
Understanding scale also explains why the photo check matters so much. Operators generating AI faces in bulk for dozens of fake profiles aren't going to produce anything that holds up to a three-second Faux Spy scan. The investment is in the conversation, not the photo. That's the asymmetry you can use.
If you've already lost money and report the scam, or if you mention it in online support communities, you may be targeted by a secondary operation: someone claiming to be a recovery specialist who can get your money back, for a fee. This is the same organization running a second pass. There is no recovery operation. Do not pay.
Stage 1. Before the emotional investment builds, before the relationship has a history, before walking away feels like a loss.
Run a Faux Spy check on the profile photo early. AI-generated faces come back clearly. If the photo is real, a reverse image search can tell you if it's stolen from someone else's account. Together, these checks take about a minute and short-circuit the script before it gets started.
For more on the warning signs throughout the process, see the romance scam warning signs guide. For platform-specific advice, see the guides for Tinder, Bumble, and Hinge.
10 free checks per day. Works on any website in Chrome.
🕵️ Add to Chrome — Free