Case Study: Romance Scams

Yen, TF. ; Jakobsson, M. (2016) — Understanding Social Engineering Based Scams

Synopsis (AI-Generated)

This publication presents a multi-chapter examination of social engineering and related scams, with Case Study: Romance Scams as one of several focal points. It frames the study as part of a broader effort to measure, understand, and counter online fraud, describing tangible data-gathering and analysis approaches used across several scam types. The work situates romance scams within a larger taxonomy that includes sales, rental, business email compromise, and other categories, and it emphasizes the need for empirical measurement, pattern discovery, and intervention points rather than generic warnings. Across the volume, the authors describe a common methodological backbone: automated data collection, pattern clustering, and analysis of attacker infrastructure and monetization. Notably, the sales and rental case studies rely on large-scale crawling of classified-ad platforms, automated honeypot interactions, and conversational engines to elicit and study scam responses. Findings from these chapters highlight that a small number of scam groups account for a large share of activity, that scams often rely on cross-site cloning and fake payment schemes, and that a sizable portion of scammers originate or route through certain geographic clusters. The work also documents gaps in existing defenses and points to concrete levers for disruption, such as targeting prolific scam groups, improving payment-based monitoring, and enhancing brand- and storyline–based detection techniques. Limitations in the presented material include reliance on specific platforms (notably Craigslist-like ecosystems) for measurement and the potential non-generalizability of certain findings to all romance scams or other online fraud domains. The volume argues for continued, methodical measurement and targeted intervention as essential components of fraud prevention, grounded in observed attacker behavior rather than generic advisories. The Romance Scams case study contributes to this empirically anchored, domain-spanning narrative.

Identified Gaps (AI-Generated)

Traditional filters have difficulty identifying low-volume, targeted romance scams, especially affiliate first-round messages that change frequently and use Craigslist pseudonyms. The authors identify a need for scalable detection of reused romance scripts, better attribution, and timely intelligence collection. The study also leaves victim experiences, victim losses, and effectiveness of proposed countermeasures unmeasured.

Methods (AI-Generated)

A 3-month (April–July 2015) case study used magnetic honeypot personal advertisements posted on Craigslist’s men-seeking-women forums. Ads were placed in the 100 slowest U.S. Craigslist cities using 20 accounts. Researchers manually labeled 541 responses into scam categories. During the final 2 months, a simulated spam-filter auto-response measured link clicks and replies and collected IP-address and user-agent information from clickers.

Limitations (AI-Generated)

The evidence comes from responses to deliberately implausible honeypot ads in only the 100 slowest U.S. Craigslist cities, rather than observed victim–scammer interactions. Only 541 responses were collected over 3 months, and just 8 were real responses. Location inferences based on SMTP timestamp/timezone or IP address may not reflect scammers’ true locations; the authors note mail-server timestamps do not necessarily reflect sender timezone and one apparent Canadian source may have used hosting to obscure location.

Future Work (AI-Generated)

Develop low-volume targeted-scam detection using headers, content, and recipient reactions; detect reused romance-scam text segments and automatically expand reuse signatures; improve attack attribution; test user-interface countermeasures; integrate scam filters with honeypots and automated conversations; and strengthen collaboration among service providers, technology organizations, academia, and government.

AI-Generated Content Notice

The synopsis and research notes on this page were generated with AI from available publication information and, when available, the uploaded paper text. They may contain errors, omissions, or interpretation issues. Readers should follow the DOI or source link, review the original publication, and make their own judgment about the content.

Found a possible error? Request a correction.