How romance scammers exploit trust

Across the reviewed evidence, romance fraud and relationship-based investment scams often involve staged social engineering: deceptive profiles, grooming, tests of willingness to comply, and financial requests. Descriptive work distinguishes fabricated personal emergencies from fraudulent investment platforms. These are recurring patterns, not a sequence followed by every deceptive online relationship. Research in Iran describes a separate sexual-exploitation pathway, including coerced imagery, unwanted sexual activity during meetings, and sexual contact obtained through a false promise of marriage. An Indian case study documents transitions from digital relationships to physical encounters involving financial pressure, coercion, and sometimes violence; its authors call for comparisons beyond India. The evidence includes victim reports, offender ethnography, conversations with researchers, experiments, survivor interviews, and blockchain tracing. These methods reveal different aspects of attacks and do not jointly establish prevalence or the independent effect of each tactic (Abubakari, 2024; Amirkhani et al., 2025; Dickinson et al., 2023; Dreijers & Rudziša, 2020; Faber, 2024; Franceschini et al., 2023; Stern & Choi, 2026; Verma et al., 2026; Wang & Zhou, 2022; Whitty, 2013a).

Reproducible staged progression of attacks

Multiple empirical and analytic studies converge on a multi‑stage progression used by many relationship‑based scammers: (1) creation of a deceptive profile and initial contact, (2) grooming and rapport building through personalized interaction, (3) small initial requests or information probes to test compliance, and (4) escalation to monetary requests or staged investment propositions that culminate in extraction and possible re‑targeting or recovery fraud (Dickinson et al., 2023; Dreijers & Rudziša, 2020; Wang & Zhou, 2022; Whitty, 2013a).

Classic stage models and corpus/discourse analyses place explicit monetary requests toward later correspondence stages, and experimental live‑interaction work shows offenders adapt strategies responsively as perceived reward or target behavior changes—supporting a dynamic, feedback‑sensitive sequence rather than a single rigid script (Dickinson et al., 2023; Dreijers & Rudziša, 2020; Wang & Dickinson, 2024).

Profile construction and initial approach

Scammer profiles often reuse formulaic narrative material in the free‑text, self‑description sections of dating or social profiles. Corpus analyses that compare identified scammer narratives with general user profiles find a narrower vocabulary range and higher keyness for personal‑attribute adjectives (for example, ‘‘honest’’ and ‘‘loving’’), consistent with repeated or templated wording rather than fully idiosyncratic presentation. Case‑based reconstructions additionally report impersonated social‑network accounts used to approach and identify targets and preparatory actions such as searching for targets and drafting scenario scripts. These findings describe patterns in analyzed profile narratives and reconstructed case documents, not a complete taxonomy of all profile‑features or demonstrated causal effects of any single profile element on victim selection (Kim & Seo, 2019; K. F. Lee et al., 2022).

Empirical studies report that most romance‑fraud campaigns initiate on dating or social‑networking sites and that offenders commonly attempt to move correspondence off the hosting platform to encrypted or private channels (for example, WhatsApp or private messaging) to reinforce exclusivity and reduce platform detection (Cross, 2018; Dickinson et al., 2023; Gillespie, 2017; Walther & Whitty, 2020).

Verified‑profile experiments and comparative corpus work examined static profile features by directly comparing known scammer profiles with verified genuine profiles. One corpus‑based study compared 500 user profiles identified as having fraudulent characteristics with 500 user profiles downloaded from five popular dating portals. A separate experimental study used 20 verified scammer profiles and 20 known real profiles matched on gender and age (K. F. Lee et al., 2022; Whitty, 2019).

Grooming mechanics and persuasive tactics

Grooming routinely uses personalized attention, exaggerated romantic language (love‑bombing), and narratives invoking sympathy or shared identity. Corpus and qualitative studies document repeated scripted language, time pressure, manufactured crises (medical bills, travel or customs problems), and appeals to purported authorities to legitimize requests (Annadorai et al., 2020; Faber, 2024; Walther & Whitty, 2020; Wang & Topalli, 2022; Whitty, 2013b).

Reported cases describe emotionally engaging communication used to establish credibility before financial or coercive exploitation, while another account describes affectionate language and sympathy-based financial requests. Comparative analysis distinguishes fabricated urgent scenarios involving direct money requests from investment-focused schemes. In a study of fraudsters’ email responses, all participants at some point urged continued correspondence or faster responses, and researchers found that fraudsters altered their behavior repeatedly as potential reward, represented by victim behavior, fluctuated. Script completion also varied: in another study, 31 of 53 fraudsters reached the crisis stage and completed the script, while 22 did not. These findings document recurring persuasive devices and adaptive behavior in the studied interactions rather than a single invariant sequence (Abidin et al., 2018; Dickinson et al., 2023; Faber, 2024; Verma et al., 2026; Wang & Zhou, 2022).

Escalation, compliance testing, and extraction mechanics

Tactical escalation commonly follows a foot‑in‑the‑door pattern: small early requests or informational probes (for example, photographs or minor gifts) serve as compliance tests and precede larger financial demands. Message‑corpus analyses and victim‑report studies show that explicit money demands tend to appear after rapport has been established or after a reward cue, and repeated or additional money requests are a frequent trigger for victims to recognize fraud (Cross, 2023; Dickinson et al., 2023; Dreijers & Rudziša, 2020).

In investment‑focused variants, offenders sometimes stage early apparent profits and permit small test withdrawals to build confidence prior to inducing larger deposits; withdrawal attempts are then blocked or delayed with successive fee or tax pretexts that extract further funds or prevent recovery (Anderson et al., 2024; Botha et al., 2025).

Pig‑butchering and hybrid investment variants

A hybrid pathway documented in several studies redirects relationship‑building into fabricated investment or trading platforms. Analyses characterize this variant as involving distinct phases—initial contact and hunting, nurturing or fattening through longer‑term grooming and staged small gains, and a harvesting phase that steers victims into fraudulent trading or gambling apps. These studies report that offenders teach targets to use fake platforms and that investment‑framing differentiates some regional variants from forms that rely mainly on direct urgent money requests; the description reflects reported case material and comparative interpretation rather than a claim that every romance fraud follows this path (Wang & Zhou, 2022).

Escalation, compliance testing, and extraction mechanics (investment variants)

For investment‑focused variants documented in forensic and case analyses, researchers report operational patterns in which apparent early profits or successful small trades are displayed to build victim confidence and permit small test withdrawals; following encouragement to invest larger sums, withdrawal attempts are often met with additional fee or tax pretexts in the reported cases. Blockchain‑forensics case studies also identify recurring transaction patterns in traced address networks (for example, short relay paths and rapid pass‑through behavior at intermediary addresses) and use thematic analysis to describe aggregation and redistribution patterns in some traced networks. These findings derive from specific case analyses and forensic tracing and should be interpreted as documented operational patterns in those studies rather than as proven, universal mechanics across all investment‑framed romance fraud (Botha et al., 2025; Parti et al., 2026; Stern & Choi, 2026).

Organizational forms, offender perspectives, and role differentiation

Evidence from offender and survivor accounts and transaction‑architecture analyses documents that relationship‑based scams commonly involve organized, specialized syndicate structures and staged operational chains. Recruited individuals are assigned to distinct groups responsible for victim communication, personal‑data resources, IT/telecom support, and money laundering, and operations typically follow sequential stages: organizational formation, organizational operation, target selection and relationship building, fund solicitation and extraction, transfer of victim funds, distribution of proceeds, and evasion of investigation. Survivor interviews from scam compounds in Cambodia, Myanmar, and Laos corroborate accounts of recruitment, division of labor, and staged operations, and thematic blockchain‑forensics analysis of financial flows has identified recurring patterns such as aggregation, redistribution, layering, balance retention, mining‑pool exposure, and internal connectivity. Additionally, offenders use multiple communication channels to increase perceived legitimacy and reinforce victim trust and compliance (Cross, 2018; Franceschini et al., 2023; H. Lee & Boo, 2025; Stern & Choi, 2026; Wang & Zhou, 2022).

Offender‑perspective studies also note socialization and neutralization mechanisms that facilitate entry and persistence: peer training, economic pressures, rationalizations (game, livelihood, or restitution narratives), and organized recruitment channels. Several offender‑focused empirical studies caution about generalizability because samples are purposive and often hotspot‑based, but they nonetheless document patterns of specialization and sometimes coercive labor recruitment in large compound operations. In a study of 50 convicted online romance-fraud offenders, 80% reported learning tactics through friends, and financial need was recorded as the primary motivation for all 50. These findings describe the studied offenders, not population rates or evidence that financial need causes offending (Franceschini et al., 2024; Han, 2026; Luo & Zhao, 2025; Soares & Lazarus, 2024; Toku & Otu Offei, 2023).

Methodological patterns, limitations, evidence gaps, and future directions

Research has employed survivor interviews, systematic review, and blockchain transaction analysis. A review identified common scammer profile features and techniques, countermeasures, and factors associated with becoming a scammer or a victim. One study used 32 in-depth interviews with survivors of scam compounds in Cambodia, Myanmar, and Laos. Another analyzed the internal transaction structure of 29 sanctioned Bitcoin addresses linked to the Prince Group and Chen Zhi. One finding across studies is that requests for money typically appear near the end of romance scams (Bilz et al., 2023; Dreijers & Rudziša, 2020; Franceschini et al., 2023; Parti et al., 2026).

Authors identify gaps in research drawing directly on fraudsters, in knowledge of pig-butchering conversations and persuasion, and in investigation of risk-avoidance behavior. A study of convicted offenders likewise notes limited investigation of offender perspectives. Experimental work has measured personal identity claims, requests to move channels, victim identity, relationship framing, follow-up, and message length. Another proposed direction is to interview fraudsters about their incentives and compare the findings with experimental results. Research on romance fraud in India identifies limited attention to how digitally initiated interactions translate into offline harm and cautions against treating online and offline environments as analytically separate. Comparative research is needed to assess whether the reported interactional patterns extend beyond India (Dickinson et al., 2023; Dove, 2024; Soares & Lazarus, 2024; Verma et al., 2026; Wang & Dickinson, 2024; Wang & Zhou, 2022).

Different research methods document distinct kinds of evidence. Small, in-depth qualitative or forensic studies can reveal operational detail of scams, as shown by interviews with 32 scam-compound survivors and calls for more linguistic analysis of fraud cases. Experimental or corpus-based studies can test specific mechanisms, as when dependent measures captured fraudsters’ strategies such as identity claims, requests to move channels, relationship framing, follow-up, and message length. Blockchain-forensics analyses can identify recurring behavioral patterns (for example, aggregation, redistribution, layering, balance retention, mining-pool exposure, and internal connectivity) (Faber, 2024; Franceschini et al., 2023; Stern & Choi, 2026; Wang & Dickinson, 2024).

Online-to-offline transitions and setting-specific harm

Digitally initiated romance fraud can extend into physical encounters rather than remaining an online payment scheme. In an Indian study of 35 reported cases, 25 contained sufficient evidence of a transition into a physical setting; 10 remained primarily digital, including online extortion, sextortion, and fraudulent investment or payment schemes. Within the cases that transitioned offline, public encounters more commonly involved immediate financial pressure and social coercion. Private encounters offered greater control over the interaction and were sometimes associated with robbery, extortion, or physical violence. These are patterns within the reported case set, not prevalence estimates or proof that the setting caused the harm. Public meetings therefore should not be interpreted as eliminating risk. The authors call for comparative research to establish whether similar interactional patterns occur beyond India (Verma et al., 2026).

Sexual exploitation through purported relationships

A study of dating scams targeting sexual access in Iran analyzed interviews conducted in Persian and translated into English using qualitative content analysis. Participants described false marriage intentions and three forms of exploitation: coerced sexting or sexual imagery, unwanted sexual activity during in-person meetings, and sexual activity obtained through a false promise of marriage. Accounts also describe meetings in private locations familiar to scammers without ready bystander intervention, and using a father’s phone number to enforce sexual demands. These are accounts within a particular study, not prevalence estimates or a universally established definition of romance fraud (Amirkhani et al., 2025).

Extortion through gay dating platforms in India

A paper on gay dating platforms in India describes sexual-image threats used to demand money or sexual favors, and use of profile photos or identifying information for impersonation, blackmail, and threats to disclose identity to family. It cites a mixed-methods study involving men who have sex with men, transgender women, and hijras in India that described victimization by sexual partners met online, including theft, assault, forced sex, extortion, and blackmail. It also describes a hookup scenario involving several people threatening outing or assault to obtain valuables. The paper reports limited empirical research and no official statistics, so these descriptions cannot establish population frequencies (Sinha-Roy & Ball, 2021).

Identifying information beyond public profiles

A review of imposter scams describes gathering identifying information through search engines and public social-media content, as well as buying information from data brokers. This broadens the preparatory methods beyond details disclosed in a conversation. The excerpt does not measure how frequently romance scammers buy such information (Shapiro, 2025).

Distinguishing financial fraud from other catfishing

One survey defined dating or romance scams through payment to someone believed to be a romantic partner. Catfishing accounts include other motives: one participant described creating false accounts to check whether a boyfriend was unfaithful, while another reported catfishing for monetary benefit using fake images. These examples distinguish a financial definition of romance scams from broader uses of deceptive profiles; neither the accounts nor the survey definition establish how common each motive is (Gainsbury et al., 2018; Simmons & Lee, 2020).

References

• Abidin, N. Z., Kamaluddin, M. R., Shaari, A. H., Din, N., & Ramasamy, S. (2018). Pengetahuan dan Amalan Perlindungan Pengguna Facebook Wanita Terhadap Penipuan Cinta di Malaysia [Knowledge and Protective Practice Towards Love Scam Among Female Facebook Users in Malaysia]. Jurnal Komunikasi: Malaysian Journal of Communication, 34(4), 113–133. https://doi.org/10.17576/jkmjc-2018-3404-07 Publication record
• Abubakari, Y. (2024). Modelling the modus operandi of online romance fraud: Perspectives of online romance fraudsters. Journal of Economic Criminology, 6, 100112. https://doi.org/10.1016/j.jeconc.2024.100112 Publication record
• Amirkhani, S., Alizadeh, M., Randall, D., Stevens, G., & Zytko, D. (2025). "Society Encourages the Killing of Girls Like Me": Layers of Victimization in Online Dating Romance Scams in Iran That Target Sexual Access Over Financial Gain. Proceedings of the ACM on Human-Computer Interaction, 9(7), 1–25. https://doi.org/10.1145/3757538 Publication record
• Anderson, M., March, E., Land, L., & Boshuijzen-van Burken, C. (2024). Exploring the roles played by trust and technology in the online investment fraud victimisation process. Journal of Criminology, 57(4), 488–514. https://doi.org/10.1177/26338076241248176 Publication record
• Annadorai, K., Krish, P., Shaari, A. H., & Kamaluddin, M. R. (2020). Mapping Computer Mediated Communication Theories and Persuasive Strategies in Analysing Online Dating Romance Scam. Journal of Xidian University, 14(5). https://doi.org/10.37896/jxu14.5/070 Publication record
• Bilz, A., Shepherd, L. A., & Johnson, G. I. (2023). Tainted Love: a Systematic Literature Review of Online Romance Scam Research. Interacting with Computers, 35(6), 773–788. https://doi.org/10.1093/iwc/iwad048 Publication record
• Botha, J. G., Singh, K., & Leenen, L. (2025). Analysis of a Cryptocurrency Investment Scam: Pig Butchering. European Conference on Cyber Warfare and Security, 24(1), 61–70. https://doi.org/10.34190/eccws.24.1.3558 Publication record
• Cross, C. (2018). (Mis)Understanding the Impact of Online Fraud: Implications for Victim Assistance Schemes. Victims & Offenders, 13(6), 757–776. https://doi.org/10.1080/15564886.2018.1474154 Publication record
• Cross, C. (2023). “I knew it was a scam”: Understanding the triggers for recognizing romance fraud. Criminology & Public Policy, 22(4), 613–637. https://doi.org/10.1111/1745-9133.12645 Publication record
• Dickinson, T., Wang, F., & Maimon, D. (2023). What Money Can Do: Examining the Effects of Rewards on Online Romance Fraudsters’ Deceptive Strategies. Deviant Behavior, 44(9), 1386–1400. https://doi.org/10.1080/01639625.2023.2197547 Publication record
• Dove, M. (2024). Scam Techniques in Pig Butchering Scams: Case Study. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.5015196 Publication record
• Dreijers, G., & Rudziša, V. (2020). Devices of Textual Illusion: Victimization in Romance Scam E-Letters. Research in Language, 18(1), 1–13. https://doi.org/10.18778/1731-7533.18.1.01 Publication record
• Faber, P. (2024). The Frames of Romance Scamming. Research in Language, 22(1), 1–23. https://doi.org/10.18778/1731-7533.22.1.01 Publication record
• Franceschini, I., Li, L., & Bo, M. (2023). Compound Capitalism: A Political Economy of Southeast Asia’s Online Scam Operations. Critical Asian Studies, 55(4), 575–603. https://doi.org/10.1080/14672715.2023.2268104 Publication record
• Franceschini, I., Li, L., Hu, Y., & Bo, M. (2024). A new type of victim? Profiling survivors of modern slavery in the online scam industry in Southeast Asia. Trends in Organized Crime. https://doi.org/10.1007/s12117-024-09552-2 Publication record
• Gainsbury, S. M., Browne, M., & Rockloff, M. (2018). Identifying risky Internet use: Associating negative online experience with specific online behaviours. New Media & Society, 21(6), 1232–1252. https://doi.org/10.1177/1461444818815442 Publication record
• Gillespie, A. A. (2017). The Electronic Spanish Prisoner. The Journal of Criminal Law, 81(3), 217–231. https://doi.org/10.1177/0022018317702803 Publication record
• Han, B. (2026). Romance Fraud in China. Critical criminological perspectives, 193–211. https://doi.org/10.1007/978-3-032-13210-9_11 Publication record
• Kim, H.-S., & Seo, J.-B. (2019). 로맨스 스캠(Romance Scam) 범죄 현황 및 대응방안에 대한 고찰 [A Study on Romance Scam: The Current Situation and Effective Countermeasures]. The Police Science Journal, 14(3), 117–146. https://doi.org/10.16961/polips.2019.14.3.117 Publication record
• Lee, H., & Boo, M. (2025). Analyzing the Evolving Modus Operandi of Romance Scams via Court Judgments: Crime Script and Policy Implications. KOREAN CRIMINOLOGICAL REVIEW, 36(4), 131–166. https://doi.org/10.36889/kcr.2025.12.31.4.131 Publication record
• Lee, K. F., Chan, M. Y., & Mohamad Ali, A. (2022). Self and desired partner descriptions in the online romance scam: a linguistic analysis of scammer and general user profiles on online dating portals. Crime Prevention and Community Safety, 25(1), 20–46. https://doi.org/10.1057/s41300-022-00169-7 Publication record
• Luo, Q., & Zhao, Y. (2025). Butcher or be butchered: understanding the unwitting recruitment by cybercrime groups in China. Trends in Organized Crime. https://doi.org/10.1007/s12117-025-09568-2 Publication record
• Parti, K., Choi, S., & Dearden, T. (2026). Analyzing Modern Scam Typologies: From Pig-Butchering and Nigerian Advance-Fee Fraud to Crypto Airdrop Schemes. International Journal of Cybersecurity Intelligence & Cybercrime, 9(2). https://doi.org/10.52306/2578-3289.1248 Publication record
• Shapiro, L. R. (2025). Cyber-enabled imposter scams against older adults in the United States. Security Journal, 38(1). https://doi.org/10.1057/s41284-025-00483-3 Publication record
• Simmons, M., & Lee, J. S. (2020). Catfishing: A Look into Online Dating and Impersonation. Lecture Notes in Computer Science, 349–358. https://doi.org/10.1007/978-3-030-49570-1_24 Publication record
• Sinha-Roy, R., & Ball, M. (2021). Gay Dating Platforms, Crimes, and Harms in India: New Directions for Research and Theory. Women & Criminal Justice, 32(1-2), 49–65. https://doi.org/10.1080/08974454.2021.1970696 Publication record
• Soares, A. B., & Lazarus, S. (2024). Examining fifty cases of convicted online romance fraud offenders. Criminal Justice Studies, 37(4), 328–351. https://doi.org/10.1080/1478601x.2024.2429088 Publication record
• Stern, M., & Choi, K.-S. (2026). Three-Tier On-Chain Transaction Architecture in a Sanctions-Linked Pig-Butchering Network: A Blockchain-Forensics Case Study. International Journal of Cybersecurity Intelligence & Cybercrime, 9(2). https://doi.org/10.52306/2578-3289.1249 Publication record
• Toku, L., & Otu Offei, M. (2023). Service, game and livelihood, the new dimensions of neutralization techniques in Internet Romance Fraud: Extending the Neutralization Theory in Modern Internet crimes. International Journal of Technology and Management Research, 8(1), 14–35. https://doi.org/10.47127/ijtmr.v8i1.182 Publication record
• Verma, S., Gujarathi, P., & Lazarus, S. (2026). Romance fraud in India: A qualitative study of online–offline transitions in the digital dating ecosystem. Journal of Economic Criminology, 14, 100248. https://doi.org/10.1016/j.jeconc.2026.100248 Publication record
• Walther, J. B., & Whitty, M. T. (2020). Language, Psychology, and New New Media: The Hyperpersonal Model of Mediated Communication at Twenty-Five Years. Journal of Language and Social Psychology, 40(1), 120–135. https://doi.org/10.1177/0261927x20967703 Publication record
• Wang, F., & Dickinson, T. (2024). Hyperpersonal feedback and online romance fraud: an empirical examination. Journal of Crime and Justice, 48(3), 371–389. https://doi.org/10.1080/0735648x.2024.2376700 Publication record
• Wang, F., & Topalli, V. (2022). Understanding Romance Scammers Through the Lens of Their Victims: Qualitative Modeling of Risk and Protective Factors in the Online Context. American Journal of Criminal Justice, 49(1), 145–181. https://doi.org/10.1007/s12103-022-09706-4 Publication record
• Wang, F., & Zhou, X. (2022). Persuasive Schemes for Financial Exploitation in Online Romance Scam: An Anatomy on Sha Zhu Pan (杀猪盘) in China. Victims & Offenders, 18(5), 915–942. https://doi.org/10.1080/15564886.2022.2051109 Publication record
• Whitty, M. T. (2013a). Anatomy of the online dating romance scam. Security Journal, 28(4), 443–455. https://doi.org/10.1057/sj.2012.57 Publication record
• Whitty, M. T. (2013b). The Scammers Persuasive Techniques Model: Development of a Stage Model to Explain the Online Dating Romance Scam. British Journal of Criminology, 53(4), 665–684. https://doi.org/10.1093/bjc/azt009 Publication record
• Whitty, M. T. (2019). Who can spot an online romance scam?. Journal of Financial Crime, 26(2), 623–633. https://doi.org/10.1108/jfc-06-2018-0053 Publication record

This AI-assisted synthesis is based on reviewed evidence records. It may contain errors or omissions. Follow the publication and DOI links, consult the original works, and make your own judgment about the evidence.