The long con, act by act

This category runs for weeks or months and produces the largest individual losses of anything in the space.

What separates it from every other playbook: nobody impersonates any institution at any point. They are an ordinary person you get on with. Which is why everything in the "spot the fake official" toolkit is completely useless here.

Act one: the meeting

The opening is almost always a plausible accident: a wrong number, a job enquiry, a dating app match, a conversation in a local group, or "aren't you a friend of so-and-so".

Their profile looks complete and unremarkable — photos of a life, a job, regular posts. That material is usually taken from somewhere else.

What this act achieves: an opening with no money in it. Mention money in the first message and you would be alert immediately.

Where it breaks: reverse image search their photos. A minute of work, and it filters out a meaningful share.

Act two: the build

Over the following weeks you talk about life, work, circumstances. They are patient, steady and attentive — usually more patient than the real people around you, because this is their job.

Money does not come up. Occasionally a detail suggests comfortable circumstances, without explanation.

What this act achieves: moving the relationship from "a stranger" to "someone I know". The standards people apply to someone they know are visibly looser, and that is the lever the whole thing rests on.

Where it breaks: notice whether they consistently avoid video, avoid meeting, avoid anything that would confirm identity. The reasons are always good — busy, abroad, broken camera. Consistently good reasons are themselves the signal.

Act three: the introduction

One day they mention, in passing, that they invest. Perhaps you asked how they earn a living, or they mention a good day.

Crucially they do not sell. They say it is not for everyone, that you should probably not follow along, that there is risk. That reluctance works far better than enthusiasm.

What this act achieves: making entry feel like your own decision. Later, when things go wrong, you doubt yourself before you doubt them.

Where it breaks: ask a concrete question. Who is the legal entity behind the platform, where is it registered, can it be found in the app store. They cannot answer, or the answer needs "let me check for you".

Act four: the small win

You put in a small amount. The number on the screen goes up. You withdraw, and the money genuinely arrives.

This is the most important act in the script and the most counter-intuitive one. People replaying it afterwards get stuck here: if it was fake, why did the withdrawal work?

Because they paid it. A few hundred to clear out all of your doubt is an excellent trade for them.

What this act achieves: resetting your risk perception to zero while giving you the feeling that you have understood something.

Where it breaks: after that successful withdrawal, try to take the principal out too, then do nothing for a week. A real platform does not care. A fake one produces reasons — maintenance, review, a volume requirement.

Act five: scaling up

An opportunity appears: an internal allocation, a limited window, an indicator about to change. They increase their own position at the same time and show you their account.

Your commitment jumps an order of magnitude. Sometimes a second person appears — a "mentor", an "analyst", another "student" — whose function is social proof.

What this act achieves: getting you, under time pressure, to commit beyond your means. Often involving borrowing, emergency funds, or collateral.

Where it breaks: any opportunity requiring a decision within hours is not an opportunity. Real openings survive you sleeping on it — and even if one genuinely disappears, that cost is nothing next to losing the principal.

Act six: it will not come out

You try to withdraw. The system requires a tax first. Then a margin. Then the account is flagged and must be topped up to a ratio before it unfreezes.

Each demand hurts more than the last, because you have already committed so much that "one more payment and I get everything back" is overwhelming.

What this act achieves: extracting the last few payments before you understand.

The only correct action: stop. From this moment, whatever is said, not one more payment.

Signals that run through all six acts

If you would rather not remember six acts, these are enough. They can appear at any stage.

The fourth is the one to watch hardest. People who genuinely have your interests at heart do not ask for secrecy; the only reason to ask is fear of a third party pointing something out.

The same script in different wrappers

The skeleton is fixed; the wrapper changes. Recognise the skeleton and no new wrapper gets past you.

Dating apps

The classic. Match, talk, deepen, then investment at act three. Emotional investment is deepest here, and victims often defend the other person right to the end. Tell: photographs unusually good, life unusually settled, and always available when you need them. Real people are not that perfect, or that free.

Wrong number and local groups

It opens with "sorry, wrong person", and the conversation continues. Or you are added to a city or community group and someone starts talking. Tell: the opening exists to bypass the "stranger" label. Watch how quickly the conversation becomes personal.

Recruitment

Starts as a job, drifts into "our company has an internal channel" or "the role requires you to familiarise yourself with our trading system". Tell: any opportunity requiring you to put money in first is not one. Section eight of the playbooks piece covers this.

A compromised acquaintance

The hardest to defend against: the account genuinely belongs to someone you know, but is no longer operated by them. A few normal messages come first. Tell: only one reliable method — contact the person through a different channel. A phone call takes a minute.

"Arbitrage opportunities"

More technical: a price gap between two venues, or an exploitable protocol quirk, with a professional-looking explanation. Tell: real arbitrage windows close in seconds and are executed by software, not taught to a stranger by hand. And if it were real, why would it need your money?

What that "platform" is actually made of

People struggle with one thing afterwards: the interface looked so professional, the chart moved like a real one — how could it be fake?

The uncomfortable answer is that building that interface is cheap. Market data comes free from public feeds, so the chart is real. Your balance, your profit, your position are numbers in a database that anyone with access can edit.

There are ready-made products sold for exactly this, rebranded and recoloured. Which is why different frauds use interfaces that look strangely similar — they are the same software.

Things visible on the surface

• Awkward or mixed-language text — especially in settings and help pages nobody reads closely.
• No real help centre — a handful of pages, or links pointing elsewhere.
• No company information — registration, regulatory status, terms of service either missing or vague.
• Web only, or install by link — not in the app store.
• A fixed personal deposit address — real platforms assign one per user.
• A profit curve that only goes up — real trading does not look like that.

Honestly though, relying on these details is second best, because a well-built fake covers all of them. What stays reliable are the two structural questions: who gave you this platform, and can you get the money out.

What to do afterwards

1. Stop payingIncluding any recovery service fee.
2. Preserve evidenceExport the conversation, save transfer receipts, their accounts, the domain and the receiving addresses. They delete accounts once you catch on.
3. Report itThe only route with formal standing.
4. Tell someone you trustNot for help — to break the isolation. A defining feature of this category is that you discuss it with fewer and fewer people as it goes on.
5. Refuse every recovery offer that comes to youThat is the same dataset being used a second time.

If you are the one watching

When you spot this happening to family or a friend, arguing directly usually backfires — in their understanding, you are questioning someone they trust, and by extension their judgement.

What works better is converting the argument into an action. "Could you try withdrawing the whole principal, just to check?" or "Can you find this platform in the app store?" Letting the platform expose itself is far easier than getting a person to admit they were fooled.

Lines that tend to work

• "Is that platform in the app store? I would like to look at it too."
• "Could you take the principal out once, just as a test?"
• "Where is the company registered? I will check whether it is licensed."
• "Shall we look up when that domain was registered?"

What these share: each is checkable, and the answer does not come from you. Let the platform fail the test.

If they have already committed a great deal and are visibly avoiding the subject, stop pressing for detail. What helps more at that point is staying in contact, so they know they can come to you — isolation is a requirement of this script, and if you do not withdraw, that requirement is not met.

Being realistic about reporting

Plainly: funds in these cases are usually split and moved abroad quickly, and recovery rates are low. Reporting matters for other reasons — a formal record, possible linkage to other cases, and evidence if you later need to establish the loss.

Knowing that actually explains why "stop paying" is step one. If recovery is unlikely, then not losing more is the only outcome you can still control.

The fuller catalogue is in the playbooks piece; to run quickly through what someone has said, use the script checker.