Encyphir Risk Management
6 min read

Romance Scam Warning Signs: How Scammers Operate and What to Watch For

Troy Newton
Troy NewtonVP of Business Development
April 15, 2025
Romance Scam Warning Signs: How Scammers Operate and What to Watch For

Table of contents

What Is a Romance Scam?Romance Scam Red Flags: The PatternRomance Scammer Tactics: The Financial AskWhat to Do If You Recognize These SignsHow Professional Investigators Verify an Online IdentityThe Expanding Footprint of Romance Fraud in Business ContextsProtecting Older Adults and Family MembersWhen the Money Is Already Gone: Recovery and Evidence

Categories

Online Dating SafetyRomance ScamsFraud

Romance scams are among the most financially and emotionally devastating forms of fraud today. The best protection is understanding how these scammers operate: their tactics, their cover stories, and the financial mechanisms they rely on.

What Is a Romance Scam?

An online romance scam happens when a fraudster creates a false identity and builds an emotional relationship with a target for financial gain. The deception is gradual and calculated. Trust is built over weeks or months before any money is requested.

These are not impulsive crimes. Professional romance scam operations, many based in West Africa and Southeast Asia, run multiple targets at once. They use rehearsed scripts, stolen identities, and coordinated teams managing the communication.

Romance Scam Red Flags: The Pattern

Love bombing. Early, intense declarations of connection and love, before you have ever met, are the signature opening of a romance scam. "I've never felt this way." "I knew from your first message." "I've been waiting my whole life for someone like you." This manufactured intimacy is designed to bypass your judgment by making you feel uniquely valued.

The perpetual absence. Romance scammers establish cover stories that explain why they cannot meet in person. The most common:

  • Military catfish scam: Claiming to be deployed overseas, often with a rank and a compelling backstory about service and sacrifice. The U.S. military does not require service members to pay fees for leave, equipment, or communication. Any such request is a scam.
  • Oil rig worker catfish scam: Offshore oil platforms with limited communication windows, explaining both intermittent contact and eventual financial requests for medical emergencies or travel home.
  • Catfish claims to be a doctor overseas: International medical missions or NGO work, often in conflict zones, creating a context for both nobility and isolation.
  • Catfish claims to be widowed: A sympathetic backstory that makes financial hardship more plausible and emotional vulnerability more relatable.

No video calls, ever. A scammer using stolen photos cannot sustain live video. The excuses are endless. This is the most reliable single indicator.

Moving off-platform quickly. Scammers want to exit dating apps fast. They push you to WhatsApp, Telegram, or personal email, channels with no reporting mechanism.

Romance Scammer Tactics: The Financial Ask

Once trust is established, the financial element appears. It is always framed as temporary. It is always presented as a crisis. And it is always structured around payment methods that cannot be reversed.

Romance scam gift card requests. Asking for payment via gift cards (iTunes, Google Play, Amazon) is almost exclusively a fraud indicator. No legitimate person in a real emergency needs gift cards.

Romance scam wire transfer. Wire transfers to overseas accounts are irreversible. Scammers prefer them for large sums because there is no chargeback mechanism.

Romance scam cryptocurrency / bitcoin. Crypto transactions are pseudonymous and effectively irreversible. Romance scammers have shifted heavily toward crypto as banks have grown more alert to wire fraud patterns.

The pig butchering romance scam (also called sha zhu pan) is a specific and particularly damaging variant. After building a romantic relationship, the scammer introduces a "can't miss" investment opportunity. It almost always involves cryptocurrency on a fraudulent platform controlled by the scammers. Victims are encouraged to invest gradually and shown fake profits to build confidence. Then their funds are stolen when they try to withdraw. Losses in pig butchering schemes routinely reach six and seven figures.

The sweetheart scam typically targets older adults on mainstream dating platforms. It emphasizes emotional manipulation over time rather than quick financial extraction.

What to Do If You Recognize These Signs

If you recognize romance scam red flags in a current relationship:

  1. Do not send money in any form. Once it is gone via wire, gift card, or crypto, it is almost certainly unrecoverable.
  2. Request a live video call. The response will tell you what you need to know.
  3. Talk to someone you trust. Scammers cultivate isolation. An outside perspective is one of the most protective things you can have.
  4. Get a professional background check. Verified information, confirming whether the identity is real, is the definitive answer.

If money has already been sent, report immediately to your bank, the FTC (reportfraud.ftc.gov), and the FBI's Internet Crime Complaint Center (IC3.gov). Time matters for any recovery attempt.

Encyphir's online match investigators verify identities before money changes hands. When a scam has already occurred, we work with our background investigations team and digital forensics specialists to document evidence for law enforcement and any civil action.

How Professional Investigators Verify an Online Identity

The central question in every suspected romance scam is simple: is this person real? Answering it properly takes more than a reverse image search. A skilled investigator triangulates multiple independent data sources to build or dismantle an identity. Reverse image analysis is the starting point, but scammers now rotate through lightly edited or AI-generated photos that defeat casual searches. Professional tools identify facial geometry matches, photo provenance, and prior appearances on:

  • social media accounts
  • escort sites
  • deceased persons' memorial pages
  • stock photo libraries

From there, an investigator examines the digital footprint tied to the claimed identity. A real person with the profession, history, and age described in a dating profile generates a documentary trail. That trail includes:

  • professional licensure records
  • property ownership
  • business filings
  • court records
  • voter registration
  • newspaper mentions
  • obituaries of family members
  • social media accounts that predate the dating profile by years

The absence of that trail is itself significant evidence. When a claimed U.S. military officer, surgeon, or engineer has no verifiable presence in any public record, the probability of fraud approaches certainty.

Phone number and email analysis adds another layer. Common findings include VoIP numbers routed through Google Voice or TextNow, email addresses registered weeks before the relationship began, and IP geolocation data that contradicts the scammer's claimed location. For active cases, our digital forensics team can preserve message histories, image metadata, and transaction records in a forensically sound manner that holds up in court or in a law enforcement submission.

The Expanding Footprint of Romance Fraud in Business Contexts

Romance fraud is no longer confined to individual victims on dating apps. The same social engineering playbook now reaches into corporate environments, creating serious liability and reputational exposure. Executives and senior employees have been cultivated through LinkedIn, professional conferences, and industry forums. Operators use romantic or quasi-romantic rapport to obtain confidential information, credentials, or funds drawn from corporate accounts. In several recent matters, what looked like personal misconduct turned out to be a coordinated intelligence operation against the company itself.

Boards and general counsel should treat several patterns as worthy of discreet inquiry:

  • persistent, unexplained wire transfers by executives
  • new "personal relationships" that coincide with unusual access requests
  • travel anomalies

Our work on executive misconduct investigations often surfaces romance-adjacent fraud patterns that began as personal vulnerabilities and grew into enterprise risk. When the target is a family office principal or a public company officer, the financial exposure can be catastrophic. Remediation requires coordination across legal, HR, information security, and outside investigators.

Law firms encounter romance scam fact patterns regularly in divorce, probate, guardianship, and elder financial abuse matters. Quantifying losses, tracing the flow of funds, and locating recoverable assets in overseas jurisdictions are specialized tasks. Our law firm clients retain Encyphir to prepare evidentiary packages that support civil recovery actions, Rule 45 subpoenas to money service businesses, and coordination with FBI field offices.

Protecting Older Adults and Family Members

Adult children often suspect a problem long before they intervene. Hesitation is understandable. Confronting a parent about a romantic partner risks damaging the relationship, and scammers actively coach victims to distrust family members who raise concerns. The scammer's script often includes lines like "your kids just want your money" or "they will never understand what we have." That inoculation against family input is itself a diagnostic sign.

Concerned family members should document what is known before raising the subject. That includes the partner's name, photographs, claimed occupation, location, and the timeline of the relationship. Bank statements and any unusual transfers should be preserved. A quiet, fact-based conversation supported by third-party verification is far more effective than an emotional intervention. In cases involving substantial assets or cognitive decline, consult an elder law attorney and a professional investigator before any confrontation. When a loved one has already gone silent and may have traveled to meet a scammer, our missing persons team works quickly to locate the individual and assess immediate safety.

When the Money Is Already Gone: Recovery and Evidence

Full financial recovery in a romance scam is unlikely, but it is not impossible. Actions taken in the first seventy-two hours materially affect the outcome. Domestic wire transfers can sometimes be recalled if the receiving bank has not yet released the funds. Cryptocurrency sent to exchange-controlled wallets can occasionally be frozen if the exchange receives a timely law enforcement request. Gift card balances are almost always drained within hours, but serial numbers and purchase receipts remain useful evidence.

Beyond recovery, victims often benefit from a complete evidentiary reconstruction of the scheme. This includes forensic preservation of all communications, identification of the infrastructure used by the scammer, and documentation suitable for insurance claims, tax loss deductions, and civil proceedings. Our team coordinates these efforts through our Certified Fraud Examiner services, producing reports accepted by financial institutions, insurers, and courts.

If you or someone you care about is in an active situation, or if you simply want a professional second opinion before the next conversation or the next transfer, contact Encyphir. Verification early is inexpensive. Recovery after the fact rarely is.