Romance Scams & Catfishing: How Investigators Help

How the money actually leaves, and why that matters for recovery

Recovery prospects depend almost entirely on the payment method, so it is worth understanding the routes these operations use and what each one means.

Wire transfers are fast and difficult to reverse, but not always impossible. A recall request made within hours occasionally succeeds, and the FBI’s Internet Crime Complaint Center operates a process that has, in some cases, frozen funds still sitting in a receiving account. Speed is everything — the window closes in days, not weeks.

Gift cards are effectively unrecoverable once the codes are provided, because the value moves the moment the number is read out. Report them to the issuing retailer anyway; occasionally a card has not been drained and can be frozen.

Cryptocurrency is traceable on the blockchain and difficult to recover in practice. What tracing establishes is where funds moved and, sometimes, which exchange received them — which gives law enforcement a point at which identity verification records exist and legal process can be served. Be extremely wary of anyone who contacts you offering crypto recovery services; a very high proportion of those approaches are a second fraud targeting people already identified as victims.

Money mules are the pattern to watch for. Funds sent to a domestic individual — often another victim who has been recruited to forward money and does not realise they are committing an offence — create a paper trail that is far more useful than an overseas transfer.

The second wave: recovery scams

This deserves a section of its own because it is so common and so cruel. Within weeks of the first fraud, victims are frequently contacted by someone claiming to be a recovery agent, a law enforcement officer, a lawyer, or a blockchain specialist who can retrieve the funds for an upfront fee. Victim lists circulate among fraud operations, and a person who has already sent money once is a qualified lead.

The markers are consistent: they contacted you rather than the other way round, they require payment before any result, they cannot be verified through an independent source, and they create urgency. No legitimate investigator guarantees recovery, and no legitimate agency charges a fee to investigate a crime.

If you are contacted, verify independently — look up the organisation yourself and call the number you found, not the one you were given — and assume nothing until you have.

What you can preserve right now

Evidence preservation is the single most useful thing a victim can do, and it takes an afternoon.

• Screenshot everything before blocking or deleting anything: profiles, messages, photographs, usernames, and any phone numbers or email addresses used. Accounts disappear quickly once the operator senses the target is aware.
• Keep the financial record intact — wire confirmations, receipts, bank statements, transaction IDs, gift card numbers and receipts, and cryptocurrency addresses and transaction hashes.
• Write a timeline while it is fresh: when contact began, on which platform, what was said and when, when money was first requested, and every payment with date and amount.
• Do not confront them. A confrontation tells them to delete accounts and move, and it destroys the evidence trail.
• Save the original files of any photographs they sent, not just screenshots — the underlying file sometimes carries metadata.

Where to report, and why each one matters

Reporting feels futile to many victims and it is not. Individual cases join patterns, and patterns are what produce prosecutions.

File with the FBI Internet Crime Complaint Center — this is the mechanism that can trigger a financial fraud kill chain request on a recent wire. Report to the Federal Trade Commission, which feeds the national fraud data set. File a local police report, which is frequently required by banks and insurers even where the department cannot investigate. Notify your bank’s fraud department immediately and in writing. Report the profile to the platform where contact began. If an older adult is involved, contact Adult Protective Services, and consider the state Attorney General’s office.

What an investigator can realistically add

A licensed investigator does not recover money. What they can do is establish facts, and facts are what unlock the rest.

They can determine whether a person exists as presented, using lawful identity verification and public records. They can trace image reuse across the internet to establish that photographs belong to an unrelated person. They can analyse communications for the linguistic and operational patterns typical of organised fraud groups. They can document the financial trail in a form usable by law enforcement, a bank’s fraud unit, or counsel. And they can produce a report that a family member, a conservator, or a court will accept as evidence rather than as an opinion.

That last function is frequently the most valuable. Many victims are not yet convinced, and a documented, independent finding is what breaks a relationship that continued warnings have not.

If it is a family member and they do not believe you

Confrontation almost always fails, because the fraudster has spent months building trust and framing outside concern as jealousy or interference. Three approaches work better.

Ask questions instead of making statements — a request to video call together, or a gentle question about why the person cannot meet, does more than an accusation. Bring evidence rather than opinion: a reverse image search result showing the photograph belongs to someone else is difficult to argue with. And bring in a third party the person respects — a clergy member, a physician, an old friend — because the message often lands differently from someone who is not already in the argument.

Above all, avoid shame. Victims who feel judged stop talking, and a person who stops talking to family keeps talking to the fraudster. The people targeted by these operations are not foolish; they are targeted by professionals running a script refined across thousands of attempts.

This is general information, not legal or financial advice. If money has moved, contact your bank immediately and consider speaking with counsel about your specific situation.