When a trading tip comes from someone you met socially

The conversation that comes before the tip

Most losses that get written up as crypto scams did not begin with a trading pitch. They began with a message that had nothing to do with money.

A match on a dating app. A text that arrived at the wrong number and turned into a friendly exchange. A connection request on a professional network from someone in an adjacent industry. A person in a hobby group who is good company and posts about ordinary things. Weeks pass. Nothing is sold.

Then trading comes up, and it comes up sideways. A relative who works at a fund. A platform the family has used for years. A position mentioned almost in passing, the way people mention a good contractor.

Notice the shape, because it is the whole trick: the tip is unsolicited, but the relationship is not. In many cases you started it. Every instinct you have for filtering strangers was spent weeks earlier, on a person who was not asking for anything at the time.

Why does this not look like a scam while it is happening?

Because at every point where you would expect a scam to feel like one, it does not.

The US Federal Bureau of Investigation's Internet Crime Complaint Center describes the entry point plainly in its 2025 annual report: "The scammers typically initiate contact through text messages, social media sites, advertisements, or dating applications and then quickly move the conversation to a messaging platform." The US Treasury's Financial Crimes Enforcement Network put the same thing in its September 2026 alert on digital asset investment scam centers: "Scammers commonly initiate contact with victims through social media or text message, sometimes pretending to have mistyped a phone number."

The scale of it, in US reporting alone, is not a fringe category.

IC3 recorded 1,008,597 complaints and $20.877 billion in reported losses for calendar year 2025. Investment fraud was the largest crime type by loss, at $8,648,617,756 across 72,984 complaints; within it, the report states that "Cryptocurrency investment fraud was the highest source of financial losses to Americans in 2025 with $7.2 billion reported in losses."

The US Federal Trade Commission's April 2026 data spotlight, covering reports filed in 2025, found that "Nearly 30% of people who reported losing money to a scam said it started on social media," with $2.1 billion reported lost that way and more than half of it, $1.1 billion, lost to investment scammers. Some of those scammers, the FTC notes, "posed as friendly advisors."

FinCEN reported in September 2026 that it "analyzed 33,904 BSA reports involving suspected digital asset investment scam-related activity filed between September 8, 2023, and December 31, 2025, totaling approximately $12.7 billion in financial activity tied to suspected digital asset investment scams." The US Commodity Futures Trading Commission, announcing an awareness campaign in February 2026, called relationship investment scams a form of fraud that "costs Americans an estimated $10 billion each year."

Those are US figures reported by US agencies; other countries collect their own, and every one of these numbers moves year to year. What they establish is not a national quirk. It is that the delivery mechanism — a person, rather than an advertisement — works at industrial volume.

The sequence, written as an illustration

What follows is an illustration of the documented pattern, not a case file. No names, no amounts: the amounts vary, and the names are invented again every week.

The first deposit is small. It is sized to be lost without pain, and you size it that way yourself, which is part of why it feels like caution rather than commitment. The account opens on a platform you were shown rather than one you went looking for. Within days the balance is up, by a margin that would be remarkable on a real account and is unremarkable on this one.

Then you withdraw part of it, and it arrives. FinCEN's 2023 alert on this exact pattern describes that step as design rather than luck: the operator may "allow the victim to withdraw a small amount of that investment to further build the victim's confidence" before urging a larger deposit. IC3's 2025 report describes the same middle stage — victims "are enticed to send cryptocurrency to fake investment scam platforms or apps and are shown fake profits and offered loans to encourage larger investments."

The second deposit is the real one. It comes from savings, sometimes from a credit line, sometimes from a retirement account. By then the person has stopped being a stranger and the platform has stopped being a question.

The withdrawal request that follows does not fail. It produces a requirement. FinCEN again: "If the victim attempts to withdraw their investment, the scammer may demand that the victim pay purported taxes or early withdrawal fees." IC3 uses near-identical language about taxes and fees charged as a last extraction before the operators disappear with the funds.

What are the tells that survive any version of the story?

The narrative details are disposable: the fund, the relative, the sick parent, the visa problem. The structure is not. Five things hold across versions.

The venue arrived with the person. You did not choose a platform and then meet someone on it; you met someone and then heard about the platform. The CFTC's advisory on the warning signs of online financial romance frauds lists this directly: "They encourage you to open an account and recommend a trading website that only accepts cryptocurrency." The same advisory names the insider story too — the person claims their success is "based on inside information from an uncle or other insider."

Money goes to a destination supplied inside the conversation. FinCEN's 2023 alert lists as a behavioural red flag a customer who "mentions that they were instructed by an individual who recently contacted them to exchange fiat currency for virtual currency at a virtual currency kiosk and deposit the virtual currency at an address supplied by the individual." An address that reaches you through a chat window is the most consequential decision in the whole sequence, and it is the one people make fastest.

Outside checks become awkward. Nobody forbids you from calling your bank or asking a colleague who trades. It simply gets discouraged the way relationships discourage things: a fee that would eat the gains, a compliance step that takes weeks, a mild disappointment that you would treat a friend this way. You do not need a citation for this one — you need only to notice what happens when you check anyway. A real venue survives being looked up by a stranger. The arrangements that cannot afford ten minutes of independent verification are the ones that cannot survive it.

Urgency appears exactly when the balance is largest. FinCEN's red flags include a customer who "appears distressed or anxious to access funds to meet demands or the timeline of a virtual currency investment opportunity." Deadlines nobody mentioned during the small deposits become structural once the sums are serious.

Every withdrawal attempt generates a new condition. Not a refusal — a condition. Tax, fee, verification, an upgraded account tier. Each one is payable, which is the point: a refusal ends the relationship, a condition extends it.

What is actually in your control?

Not whether you are contacted. The outreach is bulk. What you control is narrower and more useful than that.

Separate the person from the account. People you have never met in person can be entirely sincere and still be wrong, and the ones who are not sincere depend on you treating those as one question. You do not have to end a friendship to decline a platform. If declining the platform ends the friendship, you got your answer at a discount.

Verify the venue before the second deposit, not after. In the US, the CFTC's check-registration page points to the NFA BASIC database for registration and disciplinary history, and to the CFTC's own Registration Deficient list; the SEC's Investor.gov covers brokers and investment advisers. Registers are jurisdiction-specific: other countries publish their own registers and warning lists, coverage differs by product and by venue, and entries change over time. Check the register that governs where you live, and treat a missing entry as a reason to stop rather than a technicality. Type the platform's name into a search engine yourself and reach it through a link you found, not the one you were sent.

Treat a balance you cannot withdraw as a screenshot, not an asset. And treat the withdrawal that did work as proof of exactly one thing: that this particular withdrawal was permitted. A payout is cheap for an operator still holding the rest of the deposit.

The same structure turns up in the signal-channel world wearing different clothes: an account that messages you first offering help is running a shorter version of the same script. If money is already gone, the first hours matter more than the next month, and there is a specific order of operations. Expect a second approach afterwards: IC3's 2025 report notes that victims "are also targeted in recovery scams, claiming to help recover lost funds." That follow-up contact is part of the same funnel, and it has mechanics of its own.

Why this is not a story about people being gullible

Worth saying without hedging, because the shame is load-bearing for the people running these operations.

IC3's 2025 report describes crypto investment scams as "largely perpetrated by organized criminal enterprises based in Southeast Asia using victims of human trafficking as forced labor to run the scam operations." That is not a lone opportunist improvising. It is scripted work, done in volume, refined against results, by people who are frequently coerced themselves.

INTERPOL made the language point in December 2024, arguing that the popular slang term for this fraud "dehumanizes and shames victims of such frauds, deterring people from coming forward to seek help and provide information to the authorities." Contempt is not a safety measure. It is a large part of why cases go unreported, which is a large part of why the same scripts keep working.

The pattern is engineered against ordinary trust, and ordinary trust is not a defect. What is available to you is smaller than immunity and more reliable than instinct: choose the venue yourself, never send money to a destination that arrived in a chat, and run the check before the deposit that would hurt — not after the one that already did.

Sources

• FBI Internet Crime Complaint Center, 2025 annual report — US complaints and losses for calendar year 2025; cryptocurrency investment fraud figures and contact-method description
• FTC data spotlight, April 2026 — US losses reported in 2025 to scams that started on social media
• CFTC customer advisory: six warning signs of online financial romance frauds — the venue-with-the-person and insider-tip warning signs
• CFTC press release, February 2026 — annual US cost estimate for relationship investment scams
• FinCEN alert FIN-2023-Alert005, September 2023 — methodology and behavioural red flags, including the permitted early withdrawal and the tax-and-fee stage
• FinCEN alert FIN-2026-Alert005, September 2026 — contact methods, including the mistyped-number opener
• FinCEN news release, September 2026 — 33,904 BSA reports and approximately $12.7 billion, September 2023 to December 2025
• INTERPOL, December 2024 — on the harm done by the popular slang term for this fraud
• CFTC: check registration and SEC Investor.gov: check out your investment professional — US registration lookups