GUIDE · ROMANCE AND JOB SCAMS

Romance and Job Scams: How to Spot Them

Romance scams cost people more money than almost any other scam type, and they specifically target people looking for genuine connection online. Fake job offers — some now using AI-generated resumes and deepfake video interviews — are a fast-growing scam category, especially targeting people looking for remote work.

Written and maintained by the cyberhygiene.tools team · Published 13 October 2026 · Last reviewed 13 October 2026

How romance fraud is actually run

Romance fraud is not an opportunistic lie. It is an organised process, often run from large compounds with scripts, training and shift work. Some of the people operating the accounts are themselves victims of trafficking. Understanding this matters, because it removes the idea that a victim was simply careless. These operations are professional, patient, and designed by people who do this all day.

The method is consistent. Build a connection over weeks or months. Establish exclusivity and intensity. Create a reason to need money that is urgent and sympathetic. Then keep the reason alive as long as the money lasts.

The stages

  1. Contact. A dating app, a social media friend request, a wrong-number text that turns into conversation, a gaming or hobby community.
  2. Intensity. Rapid emotional escalation. Constant messaging, long calls, future plans, declarations of love within days or weeks. This speed is the clearest early signal.
  3. Isolation. Moving to private messaging, and gentle discouragement from discussing the relationship with family. Sometimes framed as protecting something special from other people's judgement.
  4. The obstacle. A reason they cannot meet: offshore work, military deployment, a medical posting abroad, a contract in another country. Something respectable that also explains the distance.
  5. The first request. Small and specific. A phone bill, a customs fee, a medical emergency for a relative. Often they promise to repay, and sometimes they do, which establishes trust before the larger request.
  6. Escalation. Each payment unlocks a new problem. Frozen accounts, legal fees, taxes on a release of funds, hospital bills.
  7. The second wave. After the money stops, a "recovery agent" or "investigator" makes contact offering to retrieve the funds for a fee. This is the same network returning for whatever is left.

Romance scam warning signs

Checks you can do yourself

Run a reverse image search on their photographs — stolen images usually appear under several different names. Ask a specific, unrehearsed question about their claimed city or job and see whether the answer is fluent or vague. Suggest a video call at a moment of your choosing rather than one arranged in advance. And notice whether details stay consistent across weeks.

Most usefully: tell one person you trust. Describe the relationship out loud to a friend or family member. Fraud depends on isolation, and the act of explaining it to someone else is often the moment the pattern becomes visible.

If you are checking on someone else

If you are here on behalf of a parent or friend, do not lead with accusations. Lead with the checklist. People deep in a romance scam will defend the scammer against a direct attack, but patterns presented neutrally often get through where warnings cannot.

If it has happened to you

The first thing to say clearly: this is not a failure of intelligence. These operations succeed against doctors, lawyers, accountants and police officers. They work by exploiting ordinary human trust with professional persistence.

  1. Stop all payments and contact. Do not send a final amount to recover what you have already sent.
  2. Contact your bank immediately. Recent transfers can sometimes be recalled.
  3. Keep everything — messages, profiles, payment records, phone numbers, wallet addresses. It helps investigators.
  4. Report it through our scam reporting page. Romance fraud is heavily under-reported, and reports do contribute to disruption.
  5. Ignore anyone who contacts you afterwards offering to recover your money. That is the same network coming back.
  6. Talk to somebody. The financial loss is often the smaller part of this. The loss of a relationship you believed in is real grief, and it deserves to be treated as such rather than hidden.
THE ONE RULE THAT MATTERS

If someone you've never met in person asks you for money, it's a scam — regardless of how long you've talked or how genuine it feels. Real relationships don't require your bank details to continue.

Why job scams work so well

Job scams target people at a vulnerable moment. Someone out of work, or under pressure at a job they need to leave, is motivated to believe good news and reluctant to challenge an employer who seems interested in them. Fraudsters understand this, and they are patient.

They also have better material than they used to. Company names, logos, real employees' profiles and genuine job descriptions are all publicly available, so a fake posting can be assembled in minutes and look entirely legitimate. Some fraudsters impersonate real recruiters at real firms, complete with a convincing email signature.

The main types

Advance fee

You are hired, then asked to pay for something before starting: training, certification, a background check, software, a uniform, or equipment. It is always framed as reimbursable. It never is. A real employer never asks you to pay to start work. If money flows from you to them, it is not a job.

Money mule recruitment

Often advertised as "payment processing", "financial agent" or "logistics coordinator", working from home for good money. The work involves receiving funds into your own bank account and forwarding them on, keeping a percentage. Those funds are the proceeds of fraud, and moving them is money laundering. People have been prosecuted for this while genuinely believing they had a job. Your account will also be closed and flagged, which makes opening another one very difficult.

Reshipping

The same structure with goods instead of money. Parcels arrive at your address and you forward them overseas. The goods were bought with stolen cards. You are the visible link in the chain, and you will be the one investigated.

Fake cheque overpayment

You are sent a cheque or transfer for more than agreed and asked to return the difference, or to buy equipment from a specified supplier. The original payment is fraudulent and gets reversed days later, after your genuine money has gone. Banks can credit a cheque before it clears, which is what makes this work.

Data harvesting

The "job" exists only to collect identity documents. Early in the process you are asked for a passport scan, driver licence, bank details and tax number for "onboarding". This is enough to open accounts and take credit in your name.

Task and commission scams

Frequently starting with a message out of the blue on WhatsApp or Telegram. Simple tasks pay small amounts reliably, which builds trust, until you are asked to deposit your own funds to unlock a higher tier. The deposits are never returned.

Job scam warning signs

How to verify an offer

  1. Find the company independently. Search for it yourself rather than using links from the message. Check whether the vacancy appears on their own careers page.
  2. Phone the switchboard on a number from the official website and ask for the recruiter by name.
  3. Check the company register. Most countries have a free public register showing when a company was incorporated and who its directors are. A firm registered last month advertising senior roles is worth a hard look.
  4. Check the email domain carefully, character by character. Recruiting agencies use their own domains.
  5. Insist on a video call. Legitimate employers will do one. Fraudsters usually will not, or will produce an excuse.
  6. Provide documents only after a written offer from a verified company, and never bank details before you have confirmed the employer is real.

If you have already been caught

If you sent money, contact your bank immediately — speed matters. If you have received and forwarded funds, stop, keep everything, and speak to your bank yourself before they contact you; cooperating early matters a great deal. If you handed over identity documents, consider a credit freeze or fraud alert with the credit agencies in your country, and watch for accounts opened in your name. Report it through our scam reporting page.

THE ONE RULE THAT MATTERS

A real employer will never ask you to pay them before you start work. If money is meant to flow toward you and instead it's being asked to flow from you, that's the scam — every time.


Frequently asked questions

Can I get my money back?

Sometimes, if you act very quickly and the payment was a bank transfer. Cryptocurrency and gift card payments are rarely recoverable. Contact your bank immediately rather than waiting, and report it regardless of the amount.

The company is real and the recruiter used their name. Does that mean it is safe?

No. Impersonating real staff at real companies is common. Verify by phoning the company's switchboard on a number from their official website and asking for that person by name.