Most people get to know this scam through one question: how much money was lost. But what really decides how it ends is the weeks before that, when nobody has said a word to you about investing. What makes it so hard to guard against is that the first half looks nothing like a scam: no get-rich promises, no pressure, not even a suspicious link. By the time the "opportunity" finally turns up, you aren't looking at an unfamiliar project. You're looking at a person you trust. This piece doesn't tell stories. It takes the structure apart: the stages it moves through, what the other side is doing at each one, what concrete things you can check at each stage, and why "I'm not greedy" won't stop it.
- Its first stage isn't about money. The question to ask isn't "did they promise high returns?" but "where did this relationship start, and who reached out to whom?"
- Every stage has something you can check: who brought you to the platform, where the app came from, what it asks you to do when you withdraw. Those questions have answers. "Something feels off" doesn't.
- It doesn't target greed. It targets the relationship. So "I'm a rational person" won't help. What helps is one rule that makes no allowance for feelings: never touch an investment channel that someone you met online brought you to.
It opens without a word about money
The first stage of this scam contains no "opportunity" at all, only a person. They don't sell anything, don't rush you and don't send links. They just chat, and that is exactly why it slips past all your defenses. The skepticism you have ready is built for vetting projects, and what's in front of you at this point isn't a project. It's a relationship that seems to want nothing from you.
Put yourself in their shoes and it makes sense. If the opening line were "do this with me and make 30% a month," you'd back away at once, and the people who do this for a living know that perfectly well. So they push the subject of money back by weeks or longer, and spend that time turning themselves into someone you're willing to trust. The get-rich promise isn't dropped. It's saved for when your guard is already down.
The usual openings are very ordinary: a message sent to you "by mistake," hitting it off in a hobby group, a match on a dating app, someone who says they're from your hometown or work in your field, being added to a group chat when you have no idea who created it. Over the next few weeks the conversation mostly revolves around you: your work, your routine, what's been bothering you lately. Their own persona, meanwhile, is complete, with a job, a family and a daily rhythm, plus the occasional passing remark like "my family runs a small business" or "a friend of mine trades," never expanded on. The line victims most often use afterwards in the relationship's defense is: "He never once asked me for money." That isn't evidence against a scam. It's exactly the effect the scam was designed to create.
The one thing to do at this stage
The first time the subject of money comes up in this relationship, go back and confirm one thing: who spoke first, at the very beginning. Not who first brought up investing, but who reached out to whom. That question has only one answer, it has nothing to do with how you feel about this person, and it sets the standard everything that follows should be judged by.
A relationship worked through seven stages
This scam is run with a division of labor and a script, which is why it takes such a similar shape from one person to the next. Laid out flat, it breaks into roughly seven stages, and you can usually tell which one you or a family member has reached.
Stage 1 · Contact
They strike up a conversation, at random or semi-targeted, using the everyday pretexts above. All this step aims for is a channel where the conversation can keep going. If it doesn't land, they move on to the next person. It costs almost nothing.
Stage 2 · Building trust
Weeks or longer of everyday companionship: replies that come reliably, remembering small things you mentioned, being there when you're having a bad day. Not mentioning money is the discipline of this step. The goal is to move them, in your mind, from "stranger" to "someone I know."
Stage 3 · Introducing the "investment"
Money comes up for the first time, and almost always "in passing": they're doing it themselves and mention it casually, only say more when you ask, and may even tell you it isn't for you and you should stay out of it. The effect is to make you feel it was you who asked to learn more.
Stage 4 · A small test and a successful withdrawal
The amount is small, the process goes smoothly, and the withdrawal really arrives. This is the pivot of the whole scheme: it swaps the question in your head from "is this a scam?" to "I've already checked it."
Stage 5 · Putting in more
The reasons start coming thick and fast: a market window, limited spots, an insider schedule, they're adding more themselves. The numbers on screen climb in step, so you can "see" the gains. This step pushes your principal up to a size worth harvesting.
Stage 6 · Withdrawal blocked
When you want to take the money out, conditions appear: tax, a deposit, risk control, an account problem, a rules violation. They arrive one after another, and each one tells you that once it's dealt with, you can withdraw.
Stage 7 · The second harvest
Once the platform won't load and the person can't be reached, new people come looking for you and collect another payment under the pretext of helping you seek redress, recover your losses or unfreeze your funds. The victim list is itself an asset that gets sold on.
Notice how the seven stages are arranged: the earlier the stage, the less it looks like a scam; the later the stage, the harder it is to get out. That's no coincidence. It's how the scheme was designed: the cost of spotting it is piled up at the front, and the cost of leaving is piled up at the back. So counting on "I'll be able to tell when the time comes" doesn't work. By the time you can tell, you're usually already at stage six.
What you can check at each stage, without relying on "gut feeling"
"Something feels off" won't save anyone, because the first half of this scam is built specifically to get past your feelings. The table below turns each stage into an action that has an answer, all of them things you can do on your own without the other person's cooperation.
| Stage | What they're doing | What you can concretely check |
|---|---|---|
| Contact | Starts the conversation, with a reason that sounds natural | Note who spoke first; run their self-introduction and photos through a reverse search to see whether they turn up anywhere else |
| Building trust | Steady companionship, steers clear of money | Suggest an unplanned live video call or a last-minute change of plans, and watch how they respond: this is observable behavior, not guesswork |
| Introducing the investment | Shows off gains "in passing" | Search for the platform's name yourself instead of tapping the link they sent; check the developer, release date and where the reviews come from in the app store |
| Small test | Lets you withdraw successfully once | Check who sent you that money: a company account, or a personal account whose name doesn't match the platform |
| Putting in more | Manufactures deadlines and limited spots | Repeat their reasons for adding more, word for word, to someone with no stake in any of this, and note their first reaction |
| Withdrawal blocked | Demands tax, a deposit or an unfreezing fee first | No need to check anything else: any demand that you pay money before you can take money out settles it the first time it appears |
| The second harvest | Promises to get your money back | Anyone who reaches out on their own, guarantees recovery and wants a fee first belongs to a second scam; there's nothing more to discuss |
These actions have one thing in common: they all have answers, and the answers don't depend on how you see this person. You can't prove whether someone is sincere, but you can find out where an app came from and who sent a payment. Putting your judgment on questions like those is the situation this scam handles worst.
Why "I'm not greedy" doesn't protect you
Because it doesn't attack greed in the first place. Greed is fuel that only comes into play in the last two stages; the first five run entirely on the relationship. You can be completely immune to "make 30% a month" and have no resistance at all to "a casual suggestion from someone who's kept you company for three months." Those two things don't even call on the same kind of judgment.
There's a subtler reason too: many people did seriously suspect something along the way, they just suspected the wrong thing. They examined the platform's interface, asked how the returns were calculated, even read the whole official-looking explanation, and concluded that the platform checked out. But the real weak point in this scheme was never the platform. It's "how did I end up in front of this platform?" Vetting the platform won't turn it up.
So don't make "I'm a rational person" your line of defense. Rationality can hold off obvious temptation; it can't hold off trust that was slowly cultivated. What actually works is one rule that makes no allowance for feelings: never touch an investment channel that someone you met online brought you to, no matter how close you are and no matter how smoothly things have gone so far. This rule doesn't need exceptions, because it costs very little: all you give up is an unfamiliar channel, not a relationship. We break down the psychology behind it in more detail in the psychological tricks scammers use; for a version that turns it into a fixed routine, see Run any "opportunity" through these 7 steps first.
Why that platform looks perfectly normal
Because its look is an off-the-shelf product you can buy. Candlestick charts, an order book, a positions page, an earnings curve, live customer support, an app that actually installs: ready-made versions of all of it exist, and a new name and color scheme turn it into a "new platform." Looking convincing doesn't require any real business behind it.
More importantly: the numbers you see on this kind of platform are written in by the platform itself. The market prices on the page may really be moving, but your balance, your paper gains and that curve that keeps climbing have nothing to do with any real trade. It's a row in a database, set to whatever they want it to say. You think you're watching the market; you're actually watching an animation that plays for an audience of one.
So when you judge a platform like this, ignore what it looks like and look at just three things: where you heard about it, where the app came from, and what it does when you want to take your money out. The first two can be checked before you sign up; the third is what it can least hide. Specific ways to spot a counterfeit app are in fake exchange apps, and the criteria for picking a legitimate channel are in how to tell whether an exchange is legit.
"The interface looks professional" is the most worthless evidence there is
Appearance is the cheapest, most easily copied link in this whole industry chain. Treating it as grounds for trust means grading them on the very thing they're best at. Also not evidence: fast replies from support, documentation in your language, a lively group chat, a pile of screenshots that look like licenses. All of it can be bought, built or staged.
Being able to withdraw once is bad news
The successful withdrawal is the moment almost everyone finally lets their guard down. But it doesn't prove the platform is reliable. It proves only one thing: someone is willing to send you a small amount of money first.
From the other side's point of view, that money is a customer acquisition cost, and an absurdly cheap one. A small sum buys all the principal you put in afterwards, plus something worth even more: from then on you stop asking "is this a scam?" and start asking "when should I add more?" After this step, you switch off your own suspicion. They don't have to work at it anymore.
If this step has already happened, add two checks: what account the money was sent to you from (a company account or a personal one, and whether the account name matches the platform), and whether the conditions changed once the amounts got bigger. Small amounts going through smoothly while larger ones suddenly run into new charges is the most consistent dividing line in this scheme. What you should strike from your reasons for trusting it is precisely "I withdrew once, so the money comes out."
The difference shows up almost entirely when money moves
Put it side by side with a normal channel and you'll find the first few rows show no difference, which is also why quite a few people checked and still got caught. The differences are concentrated in the last few rows, in other words, at the point where it moves your money.
| The same question | A legitimate channel you chose yourself | The platform someone brought you to |
|---|---|---|
| How you heard about it | You found it yourself; it's publicly verifiable | Someone you haven't known long brought you there |
| Where you install it from | The official app store or official website | An installer or link they sent, or a request to install an extra configuration profile |
| Who controls the account | You register it and control it yourself | They register it "for you," manage it for you, or "coach" you through every tap |
| Withdrawal conditions | Stated up front and checkable at any time | Appear for the first time only when you try to withdraw |
| When you want to take your money out | The same process as always | New demands pop up: taxes, deposits, unfreezing fees, "risk-control" holds |
| When you want to stop | You stop, and nobody chases you | Emotional pressure kicks in: you don't trust me, just wait a little longer, it's the very last step |
The first three rows need your attention before you start; the last three only show once you've already put money in, but they are extremely reliable. If you've never been through the whole process of buying crypto on your own, you can walk through it yourself using buying crypto for the first time. Once you've done it yourself, there's no longer any need for someone else to "do it for you."
When a family member is caught up in it, confronting them head-on often fails
First be clear about why it fails, or all your effort goes in the wrong direction. What you're against is the platform, but what they hear is you dismissing their judgment, and dismissing someone who has been very good to them along with it. Worse, in the situation they're in right now, that person is often the only one who doesn't criticize them. Every time you blame them, you push them further that way. Plenty of people were warned. After the lecture, they simply went underground: kept putting money in, but stopped talking about it.
These approaches stand a better chance than arguing the point:
Change the conversation from "you've been scammed" to "let's check one thing together"
- Don't debate whether the platform is real; make one verifiable request. For example, ask them to try withdrawing a larger amount and see whether new conditions appear, or ask the other person to agree to an unplanned live video call. Letting them see the result for themselves does more than you saying it a hundred times.
- Stop further deposits first; everything else can wait. The smallest agreement you can reach is "no more money for now," not "you have to admit you were scammed." They might agree to the first; the second usually ends the conversation.
- Don't take away their phone or force them to cut contact. Cutting them off by force usually just leads to hiding things, and can push them to put in more to prove you wrong. Leaving them a way back matters more than winning an argument.
- Save the evidence along the way. Chat history, transfer records, the platform's domain and where the app came from, the other person's account details: save them while they're still visible. Whatever happens in the end, they'll be useful.
No guarantees here: there's no surefire way to talk someone out of this, and whether they believe you is ultimately not up to you. What you can do is keep a way out open for them, rather than leaving them cornered with nowhere to go but forward.
Already put money in? Stop the bleeding first
If you've read this far and realized this describes you or a family member, take these steps in order. Their whole focus is stopping the bleeding, not getting the money back.
- Stop sending money. Whether they say one more payment will free up your funds, or that the full amount will arrive once the tax is paid, don't send any more. This comes first because it's the one thing entirely in your control.
- Keep the evidence. Chat history, transfer records, the recipient's details, the platform's domain and where you downloaded the app, the other person's account and profile picture: screenshot everything you can. The platform could stop loading at any moment.
- Report it to your local police. Bring your evidence, and the sooner the better. Don't skip reporting because you feel embarrassed or think it won't help.
- Separate the money from the relationship. You don't have to block them right away, but don't let guilt, pressure or "it's the very last step" push you into paying again.
- Rule out "recovery services" outright. There's a good chance someone will contact you next, saying they can get your money back if you pay a fee first. That's the second round, after the victim list has changed hands. Don't lose money a second time here.
The fuller order for limiting losses, collecting evidence and reporting is in what to do if you've already been scammed. On recovery, that piece gives an honest account, not a promise, and we likewise don't offer any recovery channel or method.
Common questions
They've never asked me for money. Could it still be pig butchering?
Yes, and that's exactly what the first half normally looks like. The first few stages of this scam don't involve money; they rely on steady companionship and a complete persona. By the time money comes up, what you're evaluating is no longer an unfamiliar project but a person you trust. Don't judge by "have they ever asked for money?" Judge by "who spoke first at the very beginning?" and whether that investment channel is one they brought you to. If both of those fit, treat it as high risk whether or not they've ever asked for money.
We've video-chatted and I've heard their voice. Doesn't that rule it out?
No. Video, voice and photos only show that a real person is talking to you. They don't show that the person's identity, job or source of income is real, and even less that the platform they recommend is real. Rather than going round in circles over "is this really them?", turn your attention back to what can be checked: who brought you to the platform, where the app came from, and what it asks you to do when you want to take your money out.
My early withdrawals really did arrive. Why is that supposed to be a warning sign?
Because letting you withdraw successfully once is a deliberately designed step in the process, not proof of what the platform can do. A very small sum buys all the principal you put in afterwards, and an end to your doubts. If you want to check, check what account that money was sent to you from: a company account or an unfamiliar personal account, and whether the account name matches the platform. Then see whether the conditions change when you try to withdraw a large amount. Small amounts going through smoothly while larger ones run into new charges is the most consistent dividing line in this scheme.
The platform looks professional, with candlestick charts and customer support. What does that tell me?
Nothing much. Price charts, order books, support chat windows and apps are all off-the-shelf products that can be bought outright, and a new name and color scheme turn them into a "new platform." More importantly, the balance and earnings you see on this kind of platform are written in by the platform itself and have nothing to do with real trades. Appearance is the easiest part to fake and the least valuable. What it can't hide is how it behaves when you want to take your money out.
My family member won't listen and says I don't trust them. Where should I put my effort next?
First lower the goal from "get them to admit they were scammed" to "no more money for now." They might still agree to the second. Then, instead of debating whether the platform is real, make one verifiable request: ask them to try withdrawing a larger amount and see whether new conditions appear. At the same time, don't take away their phone or force them to cut contact; that usually just leads to hiding things. These are directions, not guarantees. What you can do is keep a way out open for them, rather than leaving them feeling they have no choice but to keep going.
Someone says they can get my money back if I pay a fee first. Can I trust them?
Anyone who reaches out on their own, guarantees recovery and wants a fee first should be treated as a second scam. The "victim advocacy teams" and "recovery experts" who appear after you've been scammed are mostly working off victim lists. Those three signs tend to show up together, and any one of them is reason to stop. We don't offer any recovery channel, and we don't suggest pinning your hopes on promises like these. What you can do is stop sending money, keep your evidence safe, report it to your local police, and not pay a second time for "recovery."
any trading-fee discount is up to 20%, with the actual rate and eligibility subject to current OKX terms.
Keep reading
- The psychological tricks scammers use—the psychological levers this scheme relies on, taken apart one by one.
- Scam guide entry: pig butchering and "trading mentor" scams—the red-flag checklist version of the same scam, plus reskinned variants like "trading mentor" groups.
- Run any "opportunity" through these 7 steps first—turns "who spoke first?" into a fixed routine.
- I've already been scammed: what now?—the order for limiting losses, saving evidence and reporting once money is already in.