45

I am trying to work out how this attempted scam on me could possibly work financially for the scammers as it just seems like the time and effort involved as well as the low potential for payoff isn't there. The best way I have to describe the actual scam is by outlining the sequence of events:

  1. A few days ago, I was contacted by a random female named "Lina" (no surname) on WhatsApp asking "Are you my former colleague Jerry?"
  2. She had a number from the Netherlands, a WhatsApp business account, and a profile picture (quite pretty).
  3. I was going to block her as I would any random stranger sending me a message, but I was curious and I am a single man, so I added her but replied "I'm not Jerry".
  4. A great conversation ensued over the next few days. She was very nice and friendly with good English and a nice attitude - she was actually a pleasure to converse with and I honestly felt the conversation was truly two-way. To the point where I was initially going to post the question here "Is this a scam?", but then decided it wasn't a scam since she was so nice and wasn't asking me for anything.
  5. She asked me for a selfie and I supplied it - she reciprocated. Her photo matched her profile pic, and so did mine. She said she was 30 years old and her profile pic looked like she was European and that age, in case it matters.
  6. I performed a reverse image search on her photos using yandex, google and tineye but nothing even remotely close came up, so I assumed that the photos of "Lina" are real.
  7. She never once asked me for money, sent me to any URLs or anything like that. We had very deep and honest, civil, interesting and personal conversations.
  8. The only thing that seemed slightly "off" was that she kept insinuating how well-off she was, with a house in Hong Kong (where she was currently living), a Porshce 911 and Audi R8 etc. She (occasionally) mentioned casually that she didn't "work" much and was making money from "financial products" like her "coinbase wallet". I honestly didn't know or care what that was - I have zero interest in the crypto fad.
  9. Last night, she asked me if we could use her Kong Kong number to continue chatting as the Dutch number was her "work" phone and she wanted to keep chatting to me on her "personal" phone. I said sure, why not and added her HK number.
  10. The conversation immediately changed - the person on the other end was rude and pushy, with poor English, incomplete sentences, and basically using every (bad) sales trick in the book to try to "help" me to set up a coinbase wallet.
  11. I kept going with the conversation knowing it was some form of bait and switch, but I was really curious to try to figure out how it works.
  12. The last message I sent last night was basically: "It's late here and I need to go to bed, but send me another pic while I sleep so I can check it out in the morning!". As expected, I've received no messages since then.

I cannot for the life of me work out how this scam is supposed to work, nor what I should do next!

Here are my questions:

  1. How did "Lina" find me? Was it simply a case of randomly sending messages to phone numbers until someone answers? How is it worth anyone's time to do that?
  2. Why spend so much time on me? Why not flick me to the HK grunts much sooner? Is it a case of building up "trust" or a relationship over time, until the mark is "ready" to be converted? I don't feel like I ever said anything that indicated I'd be stupid enough to fall for a scam...
  3. How many guys could she possibly be stringing along at the same time? I'd say that she spent many hours of every day chatting to me, and her WhatsApp status was almost always "online", so I never got the impression that she was switching between talking to me and many other people at the same time.
  4. Coinbase looks like a legitimate business from what i can see - how can she and her cronies be making money from getting people to set up a coinbase wallet?
  5. Can the scammers make any use of my "personal" information? She didn't actually ask for any (so I doubt it's an identity theft type of scam), but over the course of our conversation I did send her a couple of face selfies, my first name (not surname), the city where I live, and she obviously has my mobile phone number. There were other random details like the fact I have a sister and stuff like that, but nothing useable that I can tell...
  6. What kind of payoff could be possible to make all this time investment worth it, especially for "Lina"? I mean, I could see that if she's farming out suckers to grunts in HK then it's a cheap operating cost, but surely her time as an intelligent, well-spoken, good-looking young female (assuming the pics are real) is worth more than this?
  7. What should I do next? Should I simply block/report both numbers, or are there any other steps to take in a situation like this?
Arj
  • 601
  • 1
  • 4
  • 7
  • Few days back I also got similar message. "Are you Mr. Sudir?" Me: "No, sorry wrong number" "I got the number wrong. Because your phone number is very similar to my friend's, only one number is different, so I'm sorry and hope you have a good day." Me: NP "My name is lynn, nice to meet you" Me: blocked the contact :-) – Vivart Dec 06 '21 at 15:44
  • 35
    "her WhatsApp status was almost always "online", so I never got the impression that she was switching between talking to me and many other people at the same time." Online doesn't mean "looking at your messages", it means "Whatsapp is open". If I'm chatting with person ABC, I would still show up as online to you. – T. Sar Dec 06 '21 at 15:59
  • 39
    My intuition says that "she" is probably using your pictures to scam the next guy. Chances are the beautiful girl you saw was a previous mark. Your selfies are also real and it would be a waste not to use them on the next mark. – Fixed Point Dec 06 '21 at 16:29
  • 2
    Look at some of the Defcon talks about confidence/con scams to get a further understanding, this seems like a classic example. – nexus_2006 Dec 06 '21 at 16:31
  • 88
    "I don't feel like I ever said anything that indicated I'd be stupid enough to fall for a scam..." Ask yourself, when has any beautiful, rich woman ever contacted the wrong person by accident and then started friendship/relationship with them? By engaging in a conversation in the first place, you indicated you were a potential mark. – JimmyJames Dec 06 '21 at 17:14
  • 33
    "I was initially going to post the question here "Is this a scam?", but then decided it wasn't a scam since she was so nice and wasn't asking me for anything." That's why you're a target. Your initial instinct was correct - block and ignore. You fell for the honeypot. – J... Dec 06 '21 at 19:15
  • 1
    Keep in mind that it's also possible to artificially generate pictures of a person altogether. There was this story about an influencer whom "DeepFake" program crashed mid-stream, which revealed her real face (the affair actually gave her even more publicity). – Clockwork Dec 06 '21 at 23:40
  • 4
    @JimmyJames I have actually met random strangers online who I've gone on to form friendships/relationships with. It's not outside the realm of possibility. It was also the first time someone has ever contacted me like this on WhatsApp, whereas I get emails like this all the time. I'm not completely naïve - if something suspicious happens (e.g. asking for money) then I know it's obviously a scam. It's just that this one seemed a lot more "real" than anything else I've seen, as well as the engaging female and substantial time investment on her part. – Arj Dec 07 '21 at 02:27
  • 12
    @J... Just to correct a number of you who are implying I "fell" for something - there's a massive difference between engaging with a scammer and actually falling for the scam (i.e. handing over money or whatever). I engaged with the scammer, but I didn't "fall" for anything as I haven't lost anything at all, apart from a bit of my time talking to someone interesting. Even though she was a scammer, the conversation was really engaging, so I don't feel like I'm worse off. If anything, my eyes have been opened to a new form of scam (albeit one that I still can't see is worth it). – Arj Dec 07 '21 at 02:31
  • 1
    @Clockwork I'm well aware of deepfakes etc. (I dabble in 3D generated imagery, especially of people). There's no way those images are fake. As someone else mentioned in another comment, it's much more plausible that they are real pictures of some other poor girl who has been similarly duped. – Arj Dec 07 '21 at 02:33
  • The easiest way to get a selfie of someone that wouldn't show up in image searches is to get it from social media accounts that are not open. – Davidmh Dec 07 '21 at 09:22
  • 1
    Meeting someone online due to common interests is completely plausible and I know that happens. Starting a relationship with someone at a 'wrong number' is something that might happen in a rom-com but it's almost totally implausible in real life. The closest experience I have to that is I once walked by a payphone (yes, I am old) and it was ringing. I answered and it was some dude in prison looking to talk to girls. Anytime a unknown person cold calls you, you should be very wary. – JimmyJames Dec 07 '21 at 16:06
  • Scammers are people too. Maybe they were bored at work and did honestly enjoy talking to you. Maybe they enjoyed the feeling of stringing you along. Maybe they don't usually talk that long to everyone, but made an exception for you for whatever reason. From their point of view, it'd only help the scam succeed and could be fun for whatever reason. – yesennes Dec 07 '21 at 17:30
  • 3
    "There's no way those images are fake." Check out this (refresh for new images): https://thispersondoesnotexist.com/ – JimmyJames Dec 07 '21 at 19:41
  • 3
    Or try to beat this: https://www.whichfaceisreal.com/index.php – JimmyJames Dec 07 '21 at 19:44
  • 2
    @JimmyJames That’s actually quite easy to beat: all the perfectly-lit faces with a boring background are fake (or the other way around, the more realistically chaotic the background and the more complicated the lighting, the more likely it’s a real picture). Someone who has some expertise on 3D imaging (such as the OP) would have an even easier time telling which picture is fake. Obviously knowing one of the two is fake is a big advantage, I just mean to say the link is not a good argument. – 11684 Dec 07 '21 at 22:16
  • 2
    @11684 So you can beat it 100%? Just keep in mind, as the attacker, all you have to do it find one that's good. – JimmyJames Dec 07 '21 at 22:26
  • 2
    @11684 Honestly, I don't see what 3D imaging has to do with anything here. – JimmyJames Dec 07 '21 at 22:49
  • OP.... Could you please be specific about when it was text messaging, and when it was voice, and when it was video chat e.g. Facetime or Zoom? – Harper - Reinstate Monica Dec 08 '21 at 02:30
  • @Harper-ReinstateMonica It was text chat only over WhatsApp. No other apps, and not voice or video. – Arj Dec 08 '21 at 03:46
  • 1
    @JimmyJames: I had a boring day at the office. My success rate after 200 trials amounted to 95 %. There was a huge learning effect: my error rate massively droped over time, and I grew very quick and confident. I learned to spot features that the AI just doesn't get right – and how could it, it doesn't have a concept of what it's generating (the state of neural networks today). Once you don't allow the "gestalt" part of your brain to decide (that part trying to cover up inconsistencies just because the overall impression seems okay), identifying AI-generated pictures really isn't hard anymore. – Schmuddi Dec 09 '21 at 16:00
  • 1
    @Schmuddi Interesting. I'm not sure why we went so far down this path. The picture doesn't need to be AI generated to be 'phony' anyway. – JimmyJames Dec 09 '21 at 16:07
  • I had the same experience. many clues that it was a scam. an empty facebook profile with a somewhat sexy picture. talking about cryptos. forgetting important details that I mentioned to her (mostly fake). claming to be from london but being not aware of british/european things (she didn't know about wimbledon tennis championship), some mistakes in english that would be weird from a native speaker, pictures from the same day with different hair color. 1/2 – qwlice Jul 19 '22 at 11:50
  • nonetheless I believe that they were pictures of her. we had a video call but I was in the street so I couldn't hear that well, it could have been a recorded video call, no clues about the environement where the call was made. all communication on whatsapp was from a computer because I could see that there was no camera icon. although then she did make a video call 2/2 – qwlice Jul 19 '22 at 11:52
  • I'd like to add that the video call was requested by me. I think she uses my questions and answers to scam realistically other people. a sort of AI :) – qwlice Jul 19 '22 at 12:26

5 Answers5

68

To answer your specific questions in order:

  1. How did "Lina" find me? Was it simply a case of randomly sending messages to phone numbers until someone answers? How is it worth anyone's time to do that?

    It's no time at all if you've written a script to send messages to databases of phone numbers harvested from database leaks etc.

  2. Why spend so much time on me? Why not flick me to the HK grunts much sooner? Is it a case of building up "trust" or a relationship over time, until the mark is "ready" to be converted? I don't feel like I ever said anything that indicated I'd be stupid enough to fall for a scam...

    You engaged in the conversation - I'm sorry to say that that alone indicates you'd have a reasonable possibility of falling for a scam. [Edit: I've just re-read your question and you said she only contacted you initially a few days ago. If this had been weeks or months I could understand our confusion, but think about it - how many legitimate people who happen to be extremely wealthy would try to get a random chance contact into their wealth system after a few DAYS of talking?!]

  3. How many guys could she possibly be stringing along at the same time? I'd say that she spent many hours of every day chatting to me, and her WhatsApp status was almost always "online", so I never got the impression that she was switching between talking to me and many other people at the same time.

    1. lots and lots of people (so that even a relatively small %age of people who fall for it converts to enough money to make a living) and
    2. she's probably not even one person but a whole team of people working together.
  4. Coinbase looks like a legitimate business from what I can see - how can she and her cronies be making money from getting people to set up a coinbase wallet?

    If you continued to engage then setting up the wallet would not, of course, be the end of it. You'd find yourself making payments in and out of it and in no time you'd be in a very tangled web of money laundering etc.

  5. Can the scammers make any use of my "personal" information? She didn't actually ask for any (so I doubt it's an identity theft type of scam), but over the course of our conversation I did send her a couple of face selfies, my first name (not surname), the city where I live, and she obviously has my mobile phone number. There were other random details like the fact I have a sister and stuff like that, but nothing useable that I can tell...

    It's probably worth keeping an eye on your credit report over the next few weeks / months. Also keep an eye out for "lawyers" contacting you to say "WE think you've been scammed, we can help you recover what you lost / you may be entitled to compensation etc etc etc" - needless to say this is just the same team of scammers social engineering you into falling for more.

  6. What kind of payoff could be possible to make all this time investment worth it, especially for "Lina"? I mean, I could see that if she's farming out suckers to grunts in HK then it's a cheap operating cost, but surely her time as an intelligent, well-spoken, good-looking young female (assuming the pics are real) is worth more than this?

    All I can say to this is - evidently not, or "she" wouldn't be doing it. Also the "if the pics are real" thing is a big if - there are generative AIs that can create perfectly realistic faces these days. Also if she's real she may be participating under duress - once you get into these kinds of operations you have to assume the criminality doesn't stop at the "give me a load of your money" level.

  7. What should I do next? Should I simply block/report both numbers, or are there any other steps to take in a situation like this?

    Block, delete, move on; keep an eye on your credit report and be more cynical next time. Sorry :(

Vicky
  • 23,982
  • 4
  • 60
  • 86
  • 24
    Good answer; just an addition for part 4: Coinbase has a referral program. The $10 bonus for getting someone to signup and use Coinbase may not be a lot in a place like the US or EU, but in some very poor countries, that's a lot of money. So the scam doesn't necessarily need to do something nefarious to be profitable. – anjama Dec 06 '21 at 21:13
  • 1
    @anjama Honestly the amount of time "Lina" (the original contact) put in before flicking me to the HK "team" was many hours over a few days. I can't see that USD$10 could be profitable for that amount of time given that you have at least two parties to split the money between, with the primary party likely to be well-educated. – Arj Dec 07 '21 at 02:22
  • 20
    CF: https://thispersondoesnotexist.com/ - it gives you a 512x512 mugshot in a split second, free to reload for another. Occasionally you do get some nightmare fuel (so you do need some poor sap to curate them), but the majority is good for immediate use. – John Dvorak Dec 07 '21 at 04:10
  • 4
    "she" could also be a chat bot. – Nelson Dec 07 '21 at 11:54
  • 22
    @Arj keeping in mind the caveat at the bottom of the page, https://www.worlddata.info/average-income.php shows Somalia has a monthly avg income of $26 USD. That's less than 3 Coinbase referrals per month. Several hours is nothing in that context. – anjama Dec 07 '21 at 13:01
  • 2
    Quite a lot of people would be able to put $10k into coinbase. Some would be able to put $100k+. I think you'd find that after a little while, they'd have a way of draining your Coinbase account completely. That's where the payoff is. – Bradley Thomas Dec 07 '21 at 15:48
  • 6
    @BradThomas it feels like whale farming. In video games, a company can survive with thousands of players who don't pay because of the 5% who pay a little and the 1% who drop serious money into a game. – WernerCD Dec 07 '21 at 21:19
  • @WernerCD most scams are. That's why these cliche spam emails are so egregious to begin with: To weed out those who wouldn't fall for it anyway. That just leaves the whales – Hobbamok Dec 08 '21 at 10:58
  • 2
    re 6: The pictures could also be other people that sent pictures back, which would explain how they don't show up on and how they appear to be the same person. (to my knowledge, current generative AI isn't great at generating pictures of a similar looking person in multiple different circumstances). If my suspicion is true however, it is possible that pictures of OP could be used for scamming others too. – ave Dec 08 '21 at 11:18
  • 3
    @Arj many hours!? How long / many were these messages?! You weren’t on a video call with her; you have no idea what “she” was doing in the minutes between messages (hint: messaging other people)! I can hold multiple text-based conversations at once without it being obvious. – Tim Dec 08 '21 at 12:48
  • 3
    @Tim I can multi-task too ;) What I'm trying to convey in my original post was how convincing and engaging "Lina" was, given that I have spent most of my life growing up with online messaging and dealing with the usual types of scammers. Of course she must have been chatting to other people (given what appears to be her business model), but it never felt that way as responses were within seconds (not minutes), conversations went on for hours (not minutes), and messages were usually quite long and always relevant (i.e. not just "yes" or copy & paste). – Arj Dec 09 '21 at 01:16
  • 1
    @Nelson : chatbots are no way near passing the Turing test on that level, given the OP's description of how deep and personal the conversations were. – vsz Dec 09 '21 at 05:11
43

What kind of payoff could be possible to make all this time investment worth it, especially for "Lina"? I mean, I could see that if she's farming out suckers to grunts in HK then it's a cheap operating cost, but surely her time as an intelligent, well-spoken, good-looking young female (assuming the pics are real) is worth more than this?

This is a form of romance scam. I have read stories about people paying tens of thousands of pounds to this kind of scam, without ever meeting the person. The median monthly income in Hong Kong is $18400 HKD or about £1800 GBP.

In the United States alone, this market is worth at least $475 million per year according to the Wikipedia article above:

Monetary loss in the United States rose from $211 million to $475 million from 2017 to 2019. Number of cases rose from 15372 to 19473 in only two years.

$475 million spread over 19500 victims means an average of about $24000 USD per victim, or £18000 GBP. At this rate you only need to find little more than one average victim per year to "break even" on the average Hong Kong salary.

Emil Vikström
  • 531
  • 3
  • 5
  • 2
    That is some useful math, I did not realize how big those payouts could be. Really puts some new perspective on the effort scammers go through. Incidentally, as a courtesy for your contribution, ignore messages from an alleged Lana Kane in the future. – Kroltan Dec 06 '21 at 21:53
  • 4
    Keep in mind that the actual scammers may be in Benin or Nigeria, not a high cost place like HK. In any case, I think you are right that they were going for $thousands, maybe tens of thousands. The Hong Kong connection may be a bank account from where they can spirit the funds out. I'm pretty sure I could find someone to open a bank account for me by hanging around in the notorious Chung King Mansion. – Spehro Pefhany Dec 07 '21 at 15:43
20

The only thing that seemed slightly "off" was that she kept insinuating how well-off she was, with a house in Hong Kong (where she was currently living), a Porshce 911 and Audi R8 etc. She (occasionally) mentioned casually that she didn't "work" much and was making money from "financial products" like her "coinbase wallet". I honestly didn't know or care what that was - I have zero interest in the crypto fad.

This tells me this is likely a Bitcoin/cryptocurrency scam. I have experience of something very similar. You can learn more by searching for "bitcoin dating scam" or "cryptocurrency dating scam" on Google.

How this works is the scammer slowly builds trust with the victim while briefly mentioning they make a lot of money working with "investments" or something similarly vague.

After days or even weeks the scammer brings up an investment opportunity that sounds very promising. It's likely a new kind of cryptocurrency that's picking up steam. By investing right now, you can earn a lot of money, like the scammer claims they already have.

Instead of a real cryptocurrency platform, the scammer sends a link to a fake cryptocurrency website. When you "buy" cryptocurrency from the fake site, you are actually sending your money straight to the scammer along with your credit card details. After emptying the victim's bank account, the scammer will promptly stop any contact with the moneyless victim.

I can only speculate why scammers spend so much time and effort on baiting new victims. I assume the if the scam is successful, the scammer can get away with thousands of dollars. That's enough to pay some low-wage workers to impersonate attractive women online.

fairport
  • 301
  • 1
  • 3
  • 9
    "After emptying the victim's bank account, the scammer will promptly stop any contact with the moneyless victim." Or worse, they'll display a fake bank account with $$$$$ and +1234% since last month. They'll happily be available as long as you want to invest more. Theyll be gone the second you want to withdraw. But why would you, with such an excellent ROI? – Eric Duminil Dec 06 '21 at 22:21
  • 1
    @EricDuminil Ah yes, the OneCoin playbook. – Nate Barbettini Dec 07 '21 at 14:55
  • But this doesn't appear to be what she was doing, according to the OP she passed him onto a rude incoherent salesperson who appears to have blundered away all her hard and careful work – komodosp Feb 14 '22 at 14:54
12
  1. Coinbase looks like a legitimate business from what i can see - how can she and her cronies be making money from getting people to set up a coinbase wallet?

You mentioned they tried to

"help" [you] to set up a coinbase wallet.

They may be hoping that in the process of "helping" you set up a wallet they could get access to the account later. Either by hoping you say the password out loud when you set it (you'd be surprised what people say when others are helping them set up a new account), seeing the suggested password from your password manager if you screenshare the process, knowing the security questions and answers etc. They may have a more sophisticated way, but if they are able to somehow gain access to the accounts that they "helped" set up, it's just a matter of waiting for a victim to make a large deposit/"investment" into their coinbase account (or to make large gains with crypto, either way have a large balance) and then the scammers can log in and empty the account.

If that's the case, the fact that coinbase is a legitimate business helps them in a way, because people will be less wary of being walked through the steps of making an account with them.

Aubreal
  • 1,052
  • 7
  • 11
  • 3
    People can be very lax about security in general, and especially so when they are working with someone they trust. Part of the long lead up to the scam may be gaining enough trust that the person will allow the person "helping" them set up their account to see or even set their password. Then you don't even have to bother with later parts of the scam, just send the bitcoins to your own account yourself. – Kevin Dec 06 '21 at 23:01
0

I performed a reverse image search on her photos using yandex, google and tineye but nothing even remotely close came up, so I assumed that the photos of "Lina" are real.

If you still have the images, take a closer look if you can see any of the artefacts that may result from generation by an AI.

SQB
  • 895
  • 5
  • 17