Investment and cryptocurrency fraud is the single largest category of case we receive, and the individual stories vary far less than people expect. The platforms look different, the branding changes, but the mechanics underneath repeat almost perfectly. If you can recognise the mechanics, you can usually spot the fraud before the second deposit — which is the deposit that matters, because it is almost always larger than the first.

1. Returns that are fixed, daily, and guaranteed

Legitimate markets do not produce fixed daily percentages. A platform advertising "1.5% per day" or "40% monthly, guaranteed" is describing something that does not exist in regulated finance. Real returns fluctuate and real firms are legally cautious about promising them at all. A specific, repeating, guaranteed number is the clearest single signal that the money is not being invested in anything.

2. The first small withdrawal works perfectly

This is deliberate. An early withdrawal of a modest amount is the cheapest marketing a fraudulent operator can buy — it converts scepticism into confidence, and it is almost always what precedes a much larger deposit. Treat a successful small withdrawal as neutral information, not as proof that the platform is real.

3. You are asked to pay a fee to release your own money

When you try to withdraw a meaningful balance, a new obstacle appears: a "release fee", a "tax clearance", an "anti-money-laundering deposit", a "liquidity charge". The amount is always smaller than the balance being held, which is what makes it feel rational to pay. It is not a fee. It is a second extraction, and paying it reliably produces a third.

4. Contact moves off-platform immediately

A named "account manager" who moves the conversation to WhatsApp, Telegram, or a personal number is not how regulated firms operate. Off-platform contact leaves no institutional record, lets the operator apply pressure privately, and disappears the moment the account does.

5. The introduction came through an unrelated social channel

A large share of the cases we handle began with a friendly, non-financial conversation — a wrong-number text, a dating app match, a professional-looking DM. Investment is raised only after rapport is established, often weeks later. The delay is a feature of the method, not evidence of sincerity.

6. Deposits go to a personal wallet or a changing account

Check where the money actually goes. Bank transfers to an individual name rather than a company, crypto deposit addresses that change between transactions, or requests to route through a third party are all signs that funds are being dispersed rather than held.

Fraudulent platforms frequently claim registration with a real regulator. This is checkable in minutes: every major regulator publishes a public register searchable by firm name and licence number. A licence number that returns nothing, or returns a different company entirely, ends the conversation.

8. Urgency that escalates when you hesitate

A closing window, a bonus that expires, a position that must be entered today. Pressure is applied precisely when you slow down, because deliberation is what the method cannot survive. Legitimate opportunities do not degrade because you took a weekend to think.

9. The dashboard is the only evidence the money exists

A balance rendered on a website is a number in a database controlled by the person asking you for money. It is not custody, and it is not proof of holdings. Ask what independent record exists of your position — a regulated custodian, an on-chain address you control, a statement from an institution you can contact directly. Usually, none does.

If you recognise several of these

Stop depositing immediately, including any fee presented as necessary to release funds. Preserve everything: screenshots of the dashboard and balance, the full chat history, transaction IDs, wallet addresses, and the names and numbers used. That material is the basis of every recovery route that follows, and it disappears the moment the platform closes your account.