DEV Community: WarnScams

BISP SMS Scams: Spotting Fake Benazir Income Support Messages

WarnScams — Mon, 09 Nov 2026 18:40:15 +0000

A text arrives from an ordinary mobile number: "BISP 8171: You have received Rs 25,000. Click the link to register and collect your payment." It looks official. It is not.

Real BISP messages come only from the shortcode 8171. They never contain a link, never promise Rs 25,000 or Rs 30,000, and never ask for a fee or an OTP. The real quarterly Benazir Kafaalat installment is Rs 14,500 — any other amount is a red flag on its own.

How the scam plays out

The message is only the hook. When the victim calls the number back, someone posing as a government officer calmly explains there is a "registration fee" or "verification charge" to release the payment. Pay it, and the script escalates: a "tax" to clear, then another charge. In the faster variant, the caller skips the fees entirely and asks for the OTP sent to the victim's phone — that code hands over the wallet or account in seconds.

BISP restated its fraud warning in October 2026: all official messages come from 8171 only, and registration is free and done in person at a BISP Tehsil Office. There is no online registration, no WhatsApp registration, and no agent who can "release" a payment for a fee.

The 7-point check

Sender: only 8171 is real. Any 03xx mobile number claiming to be BISP is fake.
Links: genuine 8171 messages never include links.
Amount: the Kafaalat installment is Rs 14,500. Promises of Rs 25,000 or Rs 30,000 are fake.
Verify yourself: send your CNIC number (without dashes) by SMS to 8171, or check on the official 8171 portal at 8171.bisp.gov.pk.
Registration: free, in person only, at a BISP Tehsil Office.
What BISP never asks for: your OTP, bank or ATM PIN, account password, or any fee.
At the payment center: count the full Rs 14,500 before you leave.

If you already paid or clicked

Stop sending money, no matter what the caller promises next. Call the BISP helpline at 0800-26477 (toll-free) to check your real payment status, and report the fraud to the National Cyber Crime Investigation Agency (NCCIA) on helpline 1799 or at complaint.nccia.gov.pk. Screenshot the fake SMS, save the scammer's number, and keep any call logs and transaction records.

One rule covers nearly every case: if a message about BISP money did not come from 8171, delete it.

Originally published on WarnScams — read the full guide there: BISP SMS Scams: Spotting Fake Benazir Income Support Messages

Can You Claim Crypto Scam Losses on Your Taxes?

WarnScams — Sun, 08 Nov 2026 18:43:04 +0000

Originally published on WarnScams on November 8, 2026. This is a republication of that article — the original on warnscams.com is the canonical version.

Sometimes, yes — but US tax law draws one hard line, and it is not the line most victims expect. What decides whether your loss is deductible is not how much you lost, or even that a crime happened. It is why you sent the money.

If you sent crypto to what you believed was an investment — a fake trading platform, a “pig butchering” scheme, a bogus staking program — the IRS can treat the loss as a theft loss from a transaction entered into for profit, and that kind of loss is deductible. If you sent money for a personal reason — a romance scam, a fake family emergency, gift cards demanded by someone impersonating the IRS — the loss is a personal theft loss, and personal theft losses are not deductible under current federal law.

This guide explains where the line falls, which scams land on each side, the special IRS safe harbor for Ponzi schemes, and the forms and timing involved. It covers US federal taxes only, and it is education, not tax advice.

The One Question the IRS Cares About: Were You Trying to Profit?

Under Section 165 of the Internal Revenue Code, an individual can deduct a theft loss from a transaction entered into for profit (§165(c)(2)). Three conditions have to hold:

It was theft. The taking must be illegal under the law of the state where it happened, and done with criminal intent. A scammer draining your money qualifies; an investment that simply performed badly does not.
You had a profit motive. You parted with the money expecting a financial return — profits, yield, interest, growth.
There is no reasonable prospect of getting it back. While a real recovery claim is still live, the loss is not yet final.

Investment theft losses under this rule are ordinary losses, not capital losses. That matters, because it means the $3,000-a-year cap that applies to capital losses does not apply here.

Which Crypto Scams Can Be Deductible?

Losses that generally meet the profit-motive test:

Pig butchering scams — a fake “mentor” or romantic contact walks you into a fraudulent crypto platform that shows fake profits, then vanishes with your deposits.
Fake exchanges and trading platforms — you deposited expecting to trade or earn, and withdrawals were blocked or the platform disappeared.
Fake staking, mining or yield programs — returns were promised and the operator took the deposits.
Ponzi-type investment schemes — covered in more detail below, because the IRS has a specific safe harbor for them.

In a March 2025 memorandum (Chief Counsel Memorandum 202511015), the IRS worked through real-style scam scenarios and confirmed this reading: a pig-butchering victim who transferred funds intending to invest could claim a theft loss under §165(c)(2), and so could a victim whose investment accounts were emptied after a scammer posing as a fraud specialist talked them into moving the money. The memo is a reminder that these cases are fact-specific — the profit motive has to be real and documentable.

One caution from the same guidance: if the money came out of a retirement account such as an IRA, the distribution itself can still count as taxable income even when the theft loss is deductible. That combination surprises people, and it is a reason to get professional help with large losses.

Which Scam Losses Are Not Deductible?

Losses with no profit motive are personal, and the deduction for personal casualty and theft losses has been switched off:

Romance scams where you sent money to help or meet someone
Impersonation scams — fake IRS, police, bank or “grandchild in trouble” calls demanding payment
Gift card, wire or payment-app scams for bills, fines or purchases
Fake tech-support and refund scams
Extortion and fake-kidnapping schemes

Congress suspended the personal theft-loss deduction for 2018 through 2025, allowing it only for losses tied to federally declared disasters. A 2025 law (Public Law 119-21) then made that restriction permanent — so there is no year coming in which romance-scam or gift-card losses become deductible again. From 2026, losses connected to certain state-declared disasters are also allowed, but disaster relief has nothing to do with scam losses.

Two things that are not theft losses at all:

A token that crashed. If you bought a real coin and it fell to near zero, that is a capital loss when you sell or dispose of it — different rules, including the $3,000 annual limit against ordinary income.
Crypto you lost access to. Sending to a wrong address or losing your private keys is painful, but there is no theft and generally no deduction.

Lost Money in a Ponzi Scheme? There Is an IRS Safe Harbor

For Ponzi-type investment schemes, the IRS published specific guidance years ago that still applies. Revenue Ruling 2009-9 confirms that an investor's loss in a Ponzi scheme is a theft loss under §165(c)(2) — not a capital loss — deductible in the year the fraud is discovered, to the extent there is no reasonable prospect of recovery.

Revenue Procedure 2009-20 adds an optional safe harbor that removes the guesswork. If the scheme's operator has been criminally charged or has admitted the fraud, a qualified investor can deduct, in the discovery year:

95% of the net investment (minus any actual or expected recoveries), if they are not pursuing third-party recovery, or
75%, if they are pursuing or intend to pursue recovery from third parties such as banks or promoters' associates.

You claim it on Form 4684, Section C, and attach a statement electing the safe harbor. Most small crypto scams never reach the “operator charged” stage, so many victims will use the general §165(c)(2) rules instead — but if your scheme makes the news with an indictment, ask a tax professional about the safe harbor before filing.

When Do You Claim It? The Year of Discovery

A theft loss is claimed in the year you discover the theft — which, with scams, is often a year or more after the money left your account. If, in that year, you have a recovery claim with a reasonable prospect of success (an exchange freeze, a court case, an insurance claim), you wait: the loss is treated as sustained when it becomes reasonably certain whether the claim will pay. If you deduct the loss and money later comes back, the recovery is generally reported as income in the year you receive it.

How to Claim It — and the Records to Keep

Investment theft losses are reported on Form 4684 (Casualties and Thefts) with your federal return. Whether the deduction saves you real money depends on your overall tax picture, so run the numbers or have a professional do it.

Documentation is where claims are won or lost. Keep:

Your police report and FBI IC3 complaint
Exchange and wallet records showing deposits, balances and the final transfer out
Transaction hashes and the scammer's wallet addresses
Screenshots or exports of your chats with the scammer, especially the profit promises — they are your evidence of profit motive
Any letters from an exchange or law enforcement about recovery prospects

If you are still being contacted by anyone offering to recover the money for an upfront fee, be careful: fake recovery agents are the most common second hit after an investment scam, and paying one does not create a second deduction worth having.

The Honest Limits of This Guide

Tax law here turns on small facts: what you were promised, which account the money sat in, your state's definition of theft, and whether any recovery is still possible. State tax treatment also varies and does not always follow the federal rule. For a small loss, this guide and Form 4684 may be enough. For anything life-changing, a CPA or tax attorney who has handled theft-loss claims is money well spent — ideally before you file, not after the IRS asks questions.

Sources: Internal Revenue Code §165; IRS Revenue Ruling 2009-9; IRS Revenue Procedure 2009-20; IRS Chief Counsel Memorandum 202511015 (2025); IRS Publication 547, Casualties, Disasters, and Thefts; IRS Instructions for Form 4684; Public Law 119-21 (2025).

This article is for education only and is not tax, financial or legal advice. Read the full original at https://warnscams.com/can-you-claim-crypto-scam-losses-on-your-taxes/

What Are the Top 5 Scams? The Biggest Fraud Types Ranked by Losses

WarnScams — Fri, 06 Nov 2026 18:43:15 +0000

The message arrived on a Tuesday evening, while Daniel was making dinner. A woman he'd matched with on a dating app weeks earlier mentioned almost in passing that her cousin worked in crypto and had shown her a trading platform with steady, modest returns. She sent a screenshot of her own balance. Over the next two months Daniel moved $38,000 into that platform in small transfers, each one "confirmed" by a dashboard that showed his money growing. The dashboard was a web page. The balance was typed in by the people who stole from him. When he tried to withdraw, a "tax fee" appeared. Then the account went silent.

Daniel — a composite of real victim reports, not one person — walked into the single most expensive scam category in America. Ask what the top 5 scams are and most people guess by what lands in their inbox most often: the fake delivery text, the dodgy shopping ad. But frequency and damage are different things. The Federal Trade Commission (FTC) counted $15.9 billion in reported consumer fraud losses for 2025, up from $12.5 billion in 2024, across 3 million fraud reports, while the FBI's Internet Crime Complaint Center (IC3) logged $20.9 billion across 1,008,597 complaints. Ranked by the money actually lost, the list looks quite different from your spam folder.

The short answer

Ranked by reported losses in the FTC's and FBI IC3's 2025 data, the top 5 scams are (1) investment scams, (2) imposter scams, including government and business impersonation, (3) business email compromise, (4) tech support scams, and (5) romance scams. The five below are ranked by reported losses within each agency's own dataset. The FTC and the IC3 count fraud differently and their figures overlap, so their numbers are never added together — and "reported" is the floor, not the ceiling, because most victims never file a report at all.

1. Investment scams — $7.9 billion

Investment fraud took $7.9 billion from consumers in 2025 according to the FTC — roughly half of all reported fraud losses that year, with an average loss above $10,000 per victim. The FBI's IC3 put investment fraud even higher, at $8.65 billion in 2025. No other scam type comes within billions of it.

How it works: the approach usually starts on social media, a dating app, or an unsolicited message — sometimes a "wrong number" text that turns friendly. The scammer builds trust first, then introduces an opportunity: crypto trading, forex, a private placement. Victims are directed to a slick app or website where small test deposits appear to grow. Early withdrawals sometimes even work, deliberately, to encourage a bigger deposit. Then the exit closes: withdrawal "fees," frozen accounts, silence. Cryptocurrency is the rail of choice — the Kansas City Fed's analysis of FTC data found crypto was the payment method in 40% of investment scam reports — because crypto transfers can't be reversed.

Red flags: guaranteed or unusually steady returns, pressure to move from a chat app to a trading platform, a mentor who discourages you from telling your bank what the money is for, and any fee demanded before you can withdraw your own funds. A real investment firm never needs you to pay a tax bill to a separate wallet before releasing your money.

2. Imposter scams — the most reported fraud in America

Imposter scams were the most frequently reported fraud category to the FTC in 2025 — over 1 million reports — and the second costliest, at more than $3.5 billion in reported losses. That total covers criminals posing as government agencies and as businesses. Government impersonation alone cost victims $789 million in 2024, up $171 million from the year before, per the FTC.

How it works: a call, text, or email claims to be from the IRS, Social Security, your bank's fraud department, a delivery company, or a big retailer. There's a problem only they can fix — a suspended benefit, a frozen account, a warrant, a fraudulent charge — and it must be fixed now, on this call, with this payment. Caller ID is spoofed to show the real agency or bank number. The script runs on two fuels: fear and urgency.

Red flags: any demand for immediate payment by gift card, wire, payment app, or crypto; threats of arrest or deportation; instructions to keep the call secret from your bank; and the phrase "don't hang up." Hang up. Then call the institution back on the number printed on your card or statement — never the number that called you.

3. Business email compromise — $3.05 billion

Business email compromise (BEC) cost victims $3.05 billion in 2025 according to the FBI's IC3, making it one of the most damaging fraud types despite targeting far fewer people than consumer scams. One successful email can empty a company's operating account.

How it works: criminals compromise or convincingly spoof a real business email account — a CEO, a supplier, a real estate attorney — then send a message that fits an existing workflow. A finance employee gets a plausible request to update a vendor's bank details. A homebuyer gets wiring instructions for closing day that differ from the real ones by one account number. There's no malware to detect and no link to avoid; the fraud is the request itself.

Red flags: any change to payment details requested by email, secrecy around a routine transaction, and pressure to skip the usual approval steps. Verify every bank-detail change with a phone call to a number you already have, not one supplied in the email.

4. Tech support scams — $2.13 billion

Tech support scams took $2.13 billion in 2025 according to the FBI's IC3. Victims aged 60 and over were hit hardest, reporting roughly $1.04 billion of that total to IC3.

How it works: a full-screen pop-up freezes the browser and blares a warning — your computer is infected, your accounts are compromised, call this number now. Or the call comes first, from someone claiming to be from a major tech company or your bank's security team. The "technician" gets remote access, shows the victim frightening-looking but harmless system screens, and then escalates: the problem has reached your bank account, so your money must be moved to a "safe" account, withdrawn as cash for a courier, or converted at a Bitcoin ATM.

Red flags: a pop-up with a phone number (real security software never does this), any request for remote access from an unsolicited caller, and any instruction to withdraw cash, buy gift cards, or move money to protect it. Shut the browser down — force-quit if you have to — and the "emergency" evaporates with it.

5. Romance scams — $929 million

Romance scams close out the top 5. The FBI's IC3 recorded $929 million in confidence and romance fraud losses for 2025, up 38% from $672 million in 2024. The real figure is certainly higher: romance fraud is chronically under-reported, and its most damaging modern variant — where a fake partner steers the victim into a fake investment — often gets counted under investment fraud instead. That overlap, known as pig butchering, is part of why the investment category has ballooned.

How it works: a profile appears on a dating app or social platform — attractive photos (stolen), a plausible job that explains constant travel, a reason they can never video call or meet. The relationship deepens over weeks of daily messages. Then comes the first small ask: money for a plane ticket, a medical bill, a customs fee — or, increasingly, an invitation to invest together. Requests grow. So does the emotional cost of walking away, which is precisely the leverage the scam is built on.

Red flags: a partner who can't ever meet in person, a relationship that accelerates unusually fast, any request for money or gift cards, and any attempt to move you into investing. Reverse-image-search the profile photos. It takes two minutes and it ends a surprising number of these stories early.

The top 5 scams side by side

Scam type	How it contacts you	What it asks for	Biggest red flag
Investment scams	Social media, dating apps, unsolicited messages, online ads	Deposits into a "trading" platform, usually in crypto	A fee demanded before you can withdraw your own money
Imposter scams	Phone calls, texts and emails spoofing agencies and brands	Immediate payment to fix an invented problem	Urgency plus secrecy — "pay now, don't tell your bank"
Business email compromise	A spoofed or hacked work email inside a real workflow	A wire sent to new or changed bank details	Payment details changed by email and never verified by phone
Tech support scams	Browser pop-ups and unsolicited "security" calls	Remote access, then cash, gift cards or crypto "to protect your money"	A pop-up or caller telling you to move money to a safe account
Romance scams	Dating apps and social media profiles	Money for emergencies — or an invitation to invest together	They can never meet, but the financial requests keep growing

How to protect yourself

Different costumes, same machinery. Every scam in this list depends on rushing you past the moment where you'd normally stop and check. Slow the moment down. Verify any request for money through a channel you chose — the number on your bank card, the official app, a call to a colleague whose voice you know. Treat any demand for payment by gift card, wire transfer, payment app, or cryptocurrency as a near-certain fraud signal; legitimate organisations simply don't collect money that way. And set up friction on purpose: transaction alerts, a second pair of eyes for any transfer over a set amount, a standing family rule that big money moves get a phone call first.

If the worst has already happened, minutes matter more than pride: follow WarnScams' step-by-step plan for what to do in the first 24 hours after a scam, then report the fraud to the FTC at ReportFraud.ftc.gov and to the FBI's IC3 at ic3.gov. Reports feel thankless, but every figure in this article exists because someone filed one.

Sources: Federal Trade Commission, FTC Consumer Sentinel 2025 figures; FBI Internet Crime Complaint Center (IC3), 2025 Internet Crime Report; Federal Reserve Bank of Kansas City, "Contact and Payment Methods Used for the Top Five Categories of Scams"; Federal Reserve Bank of Kansas City, "The Future of Financial Fraud"; FBI, "FBI's 2024 Internet Crime Complaint Center Report Released."

This article is for education only and is not financial or legal advice.

Read the full guide on WarnScams: https://warnscams.com/top-5-scams/

Originally published with the full details and sources at WarnScams.

How to Beware of Scams: 10 Habits That Protect Your Money

WarnScams — Mon, 02 Nov 2026 18:39:20 +0000

Scammers do not need to be clever. They just need you to be rushed, tired, or hopeful at the wrong moment. Most fraud works the same way: a message creates urgency, asks for trust, and then asks for money, a code, or access to your device.

This post was originally published on WarnScams. Read the full guide here: https://warnscams.com/how-to-beware-of-scams/

1. Slow down when a message creates urgency

A real bank, delivery company, or government office will not demand an instant payment over the phone or by text. If a message says your account will be closed in an hour, treat that pressure as a warning sign, not a deadline.

2. Never share verification codes or passwords

No legitimate company will ask for the code sent to your phone, your full password, or remote access to your computer. Anyone who asks for those is trying to take over an account, whatever story they tell.

3. Check the sender through a separate channel

If a message claims to come from your bank or a delivery service, do not reply to it or click its link. Open the official app, or call the number printed on your card or the company's official website, and ask whether the message is real.

4. Hover before you click

Look closely at links and email addresses. Small misspellings, extra characters, and lookalike domains are common in phishing messages. When in doubt, type the address yourself instead of following the link.

5. Be skeptical of unexpected prizes, jobs, and investments

You did not win a lottery you never entered. A job that pays you to tap buttons or move money for strangers is a task scam. An investment that promises guaranteed high returns with no risk is almost certainly fraud.

6. Keep software and two-factor authentication up to date

Updates fix security holes that scammers exploit. Turn on two-factor authentication on email, banking, and social accounts, and prefer an authenticator app over text codes where you can.

7. Use strong, unique passwords

Reusing one password across sites means one breach can open many accounts. A password manager makes unique passwords practical, and it removes the temptation to reuse a familiar one.

8. Verify payment requests, even from people you know

Scammers hijack accounts and impersonate friends, bosses, and family members. If someone asks for gift cards, cryptocurrency, or an urgent transfer, confirm it with a phone call to a number you already trust.

9. Protect personal information

Be careful about what you share publicly: birthdays, travel plans, family details, and job information can all help a scammer sound convincing. The less they know about you, the harder impersonation becomes.

10. Report scams, even if you caught them in time

Report fraud to the FTC at ReportFraud.ftc.gov and, for online crime, to the FBI's Internet Crime Complaint Center at ic3.gov. Reporting helps regulators spot patterns and warn others, and it costs nothing.

The habit that ties all ten together is simple: pause, verify through a separate channel, and never let urgency override that check.

Originally published at WarnScams: https://warnscams.com/how-to-beware-of-scams/

What Are the Three Types of Scams? Phishing, Vishing and Smishing Explained

WarnScams — Sun, 01 Nov 2026 18:41:45 +0000

Most scam messages look different, but they work the same way: they borrow trust, add urgency, and push you to act before you check. The names change with the channel. Phishing arrives by email, vishing arrives by voice call, and smishing arrives by text message. Knowing which channel you are dealing with helps you spot the trick faster.

Phishing: the email trap

A phishing email pretends to come from a business you already use, such as a bank, a retailer, or your employer. It warns about a suspicious charge, a locked account, or a failed payment, then points you to a look-alike sign-in page. Anything typed there goes to the criminal.

Watch for a sender address that is close to the real one but not exact, a generic greeting from a company that knows your name, a threat or deadline, a link that does not lead where it claims to, an unexpected attachment, and any request for a password or PIN. Real companies do not ask for those details by email.

Vishing: the phone-call trap

Vishing is the same idea by voice. Caller ID can be faked, so a familiar number is not proof. A calm caller may claim fraud was found on your account, then insist the fix must happen on this call: move money to a safe account, read back a code, or keep the call secret.

Hang up if you are told not to check, asked to move money, asked for a one-time code, asked to pay with gift cards, wire transfer, or cryptocurrency, or threatened with arrest. Then call the number printed on your card or on the official website, typed by you.

Smishing: the text-message trap

Smishing uses SMS. A common version claims a package is held, a toll is unpaid, or an account needs attention, and adds a link to a cloned site. A small fee, such as $1.99 for redelivery, is often bait. The real prize is the card or personal details entered on the form.

Be wary of a delivery text you were not expecting, a sender number that looks odd, a thread with no history, and sudden urgency about a toll or fine you do not recognize. A friendly wrong-number text that keeps the chat going can also be a setup. Forward scam texts to 7726 (SPAM).

One rule for all three

Never act inside the message that reached you. Do not tap its link, call its number, or reply with details. Go to the source yourself: type the official address, use the app you already have, or call the number on your card.

If you already clicked, answered, or paid, act quickly. Call your bank on the number on your card and ask it to freeze the card and flag recent activity. Change the affected password from a clean device and turn on two-factor authentication. Keep the message as evidence, and report it to the FTC at ReportFraud.ftc.gov and to the FBI Internet Crime Complaint Center at ic3.gov.

Phishing and spoofing drew 193,407 complaints to the FBI Internet Crime Complaint Center in 2024, more than any other crime type the bureau tracks, according to the WarnScams guide.

Read the full guide on WarnScams: https://warnscams.com/three-types-of-scams/

Forex Copy-Trading Scams: Why Mirror-Trading Promises of Easy Profits End in Losses

WarnScams — Sat, 31 Oct 2026 17:40:36 +0000

The pitch sounds effortless. Connect your account to a "master trader," and every trade they make is copied into yours — automatically, while you sleep. No charts. No experience. Just profits.

Copy trading, also called mirror trading or social trading, is a real feature on some legitimate platforms. That is what makes the scam version so convincing. Fraudsters borrow a real idea, dress it in screenshots of luxury cars and winning trades, and use it to pull people into rigged platforms, unregistered schemes, and outright Ponzi operations.

The pattern is familiar

First comes discovery: an ad, a video, or a message from a supposed trader showing month after month of near-perfect results. Then the showcase, with a growing account balance and glowing testimonials. Then the deposit — often small at first, and often in cryptocurrency, which is hard to reverse.

For a while, the dashboard looks great. Small early withdrawals may even work. That is the hook. When someone tries to withdraw a meaningful amount, the story changes: sudden "taxes," "commissions," "verification payments," or margin top-ups. Legitimate brokers do not demand extra deposits to release your own money. That demand is the trap closing.

The scale is not small

The U.S. Commodity Futures Trading Commission (CFTC) sued an operation it alleged ran a $950 million Ponzi-style scheme disguised as expert-managed forex trading, with promises of returns of up to 15% per week from "professional traders." Separately, a U.S. federal court in October 2026 entered a $288.8 million judgment against EminiFX, a fake "robo-advisor" trading club that promised 5% to 9.99% weekly returns. The CFTC said the company posted net trading losses above $49 million while diverting at least $15 million to its founder. As of July 2026, the receiver had returned just over $98 million to more than 28,000 investors — roughly 37 cents on the dollar.

Big courtroom numbers do not mean money comes back quickly, or in full.

Red flags to check before you deposit

Guaranteed or highly predictable returns, such as "no-lose performance" or "risk-free copying."
"Earn money while you sleep" marketing that treats trading as passive, effortless income.
An unregistered operator. In the U.S., retail forex dealers must be registered with the CFTC and be members of the National Futures Association.
An offshore entity with no verifiable address, or customer support that only exists in a chat app.
Crypto-only deposits. That structure removes most dispute and chargeback options.
Withdrawal "fees," "taxes," or "verification payments" demanded before you can access your funds.
Pressure and urgency, recruitment bonuses, and lifestyle marketing instead of a verifiable, audited track record.

Seven checks that catch most scams

Search the firm and the individual on NFA BASIC at nfa.futures.org/basicnet.
Confirm a real headquarters address with an independent map search, and look for a real phone number and company history.
Read the mandatory risk disclosure before opening an account.
Test a withdrawal early, and in full, before depositing serious money.
Never deposit crypto to an unregistered platform.
Search the names plus "scam," "CFTC," "complaint," and "warning." The Cash FX operation, for example, had been flagged by regulators in at least 19 countries.
Talk to an independent, licensed financial advisor — not the platform's "account manager."

If your money is already stuck

Stop sending money at once. Do not pay a "tax" or "fee" to unlock a withdrawal; no further payment will release it. Screenshot balances, transactions, and every message. Make a formal withdrawal request in writing and keep any refusal. If you paid by card or bank transfer, ask your bank about chargeback or recall options right away. And do not hire a "recovery agent" who contacts you first — upfront-fee recovery services that find victims after a loss are almost always a second scam.

Report it to the CFTC at cftc.gov/complaint, the FTC at ReportFraud.ftc.gov, and the FBI Internet Crime Complaint Center at ic3.gov.

Copy trading is not magic. If someone promises easy, guaranteed profits from mirroring a stranger's trades, walk away — and check registration before you trust any platform with your money.

Full guide: https://warnscams.com/forex-copy-trading-scams/

Deepfake Celebrity Investment Ads: How Scammers Fake Famous Faces to Sell Fake Investments

WarnScams — Fri, 30 Oct 2026 17:40:55 +0000

Originally published on WarnScams: https://warnscams.com/deepfake-celebrity-investment-ads/

It starts with a familiar face in your feed. A well-known person looks into the camera and promises that a new trading platform is making ordinary people thousands of dollars a month. The comments are glowing. The link says only a few spots are left. It feels like an opportunity you should not miss.

None of it is real. The voice is cloned, the face is generated, and the comments are written by the same criminals behind the fake platform. The site exists for one purpose: to take your deposit and never give it back.

How big is this problem?

In testimony to Congress on March 25, 2026, the Federal Trade Commission reported that Americans lost a record $15.9 billion to fraud in 2025, with $7.9 billion of that coming from investment scams. FTC data also shows that more than half of the $2.1 billion lost to social media scams in 2025 came from fake investment pitches. Scammers buy ad slots just like legitimate businesses do, and a polished sponsored post tells you nothing about who is behind it.

How the scam works, step by step

The hook. A sponsored video or livestream shows a celebrity enthusiastically recommending a trading platform or crypto opportunity. It may be a deepfake, a cloned-voice dub, or a fake news-style segment.
The landing page. A professional-looking site with charts, testimonials, and a license number that looks official. A countdown timer pressures you to register.
The small first deposit. Usually two or three hundred dollars — deliberately chosen to feel like a reasonable test.
The dashboard grows. You watch a fake balance climb while a personal adviser encourages a bigger deposit.
A small withdrawal is allowed. Getting a little money back builds credibility before the request for much larger deposits.
The big deposits. Savings, retirement money, sometimes borrowed money goes in.
The withdrawal fails. A tax must be paid first, then a compliance fee, then another charge. Each is described as the last one.
The disappearance. The site goes down for maintenance and the adviser stops answering.

Red flags

Guaranteed or near-guaranteed returns, such as double your money in a week or a 98% win rate.
A celebrity with no visible connection to finance suddenly pitching a crypto platform.
Unnatural speech or movement: lips that do not match the audio, odd blinking, stiff facial movement, or a flat voice.
Fake as-seen-on news branding that does not appear on the network's own site.
Countdown timers and only a few spots left in your country.
Contact only on WhatsApp or Telegram, with no company phone number or email.
Deposits only in crypto or wire transfers, with no reversible payment method.
Withdrawal fees, taxes, or verification payments demanded upfront. Real platforms deduct fees from the balance; they do not ask you to send more money first.
License numbers that do not verify on the regulator's own register.

How to verify an ad in five minutes

Check the celebrity's real accounts yourself. If they really launched a platform, it would be on their verified channels. Silence means the ad is fake.
Search the celebrity's name, the platform's name, and the word scam.
Watch the video on mute, then at half speed. Deepfakes often betray themselves in motion.
Check Meta's Ad Library to see who paid for a Facebook or Instagram ad.
Verify the company, not the celebrity, on the SEC's investor.gov and your country's regulator register.

If you are already talking to one of these sites

Stop sending money immediately, and do not pay any withdrawal fee, tax, or verification charge to release funds. Screenshot everything: the ad, the landing page, your dashboard, every chat, and every wallet address. Contact your bank or card issuer right away if any payment went through a bank transfer or card. Block the adviser, leave the chat groups, and if you shared ID documents or passwords, change passwords, enable two-factor authentication, and consider a credit freeze.

How to report

FTC: ReportFraud.ftc.gov
FBI: ic3.gov
SEC tip portal for investment products or fake regulatory claims
Report the ad and page on the platform where you saw it
Your state attorney general

The SEC's Office of Investor Education warns investors not to be swayed by testimonials or celebrity endorsements when making an investment decision. A famous face is bait. Check the company, check the regulator, and close the tab if the returns are guaranteed.

Read the full guide on WarnScams: https://warnscams.com/deepfake-celebrity-investment-ads/

How to Check If an Email Is Legit: The 30-Second Test

WarnScams — Wed, 28 Oct 2026 17:41:05 +0000

Lena was halfway through her morning coffee when an email landed: “Unusual sign-in detected — verify your account within 24 hours.” It looked exactly like her bank's emails, with the same logo, colors, and footer. She was one tap away from clicking when she paused. She had never learned how to check if an email is legit, and this was exactly the moment that knowledge would have mattered.

She did the smart thing. She did not click. She opened her bank's app separately, logged in normally, and found nothing wrong — no alerts, no restrictions, no unusual sign-ins. The email was fake, and the “customer-service number” in its footer was not her bank's number at all. If she had clicked, she would have landed on a copycat login page built to harvest her credentials.

Email is still the cheapest way to reach victims at scale, and people reported losing $3.5 billion to imposter scams in 2025, according to the FTC. That is why a quick check before you click matters so much. Here is the 30-second test.

The 30-Second Email Authenticity Checklist

1. Read the sender address, not the display name. (5 seconds)
Your inbox shows a friendly name like “PayPal Security” or “IT Department.” Tap or hover to reveal the actual address. Display names are free — anyone can label an email “Amazon Support.” If the domain does not exactly match the company's official domain, nothing else in the email matters. Watch for lookalikes such as paypa1.com with a “1” instead of an “l,” amaz0n-support.net, or confusing subdomains like secure-login.chase.verify-now.com — the real domain there is verify-now.com, not Chase. A bank writing from a free address like bank-security-team@gmail.com is also a clear fake.

2. Hover over links to preview the destination. (10 seconds)
On a computer, hold your cursor over the link without clicking and read the address that appears. A button labeled “Verify My Account” can point anywhere. URL shorteners, random strings of letters, or any domain that is not the company's own should stop you.

3. Scan for urgency and threats. (5 seconds)
“Your account will be suspended in 24 hours.” “Immediate action required.” “Your package will be returned.” Real companies send statements and routine notices; they do not pressure you with countdowns and threats. Urgency is a tool scammers use, not customer service.

4. Check what it is asking you to do. (5 seconds)
Does it want your password, card number, one-time code, or a payment? Legitimate companies do not ask for those by email. The request itself is often the verdict.

5. Look at the greeting and the details. (3 seconds)
“Dear Customer” instead of your name is a warning sign — mass-sent fakes cannot personalize. Spelling errors, odd phrasing, and mismatched details are more red flags.

6. Ask: “Did I expect this?” (2 seconds)
An email you did not expect about an account you did not touch deserves suspicion by default. When in doubt, go to the source yourself.

Red Flags That Mean “Delete It Now”

The sender domain is wrong or a lookalike
Hovering reveals a link to a strange domain
Threats or countdowns — “suspended in 24 hours,” “legal action,” “final notice”
Requests for credentials, codes, or payments
Unexpected attachments — invoices, “secure documents,” or delivery receipts you did not ask for
Generic greetings plus specific threats
The reply-to address differs from the sender
It arrived about an account you do not have

Still Unsure? Escalate, Don't Click

Contact the company through a channel you trust: open its official app, type its website address yourself, or use a number from its official site — never use contact details from the suspicious message itself. Use your email provider's built-in tools, which often show authentication results or warnings.

If You Already Clicked or Replied

Do not panic — act in this order. If you clicked a link but entered nothing, close the tab and update your browser. If you entered credentials, change that password right away, turn on two-factor authentication, and change any other account that used the same password. Watch your accounts closely for the next few weeks for unexpected password-reset emails or unfamiliar activity.

How to Report a Phishing Email

Forward it to reportphishing@apwg.org (as an attachment if your email app allows it, so investigators get the full headers). Then report it at ReportFraud.ftc.gov and to the FBI's Internet Crime Complaint Center at ic3.gov. Also use your email provider's “report phishing” button.

The full guide, with sources from the FTC and CISA, is published on WarnScams: https://warnscams.com/how-to-check-if-an-email-is-legit/

Originally published on WarnScams.

WhatsApp Investment Group Scam: How Fake Groups Rig Fake Profits

WarnScams — Tue, 27 Oct 2026 17:38:06 +0000

If you are in a WhatsApp investment group where everyone posts profits and nobody posts losses, you are probably not watching real investing. You are watching a staged performance.

This guide, originally published by WarnScams, explains how these groups work, the roles played by the other members, the red flags to check, and what to do if you are already inside one.

How the scam works, step by step

It starts with a hook: you are added by someone you know, or by a stranger who says they found your number. Then the cast assembles. A mentor or analyst posts market commentary and trade signals, while other members post wins and encouragement.

Next come credibility props: screenshots of company registrations, licences, or trading results that look official but cannot be verified on a real regulator register. Then comes the deposit. Members are sent to a platform that looks like a real trading site, with live charts and a personal dashboard.

At first, the dashboard shows gains. That is the trap. When you try to withdraw, the tone changes. Your account is said to be frozen for a security review, a tax check, or another invented reason, and you are asked to pay a fee to unlock your own money. Paying that fee usually leads to another fee, then silence.

The six characters in every rigged group

The Mentor: the authority figure who posts signals and analysis.
The Assistant: friendly and always available, who walks you through depositing.
The Winners: the loudest voices, posting profit screenshots daily.
The Skeptic-Turned-Believer: someone who first doubts the scheme, then claims to be convinced. That conversion is meant to persuade you.
The Recruiter: pushes you to invite friends and family, sometimes for a referral bonus.
The Silent Majority: hundreds of members, but only a small group ever posts. The rest are filler accounts.

If you can match everyone in your group to a role, you are reading a play, not joining an investment club.

9 red flags

Everyone wins, with no losing trades or complaints in the group history.
The mentor only exists inside WhatsApp, with no verifiable professional profile or regulator listing.
Deposits go to crypto wallets or personal accounts, not to a regulated brokerage in the company name.
The platform is one you have never heard of, recommended only inside the group.
Regulatory paperwork appears only as screenshots, not as registrations you can look up yourself.
Urgency is constant: deposit windows, limited seats, and bonuses expiring tonight.
Profits are guaranteed or absurd.
Withdrawals trigger fresh fees. Real brokers deduct fees from your balance; they do not demand new payments to unlock your money.
You are told to lie to your bank about what a transfer is for.

A real case

On September 29, 2026, the U.S. Securities and Exchange Commission announced fraud charges against entities it said ran this playbook. In one complaint, Cryptoaiml Ltd. and Cryptoaiml Capital Foundation were accused of misappropriating more than $12.5 million from over 300 retail investors between August 2024 and March 2025. In a second complaint, TSAI Pro Ltd. and TSAI Capital Foundation were accused of taking approximately $2.8 million from roughly 1,715 investors from September 2024 to March 2025 through AI trading bot rentals.

The FTC has also reported that consumers lost $2.1 billion in 2025 to scams that began on social media, with WhatsApp ranking as the second-costliest platform after Facebook.

How to verify any investment group before you send money

Search the company name plus scam, complaint, and SEC, outside the group, in your own browser.
Check the registration yourself through the SEC Investment Adviser Public Disclosure site and FINRA BrokerCheck.
Reverse-image-search the mentor profile photo. Stolen photos are routine.
Try a small test withdrawal first, and watch what happens.
Read the deposit instructions. Crypto to a wallet address, a wire to a personal name, or gift cards are serious warnings.
Show the pitch to someone outside the group. The group effect only works in isolation.

If you are already inside one

Stop depositing. Do not pay an unlock fee, tax fee, or verification fee. Do not announce your suspicions in the group, because that can lead to you being removed before you can save evidence. Save screenshots of the group, messages, payment details, and the platform, then leave.

Report it to ReportFraud.ftc.gov, to ic3.gov, and to the SEC. Reporting matters even if you did not lose money, because your report becomes part of the pattern investigators use.

Originally published by WarnScams. Read the full guide here: https://warnscams.com/whatsapp-investment-group-scam/

This article is for education only and is not financial or legal advice.

Customs Fee Text Scam: Why That Small Payment Link Is the Real Trap

WarnScams — Mon, 26 Oct 2026 17:37:45 +0000

You are waiting on a parcel from abroad when a text lands: your package is held in customs, and a small fee must be paid within 24 hours or it will be returned. It looks official, it feels urgent, and the amount is so small that paying seems easier than checking. That is exactly why this scam works.

The fee is not the point. The payment page is. Once card details are entered on a fake customs or carrier page, criminals can use them for larger purchases or pass them on to other fraud campaigns. The small charge is bait; the card data is the catch.

How to spot it

Customs agencies and major carriers do not text you an unsolicited payment link. A genuine hold comes with formal paperwork and a reference you can check through official channels.
Legitimate carrier messages come from verified short codes you signed up for, not a random mobile number.
Watch for a countdown, a threat that the parcel will be destroyed, a tiny oddly specific amount, and a link that is almost right — extra words, hyphens, or a shortened URL.
A real customs process does not ask you to enter full card details in a checkout form sent by text.

What to do instead

Do not tap the link and do not reply, even to say STOP — a reply can confirm your number is active. Open the carrier app or type the carrier's official site address yourself, and check tracking using the number from your original order confirmation. If you are still unsure, wait an hour and call the carrier on a published number you already trust. A genuine customs issue will still be there.

If you already entered card details, call your bank or card issuer straight away using the number on the back of your card, and ask them to block and replace the card. If you shared identity details, consider a fraud alert with the credit bureaus.

Report the message by forwarding it to 7726 (SPAM), reporting it to the FTC at ReportFraud.ftc.gov, and using your phone's report-junk option. Tell family and friends who shop online, too — these texts are sent in bulk and rely on catching someone at the exact moment a parcel is expected.

Full guide: https://warnscams.com/customs-fee-text-scam/

HMRC Tax Refund Scam: Fake Refund Texts, Emails and Calls Explained

WarnScams — Sun, 25 Oct 2026 17:37:25 +0000

A message claiming you are owed a tax refund can look convincing, especially when it uses official-sounding language and a sense of urgency. The core point to remember is simple: HMRC never offers refunds by text or email.

How the scam usually works

You may get a text, email, or call saying you have overpaid tax and need to claim a refund quickly. The message often includes a link to a fake website that asks for bank details, card details, or login information. Once those details are entered, they can be used to take money or access accounts.

Watch for pressure to act fast, a link that does not match the real HMRC site, and a request for personal or banking information by message. A genuine tax matter is not handled by asking you to click a refund link in a text.

What to do if you get one

Do not click the link, do not reply, and do not enter bank details. Delete the message or report it through the usual phishing-reporting route for your phone or email provider. If you are unsure about a tax matter, go to HMRC directly through its official site or contact route, rather than following a link sent to you.

A quick check before you act

Pause and ask: did this arrive by text or email promising a refund? If so, treat it as suspect. Check the sender address, not just the display name, and never share bank details in response to an unexpected refund offer.

Read the full guide on WarnScams: https://warnscams.com/hmrc-tax-refund-scam/

AI Trading Bot Scam: How Fake Trading Bots Steal Your Crypto

WarnScams — Sat, 24 Oct 2026 17:38:09 +0000

A fake AI trading bot does not need to beat the market. It only needs to look like it does, long enough for you to deposit crypto and then pay again to try to get it back.

That pattern sits at the center of two cases the U.S. Securities and Exchange Commission charged on September 29, 2026. The SEC alleged that TSAI Pro Ltd. and TSAI Capital Foundation took at least $2.8 million from about 1,715 retail investors, and that Cryptoaiml Ltd. and Cryptoaiml Capital Foundation misappropriated more than $12.5 million from over 300 investors. Both operations, according to the SEC, used chat groups and supposed AI trading bots to draw people in.

How the scam usually works

It often starts in a WhatsApp, Telegram, or Facebook group. A confident promoter posts winning trades, often under a borrowed name and photo. New members see steady gains, small early withdrawals, and a busy chat full of praise. That social proof is the product.

Next comes the platform. You are asked to deposit crypto to rent a bot tier. Higher tiers promise higher returns. Your dashboard then shows smooth, daily profits with almost no losing days. Real trading does not work that way. Markets move up and down, and any system that claims otherwise is hiding something.

The trap closes when you try to withdraw a larger amount. Suddenly the account is frozen, or you are told to pay a tax, an advance fee, or a verification charge first. Those extra payments do not unlock anything. They are a second round of theft.

Red flags to watch for

Guaranteed returns, a fixed win rate, or phrases like "can't lose" and "zero-risk AI profits"
A pitch that arrives from a stranger in a chat group, not through a regulated firm
A promoter using someone else's name, photo, or credentials
Tiered bot rentals where bigger deposits promise bigger returns
Bonuses for recruiting friends and family
Regulatory certificates or filing screenshots that you have not checked on the regulator's own site
A dashboard that only goes up
Withdrawals that require new fees paid out of your own pocket

If three or more of those show up, walk away. A pattern like that matters more than any screenshot.

Five checks before you send anything

Ask for the strategy in plain language: what markets, what signals, and what was its worst month?
Check registration on the regulator's own site, not on the seller's website. In the U.S., that means the SEC's investor.gov tools and related regulator resources.
Reverse-image-search the team photos. Scam sites often reuse stock photos or photos taken from other companies.
Check the domain's age. A firm claiming years of history with a domain registered months ago is not telling the truth.
Read the fee and withdrawal terms before depositing. If a fee must be paid out of pocket to release funds, stop.

If you already deposited

Stop paying extra fees right away. Save screenshots of the platform, dashboard, chats, and every wallet address and transaction hash. Report it to the SEC, to the FBI's Internet Crime Complaint Center at ic3.gov, and to the FTC at ReportFraud.ftc.gov. If you recruited others, tell them plainly so they can stop too. Change any passwords you shared and turn on two-factor authentication.

The wider context makes the warning urgent: the FBI's 2025 Internet Crime Report reported $20.9 billion in cybercrime losses, with investment scams as the costliest category. The Commodity Futures Trading Commission has also warned that AI cannot turn trading bots into money machines.

This post is for education only and is not financial or legal advice.

Full guide: https://warnscams.com/ai-trading-bot-scam/