Yaniv Hanoch

Scams all have one thing in common – they insidiously take advantage of people’s cognitive biases and psychological blind spots.

They include “pig butchering” a way of fattening up victims with affection, the missing person scam which involves posting fake content on social media pages, the traditional PayPal scam, and a new scam called the “fake app alert” in which malware is hidden on apps that look legitimate.

Pig butchering

In our work as fraud psychology researchers we have noticed a trend towards hybrid scams, which combine different types of fraud. Hybrid scams often involve crypto investments and sometimes use trafficked labour in the US alone, the FBI recently reported that people lost US $3.3 billion (£2.6 billion) in 2023 to investment fraud.

Pig butchering is a long-term deception. This type of scam combines elements of romance scams with an investment con. The name comes from the strategy of “fattening up” a victim with affection before slaughter.

It will usually begin with standard scam approach like a text, social media message, or an introduction at a job board site.

Victims may have their guard up at first. However, these scams can unfold over months, with the scammer slowly gaining the victims’ trust and initiating a romantic relationship all the while learning about their vulnerabilities.

For example, details of their financial situation, job stresses, and dreams about the life they want. Romance scammers often saturate their targets with affection and almost constant contact. Pig butchering sometimes involves several trafficked people working as a team to create a single persona.

Once the victim depends on the scammer for their emotional connection, the scammer introduces the idea of making an investment and uses fake crypto platforms to demonstrate returns. The scammers may use legitimate sounding platforms. Victims can invest and “see” strong returns online. In reality, their money is going directly to the scammer.

Once a victim transfers a substantial amount of money to the con artist, they are less likely to pull out. This phenomenon is known as the “sunk cost fallacy”. Research has shown people are likely to carry on investing money, time and effort in activities they have already invested in and ignore signs the endeavour is not in their best interests.

When the victim runs out of money or tries to withdraw funds, they are blocked.

The victim is left with not only financial devastation, but also the loss of what they may imagine to be their most intimate partnership. They are often too embarrassed to discuss the experience with friends and family or to report to the police.

Fake payments

Fake payment requests are a common attack that works by volume rather than playing the long game. Payment requests appear to come from a genuine source. Fraudulent messages typically begin with a generic greeting, an urgent request and a fake link.

For example, Dear User: You have received a payment, or you have paid too much. Please click link below for details. Users are directed to a spoofed website with a legitimate sounding name and asked to enter their account information and password.

These scams work through mimicry and play on the human tendency to trust authority. Legitimate PayPal correspondence is usually automatic bot language, so it is not difficult to imitate.

But remember, genuine messages from will use your first and last name.

Fake app alerts

People post mobile apps, designed to steal users’ personal information, on the Google Play or Apple app store.

The app often has a legitimate function, which gives it a cover. Consumers unknowingly jeopardise their private information by downloading these apps which use malware to access additional information.

Although there has been media coverage of Android security issues, many users assume malware cannot bypass app store screening. Again, this scam plays on people’s trust in authority figures to keep them safe.

Discuss any investment opportunities with friends, family members or professionals.

It is much easier said than done, but exercising caution one of the best strategies to reduce the chance of becoming a fraud victim.

Scammers count on people paying little to no attention to their emails or messages before clicking on them or providing valuable information. When it comes to scams, the devil is in the missing details. — The Conversation