A patient investment con — months of friendship, small "test" trades that show fake gains, then one urgent transfer.
How it works
It opens with a wrong number. A text meant for someone else, a polite apology, and a conversation that carries on because the person on the other end is good company. No money is mentioned for weeks, and often for months.
Eventually they talk about investing — not as a pitch, but as something they happen to do well. They offer to show you. The platform looks professional, the balance goes up, and a small withdrawal works exactly as it should. That withdrawal is the point: it is what makes the account feel real.
Then the asks get larger, and at some stage there is urgency — a window closing, a matched deposit, a fee to release the gains. The account balance on the screen keeps rising the whole time. It is not connected to anything.
The name is the industry's own, and it describes fattening an animal before slaughter. It is worth knowing because it explains the shape: the long friendly stretch is not a prelude to the scam. It is the scam.
What it looks like
The hardest thing to believe about any of these is how ordinary the first message is. This is a composed reconstruction — not a real exchange — showing the shape the conversation usually takes.
What it looks like on a bank statement
- Transfers to a crypto exchange from an account that has never sent money to one before.
- A run of small transfers first, spread over weeks, none of them alarming on its own.
- Then one transfer much larger than any of the ones before it.
- The money leaves through a real, legitimate exchange — which is why nothing about the payee itself looks wrong.
What to do
- Ask what the platform is and try to withdraw the full balance, not a test amount. An account that allows a small withdrawal and blocks a large one has answered the question.
- Call the bank's fraud line. Crypto transfers are hard to reverse and the hours matter, so make the call before you are certain rather than after.
- Report it at reportfraud.ftc.gov, and at ic3.gov if crypto was involved. Reports are how these platforms get identified.
- Do not lead with the word scam. Someone in the middle of one has usually been warned that their family would say exactly that.
Also called
crypto investment scam · sha zhu pan · romance investment scam
Not sure about a message you already have?
Paste the text, the email, or just the link into Second Look. Rowan reads it and tells you what it sees, in plain English. Free, and no account.
Watching for this on someone else’s account
Rowan reads an aging parent’s bank statements for this pattern and four others, and tells you when there is something worth a call — with the reasons, and with what to say when you make it. Read-only: it can see, but never move, money, and there is nothing for her to install. See how it works.