Key Takeaways
- • The FBI's 2025 Internet Crime Report identifies cryptocurrency investment fraud as responsible for more than $11 billion in reported losses last year, with withdrawal freezes followed by tax or fee demands as the defining indicator of irreversible fraud.
- • The FBI characterizes the withdrawal freeze coupled with demands for "taxes" or "fees" as "a trap"—the critical moment separating an active fraud scheme from the point of no return, rather than earlier elements of the pitch.
- • Fraudsters employ a multi-week or multi-month trust-building phase before monetization, using social media, dating apps, WhatsApp, Telegram, and online advertising as initial contact vectors, with early requests to move conversations to private messaging platforms serving as warning signals.
- • Trust-manufacturing tactics documented by the FBI include flattery, invented shared experiences, coaching victims on responses to law enforcement inquiries, and in sophisticated cases, deepfake videos or hired impersonators posing as trusted contacts.
- • The fraud pitch typically arrives after trust is established, offering cryptocurrency trading, AI-based programs, futures trading, or gold futures framed as insider expertise offered as a personal favor.
Summary
The FBI's 2025 Internet Crime Report quantifies cryptocurrency investment fraud as a significant threat to financial security, with documented losses exceeding $11 billion annually. The bureau has identified a recurring operational pattern within these schemes that distinguishes the critical inflection point at which victims transition from active participants in what appears to be legitimate investment activity to fraud victims with irreversible losses. That moment occurs when a withdrawal request triggers an account freeze, followed immediately by a demand for taxes, fees, or additional capital to unlock access—a sequence the FBI explicitly characterizes as "a trap."
This withdrawal-freeze-plus-fee dynamic is strategically positioned at the conclusion of an extended trust-building phase, not at the scheme's inception. Investigators note that fraudsters typically allow weeks or months of apparently legitimate platform activity before the freeze occurs, which explains why the withdrawal mechanism, rather than the initial investment pitch, serves as the FBI's primary educational focal point for rapid fraud detection. The delayed monetization approach is intentional: it allows sufficient time and apparent activity to cement victim confidence before the irreversible seizure of assets.
The FBI's guidance documents the full operational sequence. Initial contact typically originates through social media platforms, dating applications, WhatsApp, Telegram, or online advertising. An early request to relocate conversations to private messaging applications constitutes itself a warning indicator. Once private communication is established, fraudsters deploy systematic trust-manufacturing tactics: flattery, invention of shared experiences, explicit coaching on how to respond if law enforcement makes contact, and in advanced variations, deepfake video fabrication or hired individuals impersonating the supposed contact.
Following successful trust establishment, the investment pitch arrives, typically offering cryptocurrency trading opportunities, AI-based trading programs, futures trading arrangements, or gold futures contracts. These offerings are consistently framed as exclusive insider expertise the contact is offering as a personal favor—a positioning that leverages the manufactured relationship to overcome rational skepticism about unusually attractive returns or opportunities.
This withdrawal-freeze-plus-fee dynamic is strategically positioned at the conclusion of an extended trust-building phase, not at the scheme's inception. Investigators note that fraudsters typically allow weeks or months of apparently legitimate platform activity before the freeze occurs, which explains why the withdrawal mechanism, rather than the initial investment pitch, serves as the FBI's primary educational focal point for rapid fraud detection. The delayed monetization approach is intentional: it allows sufficient time and apparent activity to cement victim confidence before the irreversible seizure of assets.
The FBI's guidance documents the full operational sequence. Initial contact typically originates through social media platforms, dating applications, WhatsApp, Telegram, or online advertising. An early request to relocate conversations to private messaging applications constitutes itself a warning indicator. Once private communication is established, fraudsters deploy systematic trust-manufacturing tactics: flattery, invention of shared experiences, explicit coaching on how to respond if law enforcement makes contact, and in advanced variations, deepfake video fabrication or hired individuals impersonating the supposed contact.
Following successful trust establishment, the investment pitch arrives, typically offering cryptocurrency trading opportunities, AI-based trading programs, futures trading arrangements, or gold futures contracts. These offerings are consistently framed as exclusive insider expertise the contact is offering as a personal favor—a positioning that leverages the manufactured relationship to overcome rational skepticism about unusually attractive returns or opportunities.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.