Fighting Cyber Crime Through Education
“Hi! I missed you at the dinner last night.” -Unknown texter
”Sorry, wrong number” -You
”Oh, sorry! You seem really nice tho. Can we be friends? My name is…..” -Unknown texter
Shockingly, this random stranger is an above average attractive individual who is suddenly in love with you and, oh shoot, just got into an accident/got sick and needs your help! Medical expenses are only $5000… for now.. then they need you for something else, and before you know it all your savings has all gone to some random “friend” you have never met in person.
Sadly, this is a very common story. Billions of American dollars are lost to scammers every year.
But this story gets much darker. Not only are people robbed all the time, but the the approach is cruel and manipulative. These scammers convinced you that they love you and they just need your help. You are just trying to be a good person, and they take you for a ride. The trauma of being used and then discarded after you have been drained dry is heartbreaking and can last a life time.
But it gets worse… where does this money go? Who is actually doing the scamming?? There are cases of human trafficking and enslaving people into these scammer roles.
Jejune got the pleasure to sit down with Kim Casci-Palangio from the The Cybercrime Support Network to enlighten us more into romance scams, the ins and outs, and how we can protect ourselves and our loved ones.
Where are you and the organization based?
Our headquarters is located in Phoenix, AZ, but all of our employees are remote and located in various locations within the Continental US. We are a national 501(c)(3) nonprofit.
Can you define cybercrime?
We define cybercrime in two ways:
● A device is the object of the crime: A criminal wants to gain access to your computer, phone, etc. Devices and technology are required to perpetrate this crime.
● A device or the internet is used as a tool to commit an offense: A criminal uses technology to get your personal or financial information— think identity theft. A criminal can still perpetrate identity theft without using any technology, but technology makes it easy to commit this crime
What is the most common form of cybercrime?
Imposter scams. (See here and here for data from the FTC). An imposter scam is when a criminal pretends to be someone else in order to steal money or sensitive information.
Romance scams are a type of imposter scam, but so are things like fake websites, tech support scams, lottery/prize scams, and family/friend emergency scams.
You work particularly with victims of online romance scams. For those who don’t have experience with this, can you please describe what these are?
Romance scams involve cybercriminals creating fake identities on dating sites or social media, often using stolen or AI-generated photos. They target profiles suggesting loneliness or a desire for a relationship, then use charming language to build trust.
After establishing emotional connections, they fabricate crises to manipulate victims into providing financial assistance, such as for medical emergencies, business problems or travel issues.
To avoid detection, the scammers instruct victims to keep their relationship secret, framing it as a sign of true love or to protect the relationship from external judgment.
If the victim complies with the initial request, scammers return with additional, increasingly urgent demands for money. They exploit the victim's emotions and the pre-existing bond, sometimes spinning even more elaborate stories to keep the scam going.
Scammers often cut off contact once the victim becomes suspicious or runs out of money.
How common are these crimes? How much money is lost every year?
Romance scams are much more prevalent than people may think. According to the FTC, Americans reported losing over $1.3 billion dollars to romance scams in 2023. Unfortunately, the real cost on the US economy is estimated to be much higher because a majority of victims don't report these scams. This underreporting makes it difficult to fully grasp the problem's scope, limiting efforts to effectively address and prevent romance scams.
There are numerous reasons why victims don’t report. Many of these victims don’t report due to shame and embarrassment associated with these scams. Some attempt to report to their local law enforcement, only to be turned away because of a lack of resources.
This dates back to the famous Nigerian Prince scams. How have these scams evolved over the years?
With the evolution of new technologies, like artificial intelligence (AI), cybercriminals are able to create more believable and less detectable scams.
In the past we’ve recommended that people look out for spelling or grammar errors, or video chat with an individual to confirm their identity. Unfortunately, this advice no longer holds weight because of AI. With AI, scammers can create realistic phishing campaigns and fake websites without errors. They can also use voice cloning and real-time deepfakes during video chats to further deceive their targets.
From your experience, where are these scams normally based out of?
Romance scams are a global issue. There are hotspots in places like West Africa, Eastern Europe, and Southeast Asia, but they're not just limited to those regions. Romance scams can even be based out of the United States, with scammers using their cultural and societal knowledge to build trust more easily with their targets.
Some of these scammers sign up for this gig willingly, working in scam factories and call centers. However, in places like Southeast Asia, it's a whole different story. People get roped in with false promises of jobs. Once they're in, it's not like they can just walk away. They're forced into it, often through threats or violence. It's one of the dark sides of the scamming world that doesn't get talked about enough.
Why are they so easy to fall for? Who is at the highest risk?
These cybercriminals are masters of emotional and psychological manipulation. They put in serious hours crafting these believable personas and earning their target's trust. We're talking weeks, even months sometimes, just to build a connection.
Scammers specifically target those who are lonely or have experienced recent trauma, such as a divorce or the loss of a spouse. They know that these people may be more susceptible to their tactics. The combination of expertly crafted deception and the victim's emotional state creates a powerful illusion of a real, caring relationship, making it difficult for victims to see the scam for what it is until it is too late.
What are warning signs of a potential scam?
Here are some of the main red flags of a romance scam:
● Rapid Romance Development: The person professes love or strong affection very quickly, often within days or weeks of starting the conversation.
● Inconsistencies in Their Story: Their personal stories or details don’t add up, or they avoid answering specific questions about themselves.
● Avoidance of Face-to-Face Meetings: They consistently come up with excuses to avoid meeting in person. If they can’t meet face-to-face within a month, that is a major red flag.
● Requests for Money: They ask for financial help, often citing emergencies such as medical issues, travel expenses, or business problems. They also request money through unconventional means, like cryptocurrency, wire transfers, gift cards, or prepaid debit cards
● Secrecy and Isolation: They encourage the relationship to be kept a secret or become upset if it is discussed with friends or family. This isolation tactic is a common strategy used by scammers.
● Overly Flattering and Sympathetic: They constantly give excessive compliments and sympathy, creating a strong emotional dependence.
Why is it so hard to track who is doing these?
From what we know, tracking cybercriminals is a challenge for several reasons:
1. Cybercriminals take advantage of the anonymity of the internet with fake profiles and stolen identities, creating an untraceable digital footprint.
2. They often operate across international borders, exploiting jurisdictional gaps between countries and making it difficult for any single law enforcement agency to take action.
3. Cybercriminals employ sophisticated techniques, such as using virtual private networks (VPNs) and proxy servers, to hide their actual locations.
4. Financial transactions associated with these scams typically involve untraceable methods like cryptocurrency, wire transfers, or gift cards, which are hard to track and recover.
5. Many victims are hesitant to report these crimes due to embarrassment or fear of judgment, which hinders accurate data collection and the ability for law enforcement to identify patterns and perpetrators.
What are your thoughts on the psychology behind the people who commit these attacks?
Though we have spent many years supporting victims of cybercrime, we aren’t experts with regard to the psychology behind the criminals who commit these crimes.
What we do know is these scammers employ dark manipulation tactics and narcissistic behaviors like gaslighting to exploit their victims' vulnerabilities—just like in abusive relationships. They're masters of psychology, exploiting our natural human tendencies. For instance, they manipulate the release of chemicals like dopamine and oxytocin when we start to like and trust someone. What's striking is that victims of these crimes span all backgrounds and education levels, underscoring the universal power of emotional manipulation as a universal human trait.
Some other things to note that may shed light on the effort and thought that some criminals put into committing these crimes:
● They follow scripts. They use pages and pages of pre-written dialogue and advice that have been tested and proven based on psychology. The script will have many different scenarios to follow so the cybercriminal is prepared for any twists and turns the conversation may have.
● They utilize scammer forums/chat rooms where they ask each other for advice on how to respond to their victims to keep them sending money or keep them engaged.
● They share and swap personas if they think a particular person will react better to a different picture/persona.
● Many times scammers will work in teams (so several people will be talking to one victim). They may divy up tasks like: One person will be in charge of texting, another will handle the phone calls/videos calls, etc. SO one victim may be up against a team of scammers. Sometimes, victims will say that their scammer had a different tone than when they spoke on the phone (used different phrases, was more loving over one platform than the other…) These are indicators that they may have been talking to multiple scammers pretending to be one person.
There has been evidence of people being human trafficked and forced into working these scams on people. Do you think this is the norm?
We know for a fact that some scammers are actual victims themselves. These individuals have been lied to and held captive by syndicates who run large scam operations in various countries. Unfortunately, this is probably happening on a larger scale than we currently estimate since human trafficking is difficult to track.
Does this mean that every cybercriminal is a victim of human trafficking? No.
So, I don’t know if we can put it in terms of the “norm”, but I think it's something we have to be aware of when trying to address this problem.
Should we be worrying about the people who are scamming us?
There are so many facets to cybercrime. Humans want there to be a clear villain, but with cybercrime, sometimes it's not that straightforward. Again, we know that some people commit cybercrime under coercion. It’s important to keep that in mind and understand that addressing the diverse types of cybercriminals requires multiple solutions.
It seems like these scammers across the globe really target Americans. Why do you think that is?
We’ve seen some reports that say the US is the most scammed country in the world (one example from 2018).
Though it's certainly important to know which countries are being affected by scams the most, we should not neglect to focus on the fact that criminals target the vulnerable. There are vulnerable populations in every country, so no country is immune to cybercriminals.
A cybercriminal's main goal is to steal money or information, and if they can obtain both, it's even more advantageous. Not everyone has money, but everyone has information. Scammers can use your personal information (name, pictures, ID numbers, etc) to commit crimes against others with more financial resources or use your stolen identity to obtain credit cards and loans in your name.
With regard to scams, there are many who are considered vulnerable:
● Elderly individuals who may not be tech savvy
● Individuals who are lonely
● Individuals who experienced recent trauma (divorce, loss of a spouse, etc.)
● Individuals who are in debt or have little savings (student loans)
● Individuals looking for love (Love is a leap; starting a relationship requires that you allow yourself to be vulnerable)
● Distracted/busy Individuals
Do you feel our government is doing enough to protect our people from these scams? What would you like to see more of?
This is a difficult problem that requires a global solution. Though individual governments certainly have a responsibility to create legislation that protects people who live within its borders, the complete solution requires global initiatives and cooperation. Until that happens, cybercrime has no realistic, lasting solution and victims will not be able to recover their money or information.
Do you feel these scams are simply just a way for people to try to get rich quick off of people or do you feel this goes deeper and is just another way to attack the American people?
Cybercrime is perpetrated by many different types of individuals and groups in many countries around the world. So, there are many reasons behind why these crimes are committed.
Some cybercriminals are simply bad people.
Some are looking to make money to survive because that's the only way to earn a living in their community.
Some individuals are forced into it. Victims of human trafficking are forced to commit scams or face severe punishment, like torture or beatings.
Some cybercriminals are looking to destabilize groups, governments, etc.
For the average consumer, the bottom line is that people are out there collecting your information and trying to steal your money.
Have any scam rings ever been caught?
At the FBI Internet Crime Complaint Center, they sift through thousands of daily reports, looking for patterns and connecting cases like pieces of a puzzle. When enough evidence is gathered, they can trace trails that often lead to criminal rings.
However, success hinges on various factors: the ability to follow the trail, the presence of sufficient evidence, and the jurisdiction of the crime ring's location. If the crime originates in a country that doesn't cooperate with the US, the investigation hits a dead end.
The Department of Justice issues reports when they have apprehended anyone involved in a crime ring, both nationally or internationally. For example, there was a case from Chicago where 100 victims were targeted by a ring operating in Africa. A conspirator in the US was funneling money back to the African ring. After the trial, the conspirator was jailed, and restitution was ordered.
In such cases, if the DOJ freezes accounts, the assets are distributed among linked victims. However, the challenge lies not only in locating these criminals but also in their ability to hide and launder money. Some victims, often unaware or coerced, aid criminals in money laundering.
Is there any speculation as to where all these billions of dollars is going towards?
Since cybercriminals request untraceable payment methods like cryptocurrency, wire transfers, or gift cards, it is incredibly difficult to know exactly where this money is going.
Experts have many theories as to where this money is going:
● This money funds organized crime syndicates, including activities such as drug trafficking, arms smuggling, and human trafficking.
● Funds are laundered and reinvested into cybercrime operations, allowing scammers to develop more sophisticated techniques and tools to target victims.
● Funds are hidden in offshore accounts to evade detection and law enforcement.
● Individuals use these funds for survival and to support their families.
What should someone do if they think they might be being scammed?
Here are some steps to take if you think you have been scammed:
● Stop Communication: Cease all communication with the scammer immediately to prevent further manipulation or financial loss.
● Document Everything: Keep records of all communication, transactions, emails, or any other relevant information related to the scam. This documentation may be necessary for reporting the scam to authorities or for potential legal action.
● Contact Financial Institutions: If money has been transferred or sensitive financial information has been shared, contact your bank, credit card company, or any other financial institution involved. They may be able to help prevent further unauthorized transactions.
● Protect Sensitive Information: If you shared personal information, take steps to protect yourself from identity theft. This may include placing a credit freeze/fraud alert on your credit report, changing your passwords, or closely monitoring your accounts for suspicious activity.
● Alert Online Platforms: Report the scammer to the dating website, social media platform or messaging app where the scam began.
● Stay Vigilant: Remain cautious of unsolicited emails, messages, or calls. After you’ve been scammed once, you're more likely to be targeted again.
● Seek Support: Reach out to trusted friends, family, or support groups.
What are the signs to look out for to catch a loved one getting caught up in a scam?
Our blog “How to Recognize Warning Signs of a Loved One Involved in a Romance Scam” goes in depth about this. Key indicators include:
● Significant emotional life changes, such as divorce or loss of a spouse
● The love interest avoids in-person meetings
● An idealized love story that progresses unusually quickly
● Increased social isolation
● Excessive device usage
● Financial requests from the love interest
A lot of these scam artists build deep relationships with their victims. How do you convince a loved one that this is all a lie?
Our blog “How to Approach a Loved One Involved in a Romance Scam” goes in depth about this.
In summary, before discussing a romance scam with a loved one, prepare yourself by checking your mental state to ensure you can provide non-judgmental support. Be prepared for multiple discussions as it may take time for them to accept the truth.
Acknowledge the emotional investment your loved one made in the relationship and the profound sense of betrayal they might feel. Approach the conversation with empathy, focusing on understanding their feelings without judgment. Use careful language to avoid misunderstandings, and emphasize that the scammer is to blame for the deceit and exploitation.
How does one recover from, not only the money loss, but the heartbreak and betrayal?
The road to recovery from a romance scam is a long one. It is both an emotional and financial trauma.
We often tend to be hard on ourselves, and these victims might be in the midst of self-judgment. But they're not foolish or at fault. They're compassionate individuals who fell victim to a deceitful crime. Thinking they found their lifelong partner, they offered help in times of need. Now, they're grappling with grief and loss.
From what we’ve seen, no two victims recover in the same way. For instance, some of the participants in our Romance Scam Recovery Group say they will never date online again, while others have already gotten back out there.
The best way for a romance scam victim to recover from the heartbreak and betrayal is to find a non-judgemental support system, whether that be friends, family or a support group. It’s important for these victims to understand that they aren’t alone, and this is happening to more people than they realize.
We also recommend that victims take full advantage of resources available to them, such as:
● Emergency mental health resources, like the 988 Suicide and Crisis Hotline
● Non-emergency mental health resources, like the Victim Connect Resource Center
● Community resources, like 211
● Financial resources, like the Consumer Credit Counseling Service
● Legal resources, like National Crime Victim Bar Association
These romance scams create the perfect partner. A lot of people struggle going back into the dating world after these encounters. What advice would you give someone trying to connect with real people who are flawed?
When dating online, remember, you need to protect yourself first and foremost. Trust is earned; strangers shouldn't automatically be given your trust.
Ask lots of questions and do extensive research, using tools like reverse image search and Google name search. Check them out thoroughly before meeting in person. Do not take what they send you as fact. Copies of license or passports can be easily altered or recreated.
Also- don’t even consider dating someone who does not live in your area. You need to meet the individual in person within 2-3 weeks after meeting online before you get serious. If they can’t meet you in person after 2-3 weeks, end the online relationship. They either aren’t prioritizing you or they are a scammer. You don't want to date either of those types of people.
These scams can be exciting – the perfect girl/guy who will share their millions with you! It is addictive to talk with these people. How does one break the cycle?
The truth is, it's easy to get hooked into their trap, especially when they play on your emotions. It's all about knowing the signs. Educating yourself on the common tactics scammers use and being able to spot those red flags can be a game-changer. Don't be afraid to double-check things. If something seems too good to be true, it probably is. And it never hurts to get a second opinion from a trusted friend or family member. Having someone else's perspective can really help keep you grounded.
With AI only getting better, how will this impact these crimes? What can people do to prepare?
With AI rapidly improving, cybercriminals are able to create more believable and less detectable scams. It can be used to automate various aspects of cybercrime—such as generating convincing phishing emails, crafting realistic deepfake videos, or deploying advanced malware—that can evade traditional detection methods.
To prepare for these advancing threats, individuals and organizations will need to prioritize cybersecurity awareness and education. It’s important to stay informed about the latest cyber threats and scams, regularly update security software and systems, implement strong password practices, and exercise caution when sharing personal information online.
On a larger scale, collaborative efforts between government agencies, cybersecurity experts, and technology companies are also essential to develop robust cybersecurity strategies and regulations to mitigate the impact of AI-enabled cybercrimes.
With COVID making people more isolated, have we seen an increase of these crimes?
In 2019, prior to the COVID lockdown, romance scams accounted for $156.8 million in losses reported to the FTC. By 2021, in the midst of the pandemic, reported losses due to romance scams jumped to $468.4 million, an increase of almost 200%.
COVID made all of us more reliant on technology and cybercriminals took advantage of this shift in our online activity. The lockdowns and social distancing measures heightened feelings of loneliness and isolation for many people. As people turned to the internet for connection, individuals became more vulnerable to romance scams.
What exactly does your organization, Cybercrime Support Network, do to help these victims? Can you tell us a little bit about your programs?
To support those impacted by romance scams, Cybercrime Support Network offers the Romance Scam Recovery Group—a free, confidential peer support program to help romance scam victims work through the loss, embarrassment, and isolation that often accompanies these scams.
Romance scams cost Americans billions of dollars each year, and are quickly evolving with the rapid advancements of artificial intelligence (AI). Recently, perpetrators have started leveraging AI technology to craft convincing online personas in order to manipulate emotions, presenting significant challenges to potential victims and making these scams more difficult to detect.
Despite the prevalence of these scams, there remains a lack of resources and support for those affected. Many victims often face shame and victim-blaming from family, friends, and even strangers, heightening their feelings of loneliness and isolation. In many cases, victims are left to go through the emotions and trauma that come along with romance scams on their own.
CSN’s Romance Scam Recovery Group is entirely free for participants and is conducted virtually. Whether a participant joins by telephone or video conference link, they can connect with others across the nation who share similar experiences, supporting each other in the recovery process.
This FREE program provides:
● 10 weekly one-hour peer group sessions facilitated by a licensed counselor
● Guidance to support the participants’ mental well-being
● Education on cybercrime and best online safety practices
● Access to a supportive community of individuals with similar experiences
● Closed and monitored group communications
Learn more and register:
FightCybercrime.org/Romance-Scam-Recovery-Group
What advice would you give someone struggling with being a victim of one of these attacks?
When dealing with the aftermath of a romance scam, it's essential to lean on your support system. Reach out to trusted friends, family, or a support group for guidance and emotional support. While some may struggle to understand at first, there are people who will offer understanding and compassion. Online or local support groups for scam victims can also provide invaluable connections with others who have been through similar experiences.
Prioritize your emotional well-being by seeking counseling or therapy to process the experience and develop coping strategies. Remember, you're not alone, and there are resources available to help you navigate through this challenging time.
What advice would you give someone with a loved one who was a victim?
Supporting romance scam victims can be emotionally challenging for family and friends as they witness their loved ones navigate the aftermath of betrayal and financial loss. The realization that someone close to you has been targeted and deceived by a scammer can evoke feelings of shock, anger, and helplessness.
Here is some guidance for those who have a loved one who has been affected by a romance scam:
● Listen without Judgment: Once your loved one realizes they were involved in a romance scam, they will feel a mixture of emotions. Continue to keep in mind that they are not only dealing with financial loss—they are also mourning the death of a relationship. The relationship was real to them even though it was based on the scammer’s lies.
● Help Them With Immediate Action Steps: Once your loved one has accepted they were involved in a romance scam, there are immediate action steps they need to take to protect themself. Consider helping them with the following:
1. Gather and organize all documentation related to the scam (Texts, emails, pictures, records of money transactions, etc.)
2. Contact any financial institutions that were involved in the scam.
3. Monitor credit reports and financial accounts for suspicious activity.
4. Advise them to consider placing a freeze on their credit.
● Remain Vigilant: Even after implementing immediate action steps, it’s vital to remain vigilant against potential threats. Scammers will likely try to use stolen information to perpetrate further crimes against your loved one. In order to prevent revictimization, help your loved one with the following:
1. Implement multi-factor authentication on important accounts.
2. Update privacy settings across various platforms.
3. Enable automatic updates for enhanced security.
4. Change all passwords. Consider using a password manager to ensure you create strong, unique passwords for every account.
5. Educate them about common scams and how to recognize them in the future. Knowledge is one of the best defenses against scams.
● Assist with Reporting: Help your loved one to report the scam to relevant authorities and platforms. Reporting not only creates a record for future reference but also aids in preventing further victimization and assists law enforcement in apprehending perpetrators. It’s important to remember that your loved one might hesitate to report their romance scam to authorities due to feelings of embarrassment or reluctance to relive the traumatic experience. Don’t pressure them to report before they’re ready. Consider suggesting that they report a little at a time. This approach can make the process more manageable and empower them to take control of their recovery at their own pace.
● Encourage Professional Help: Consider suggesting your loved one seek guidance from a counselor specializing in emotional trauma. Counseling can aid in processing complex feelings and figuring out strategies for healing and moving forward. It’s important to acknowledge the psychological manipulation your loved one endured and emphasize how professional support can help during their recovery.
● Stay Involved: Maintaining open communication and offering ongoing support is vital. Loneliness and isolation can make victims vulnerable to revictimization, which highlights the importance of your presence as a trusted support network. By staying involved, you provide crucial emotional support and you can help mitigate the risk of your loved one being revictimized by scammers.
● Prioritize Your Own Self-Care: Remember to prioritize your own well-being throughout this process. Supporting a loved one through the aftermath of a romance scam can be emotionally taxing. Seek support from counselors or support groups if needed to ensure you can provide effective support while safeguarding your own mental health.
With so many people being attacked across our country, why do you think we are not talking about this more?
I think there are a few reasons why this issue might not be getting the attention it deserves:
1. There's so much going on in the world right now, from political turmoil to natural disasters, that sometimes other important issues can get overshadowed.
2. Cybercrime can feel a bit abstract compared to more tangible threats like physical crimes. It's happening in this digital world that's kind of invisible to many people.
3. There's often a stigma attached to being a victim of cybercrime. People might feel embarrassed or ashamed to talk about it, which can lead to underreporting.
4. Victim blaming exacerbates this stigma by unjustly shifting the focus onto the actions or behaviors of the victim, rather than addressing the perpetrator's wrongdoing.
5. Many individuals succumb to the overconfidence bias, fostering a false sense of security that shields them from the perceived threat of cybercrime. The reality is that cybercrime knows no bounds; it can impact anyone, irrespective of age, gender, or socioeconomic background.
It's definitely a conversation we need to have more openly and urgently.
To learn more about cyber crime and how to protect yourself and your loved ones, please check out the links below:
https://www.instagram.com/fightcybercrimecsn/
https://www.facebook.com/cybersupportnet/
Advocating Against Romance Scammers (AARS):
Operation Shamrock:
