What's going on
It starts with something forgettable. "Hi Michael, are we still on for Thursday?" or "Is this Dr Patel's clinic?" You reply to say they have the wrong number, because that is the polite thing to do. They apologise warmly, make a small joke about it, and somehow you are having a conversation.
Nothing about money comes up for weeks. That is the part people find hardest to believe afterwards, because the patience is the method. What follows is often called pig butchering, a translation of the Chinese term for fattening a pig before slaughter, and the name describes the structure exactly. The relationship is the fattening. TRM Labs found that more than half of the pig butchering schemes it sampled showed apparent links to large transnational organised crime groups (TRM Labs). These are industrial operations run out of compounds, not individuals chancing their luck.
Where it ends: £60,000 and an entire pension
A man from Chatteris in Cambridgeshire lost £60,000 to a crypto investment scam, including the whole of his pension. In his case the first contact was a phone call rather than a text, from somebody claiming to be from an investment management company who wanted to talk to him about investing in cryptocurrency.
The opener varies. Everything after it does not. As part of the investment he was encouraged to download an app, and once it was installed the fraudsters had complete control of his finances. They moved thousands of pounds out of his accounts. Then they reached his pension.
Officers are in touch with him and safeguarding measures are in place, which is what happens after the money has gone rather than instead of it. Worth sitting with that figure for a moment. Not £600 as a lesson learned. Sixty thousand pounds and a pension that took a working life to build.
These crews run text openers, cold calls and social media approaches interchangeably, because they are all doors into the same machine. Whether the first message says "wrong number" or the phone rings with a professional sounding introduction, what waits behind it is a platform that does not exist and a balance somebody typed.
How the scam works
Five stages, and the first three contain no ask at all. That's exactly why it works on people who would hang up on a cold caller within seconds.
1. The wrong number
Deliberately mundane, and deliberately harmless. A missed appointment, a name that is not yours, a question about a delivery. It is built so that replying costs nothing and ignoring it feels slightly rude. Anyone who answers has done the only thing the opener needed, which is to prove the number is live and belongs to somebody who engages.
The one rule that ends this at stage one
Do not reply to texts from numbers you do not know, even to correct them. There is no downside. A genuine wrong number costs a stranger nothing and they will work it out. Replying is the single decision that separates people who lose money to this from people who never hear from them again.
2. The friendship
They move you to WhatsApp or Telegram early, and then they simply talk to you. Photos of meals and holidays. Questions about your day. Sympathy when something goes wrong. Sometimes romance, often not, because plenty of these run as friendships, mentorships or business acquaintances. The profile is polished and consistent, the photos usually lifted from a real person's social media, and the conversation may run daily for a month or more before a single financial word is spoken.
The person typing may not be free to stop
Many of these conversations come from compounds in South East Asia staffed by people who were trafficked there under false job offers and are held against their will, working to quotas under threat of violence. That does not reduce the harm to you and you should still cut contact immediately. But it explains the relentless consistency, and it is worth knowing that the individual on the other end is frequently a victim of the same criminal organisation.
3. The mention
Money enters sideways and never as a pitch. They mention an uncle who works in trading, or a private signals group, or that they have just paid off their car with returns from a platform they use. When you ask about it, and asking is what they have been waiting for, they are mildly reluctant and sometimes even discouraging. That reluctance is the most effective part of the whole script, because it flips the dynamic. You end up persuading them to let you in.
The group chat version
Some people get added straight to a WhatsApp or Telegram signals group with an analyst, an assistant and dozens of enthusiastic members posting screenshots of their gains. Almost everybody in that group works for the operation. The trades called out are picked afterwards to look prescient, and the delighted testimonials are colleagues. You are usually the only real member.
4. The withdrawal that works
You start small, a few hundred pounds, and the balance climbs immediately. Then you withdraw some, and it arrives in your bank account. Real money you can spend. This is the hinge of the entire scam, because that successful withdrawal answers the only question you had, and it was paid out of your own deposit. Having proved the platform works, people then invest properly. Savings, a pension release, a remortgage, money borrowed from family. The US Department of Justice seized 503 fake investment websites in a single 2026 operation (DOJ), which gives some sense of how many of these platforms run at once.
Nothing on the platform is real
No trades are placed. The charts, the balance, the profit percentages and the transaction history are all produced by software the criminals control, and the number can be edited whenever they like. Your deposit went to a wallet the moment it arrived. What you are watching is a screen designed to make you send more.
5. The wall
Then a large withdrawal fails. There is a tax liability on the profits to settle first, or a money laundering deposit, or a margin call, or an account freeze pending verification. Each one demands more money before you can reach what you can plainly see on screen. Some people pay several, because stopping means accepting the loss. Eventually the platform locks you out, the friend goes quiet and the account disappears. Then, a few weeks later, a message arrives from somebody offering to help recover your money.
What the opening texts look like
These are examples based on messages reported across the UK. Deliberately dull, every one of them. Nothing in a first message is meant to excite you. It only needs a reply.
"The appointment"
The most reported opener. Casual, specific, and exactly the sort of thing anyone might genuinely send to a mistyped number. Correcting them politely is the reply it is fishing for.
"Hi Emma, just confirming 2pm Thursday still works for you? Let me know if you need to move it x"
"The old friend"
Vague enough that you might genuinely wonder. It invites you to search your memory rather than question the message, and any reply at all opens the conversation.
"Hey! Is this still your number? It's been ages, how have you been?"
"The business mix up"
Positions them as a professional from the very first line, which sets up the trading expertise that surfaces weeks later. Usually paired with an apology and a bit of charm.
"Good morning, this is Lin from the Singapore office. Are you the right contact for the shipment paperwork?"
"The group invite"
Skips the friendship and goes straight to the platform. Cruder, but it costs nothing to send, and it catches people who are already curious about crypto.
"You've been added to VIP Signals. Our members averaged 34% last month. Free entry closes tonight: [link]"
Why this catches capable people
There's a widespread assumption that people who lose money to this must have been gullible. It's wrong, and it's a dangerous thing to believe, because it makes you think it couldn't happen to you. Nobody in this story agreed to invest with a stranger. They invested on the recommendation of somebody they had spoken to every day for two months, after testing the platform with a small amount and successfully withdrawing it. Put like that, the decision is close to reasonable. Every safeguard had been checked. They were all manufactured.
It lands in a genuine gap too. Crypto is largely unregulated in the UK, so there is no FSCS protection on these losses and usually no route to the Financial Ombudsman. There is no compliance department to ring and no register that would have flagged the platform, because it was invented for you. And because the money leaves as crypto, the transfer is final the moment it confirms.
What makes it convincing
- • Weeks of real conversation before money is ever mentioned
- • They discourage you at first, so you do the persuading
- • The small test withdrawal genuinely arrives in your bank
- • The platform looks and behaves like a real trading app
- • Group members celebrating their gains are all colleagues
What should make you stop
- • The relationship began with a wrong number or a random text
- • They will never video call, or the one call is oddly brief
- • The platform is not on the FCA Register
- • Deposits go to a wallet address rather than a company account
- • A fee is demanded before a withdrawal can be released
If you are already in a conversation
Ask how it started
Not whether you trust them. Whether they arrived in your life through a message you were not expecting. If a friendship began with a wrong number and has since touched on trading, investing or crypto in any form, that is the entire pattern, no matter how warm it has been since.
Check the platform on the FCA Register
Go to fca.org.uk yourself and search the firm, then check the Warning List. Watch for clones using a real firm's details with different contact information. If deposits go to a crypto wallet address rather than a company bank account, you have your answer already.
Try to withdraw everything, today
Not a test amount. The full balance. If a fee, a tax payment or a verification deposit is suddenly required before it can be released, the platform is fake and no further evidence exists or is needed. Do not pay it. Paying it is the trap the whole scam has been building towards.
Tell somebody before you send anything more
Describe the whole thing out loud to a friend, a relative or your bank. Scammers routinely coach people to keep the investment private, and that instruction exists for exactly one reason. If you have been asked to keep it quiet, that is the strongest signal in the entire relationship.
Your bank would far rather have an awkward conversation now than take a fraud report next month.
Cut contact and report the number
Block on every platform without explaining why, because a goodbye message only tells them which arguments to use next. Forward the original text to 7726 and add the number to CallerCheck so the next person who searches it finds a warning rather than a wrong number.
Already sent money?
Act today rather than tomorrow, and set aside how you feel about it until the practical steps are done.
-
1
Stop sending, whatever they say next
There will be a very good reason why one final payment releases everything. There always is. It is never true, and every pound sent after this point is lost on top of the rest.
-
2
Ring your bank on 159 immediately
Speed genuinely changes outcomes. Where money left as a bank transfer, reimbursement rules for authorised push payment fraud may apply, and funds occasionally get stopped before they move on. Ask them to review every payment connected to the platform.
-
3
Tell any exchange you bought through
Contact them through their official app. If your money passed through a regulated exchange on the way out, there is a narrow window in which the destination can be flagged or frozen. Give them the wallet addresses and transaction hashes.
-
4
Check your pension and any app they had you install
The Chatteris case turned on an app that handed over control of everything, pension included. If you installed anything at their suggestion, remove it, change the passwords for every account reachable from that device, and ring your pension provider to check for withdrawal or transfer requests you did not make.
-
5
Report to Action Fraud, keep everything, then brace yourself
Ring 0300 123 2040 or report at actionfraud.police.uk, or Police Scotland on 101. Screenshot the whole conversation, the platform, the profiles and every transaction before you block anybody, because accounts vanish quickly once you stop replying. Then expect a message offering to recover your funds for a fee within weeks. Ignore it. Victim Support offers free confidential help, and this scam takes a real emotional toll precisely because it was built on a relationship rather than a transaction.
The short version
Red flags
- • It began with a wrong number or a random text
- • They moved you to WhatsApp or Telegram early
- • Crypto came up only after weeks of friendship
- • Deposits go to a wallet address, not a company account
- • A fee is required before you can withdraw
What to do
- • Do not reply to texts from numbers you do not know
- • Check any platform on the FCA Register yourself
- • Try to withdraw the full balance today
- • Tell somebody before sending anything more
- • Forward to 7726 and report the number on CallerCheck
Nobody texts the wrong number and ends up making you rich.