Investment fraud was the costliest category of financial exploitation in 2024, with total reported losses exceeding $5.7 billion. It is also the category that most consistently targets people who consider themselves financially sophisticated — which is not an accident. Every major investment fraud scheme follows a recognizable structure. The structure does not change much because it works. Knowing it in advance is the closest thing there is to immunity.
The research finding most people find counterintuitive: victims of investment fraud tend to be better educated and have higher financial literacy than the general population. A Senate Special Committee on Aging report characterized this as the "Paradox of Overconfidence." Education gives people the confidence to evaluate large financial decisions independently. Scammers exploit that confidence by presenting opportunities that feel appropriately complex — deals that seem like they require financial sophistication to appreciate. The person who says "I would never fall for a simple scam" is the person investment fraud operators are specifically targeting. The pitch is calibrated to their self-image.
Promissory notes are debt instruments where a company promises to repay principal plus interest. In legitimate markets, they are regulated securities. In fraudulent contexts, they are among the most effective tools for draining retirement accounts. The scheme typically runs in four phases. First, promoters recruit insurance agents or unregistered salespeople — sometimes people who do not know the product is fraudulent — to market the notes to their existing clients. The agent is offered a commission of 30% to 50%, compared to the 5% standard in legitimate markets. The unusually high commission is the first warning sign that rarely gets examined. Second, investors are promised double-digit returns — often 10% to 20% — and told the notes are "insured" or "guaranteed" by a foreign entity. The guarantee cannot be verified. The return is presented as low-risk. Third, victims are pressured to liquidate existing assets — life insurance policies, annuities, CDs — to fund the note purchase. This step is critical because it moves assets from accounts with oversight into a fraudulent vehicle. Fourth, the scheme collapses. A portion of the investment goes to the salesperson's commission. The remainder is either siphoned directly or used in a Ponzi structure — paying fake "interest" to early investors using the capital of later ones — until the operator disappears or the structure becomes unsustainable.
Cryptocurrency has become the dominant medium for investment fraud because transactions are pseudonymous and irreversible. Once funds are transferred to a cryptocurrency address controlled by a scammer, recovery is functionally impossible. "Pig butchering" — named for the practice of fattening a pig before slaughter — involves a long grooming phase. The fraudster contacts the target through social media, a dating app, or a misdialed text message. Over weeks or months, a relationship develops — romantic or platonic. The scammer appears knowledgeable, successful, and interested in the victim's wellbeing. At some point, the scammer mentions a cryptocurrency investment platform, casually and without pressure. They may share screenshots of their own returns. They offer to help the victim set up an account. The victim deposits money and sees gains on the platform's dashboard — gains that are not real, displayed on a fraudulent interface the scammer controls. Encouraged by apparent success, the victim deposits more. When they attempt to withdraw, the account is frozen. "Taxes" or "fees" are required to release the funds. Those do not produce a withdrawal either. The platform disappears, and so does the contact. In 2023, cryptocurrency-related investment scams cost victims over $1.6 billion, according to FBI IC3 data. The typical victim is not technology-naive — the sophistication of the platforms and the length of the relationship-building phase make these schemes effective against financially literate targets.
The Phantom Hacker scam, named by the FBI in an October 2023 warning, is not a single phone call. It is a coordinated three-actor operation designed to make the fraud feel like protection. Phase Who Calls What They Say What They Want Phase 1 Tech support "Your computer has been Remote access to your (fake anti-virus hacked. We've detected device — to install company) a breach in your malware or capture accounts." financial login credentials Phase 2 Bank fraud "We've confirmed the Authorization for a specialist hack. A rogue employee large wire transfer (fake) is stealing your funds. to a "secure" We need to protect account — actually them." a scammer-controlled account Phase 3 Government agent "This is part of an Completion of the (fake FBI, CIA, active investigation. Do wire, and silence Federal Reserve) not tell anyone — not that prevents the your family, not your victim from getting a bank." second opinion The coordination between three "actors" is what makes this scheme so effective. Each one validates the previous. The government agent provides official-looking documents. The secrecy instruction ("don't tell anyone — this is an active federal investigation") specifically prevents the victim from consulting a family member or banker who might intervene.
In many promissory note scams, the insurance agents selling the|No government agency — not the FBI, not the IRS, not the Federal|Reserve — will ever ask you to wire money, purchase cryptocurrency,|This is true regardless of how official the caller sounds, what