World Romance Scam Prevention Day: The Role of Open Source Intelligence in Detecting and Combatting Online Romance Scams

Introduction

On October 3rd, we mark World Romance Scam Prevention Day[1], a crucial initiative to enlighten the public about the widespread nature of romance scams. These scams, which have surged with the advent of online dating and social networking, are becoming more sophisticated. They target vulnerable individuals and lead to significant financial and emotional losses. A disturbing new development in these schemes is Pig Butchering[2] and Catfishing[3] (romance scams). The former involves scammers "fattening up" their victims by building trust over time before executing large-scale financial fraud, while the latter refers to creating fake identities on dating platforms to manipulate victims emotionally for monetary gain.

Knowledge and understanding are our most potent weapons against these scams. This article by Paul Wright and Neal Ysart from The Coalition of Cyber Investigators is a comprehensive guide on how you, as an individual, law enforcement professional, or cybersecurity expert, can harness the power of Open Source Intelligence (OSINT) to shield vulnerable individuals from these ruthless schemes. OSINT is not just a tool; it's a game-changer that can empower you to combat romance scams effectively, instilling confidence in your ability to make a difference.

Romance Scams

We must understand what we are dealing with before equipping you with the strategies to combat these schemes. Let us take a closer look at romance scams and their alarming trend. Romance scams typically involve a perpetrator creating a fake identity on dating platforms or social media to establish a romantic relationship with a victim[4]. Once trust is established, the scammer often concocts a fabricated story that leads to requests for money, gifts, or personal information. According to the Federal Trade Commission (FTC), victims reported losing over 1.3 billion to romance scams in 2022 alone, underscoring these fraudulent activities' severe financial and emotional impact[5].

Pig Butchering, conversely, is a more insidious form of scam. It involves a prolonged process where the scammer slowly gains the victim’s trust and manipulates them into investing large sums in fraudulent schemes, often related to cryptocurrency. These scammers "fatten up" the victim with promises of wealth before pulling off a massive theft. This variant of scam has become an increasingly common and a severe threat globally.

Catfishing is another aspect of online romance scams that warrants attention. It typically involves individuals creating fake identities on dating platforms to lure victims into emotional relationships. Once trust is built, these fraudsters often request money, gifts, or sensitive personal information, leaving victims devastated emotionally and financially. Blending Catfishing with Pig Butchering tactics has made these scams more complex and challenging to detect.

Detecting Romance Scams – Combining OSINT and Fraud Risk Awareness

OSINT is a powerful tool for collecting and analysing publicly available information from various sources, such as social media, public records, and online databases. When paired with fraud risk awareness, OSINT can help detect and prevent romance scams, which prey on individuals seeking romantic relationships online. Below are some key strategies and techniques for detecting these scams using OSINT and, at times, digital forensics.

Detection of Fake Profiles

An overly polished or suspiciously perfect profile is one of the first signs of a romance scam. Scammers often use stock photos or images of attractive individuals to lure victims into their schemes. Here are a few OSINT techniques to detect fake profiles:

• Reverse Image Search

Using tools like Google Images[6] or TinEye[7], you can verify if the person’s photos have been associated with multiple online identities, strongly indicating fraud. These platforms scan the internet for instances where the same image may have been used elsewhere, helping to detect fake profiles.

• Social Media Analysis

By checking for inconsistencies across various social media platforms, you can detect gaps or contradictions in the person's story. For example, examining a person's posting history can reveal if their online activity aligns with their shared background story.

• Linguistic Pattern Analysis

Analysing the communication style of the scammer can reveal scripted responses or inconsistencies in the language used, a common tactic employed by fraudsters who reuse communication templates across different victims. OSINT tools and techniques can help identify these patterns by comparing language usage across multiple communications to flag suspicious behaviour and scripted interactions [8]

Background Checks

Public record searches can play a pivotal role in verifying the authenticity of someone's claims. OSINT tools enable background checks to confirm education, employment, and residency information[9]. Additional checks include:

• Criminal Record Search

Investigating whether the individual has any history of fraud or other suspicious activities can be crucial in identifying a potential scammer. Websites such as TruthFinder[10] and BeenVerified[11] provide online background checks, including criminal records.

• Property Ownership Records

Verifying property ownership can help confirm if someone’s claims about their wealth or assets are legitimate. Many public property records are available online, and services like Zillow[12] provide access to property data in certain regions.

• Voter Registry Validation

This method can help confirm a person's residential status or validate their claim about where they live. In some countries, voter registries are publicly accessible for verification purposes.

Network Analysis

Network analysis is crucial in identifying romance scams, as scammers often work in groups or networks, using multiple fake profiles to target various individuals. OSINT can help to:

• Identify Scam Patterns

By analysing behaviour on dating platforms, OSINT tools can identify common patterns of scam behaviour, such as rapid requests for personal information or money. In Pig Butchering and Catfishing cases, scammers guide victims through fake investment platforms before making a sizeable financial request.

• Link Analysis

Tools such as Maltego[13] or SpiderFoot[14] can be used to map out associations between various online identities, detecting links between fake profiles that scammers may use across different platforms.

Monitoring in Real-Time

Real-time monitoring can help identify and prevent scams before they escalate. By continuously tracking suspicious profiles, OSINT tools can:

• Monitor Dating Sites

OSINT services can be deployed to monitor newly created dating profiles that follow known scammer behaviour patterns. This includes tools like Pipl[15] and Skopenow[16], which aggregate social media and online presence data to detect fraudulent activity.

• Track Social Media Changes

By keeping track of changes in location, relationship status, or suspicious behaviour on a social media account, OSINT tools can identify when a scammer is updating their profile to target a new victim.

Digital Forensics

By combining OSINT and digital forensic tools with a comprehensive awareness of fraud risks, investigators can effectively detect and prevent romance scams. Such techniques can help uncover scammers' deceptive tactics and protect vulnerable individuals from perpetrators like Alexander McCartney[17].

He was a prolific catfishing abuser, who was caught through an international investigation involving Police Scotland after he was reported for blackmailing a young girl on Snapchat. Authorities traced McCartney by seizing digital evidence from his home, which revealed over 180 charges related to online abuse and exploitation, including blackmail, sexual activity incitement, and possession of indecent images. He targeted over 60 victims globally. While specific details about OSINT use are not mentioned, digital forensic methods were crucial in his capture[18].

The Role of Education and Awareness

While OSINT is a potent tool in the fight against romance scams, its effectiveness is significantly enhanced when combined with public education and awareness efforts. By raising awareness and teaching individuals how to conduct basic OSINT checks, we can all proactively reduce the number of successful romance scams. Initiatives led by experts such as Erin West[19], a prosecutor known for her work in fighting cybercrime, underscore the importance of public education in the battle against online fraud.

It is essential to build educational campaigns that teach individuals about common tactics scammers use and how to conduct background checks on suspicious profiles. Simple OSINT techniques, such as conducting reverse image searches or verifying details on social media, can help people protect themselves from falling victim to romance scams.

How to Protect Yourself

• Do Your Research

It is crucial to research the person you are communicating with thoroughly. Use OSINT tools like reverse image search on Google Images or platforms like Pipl to verify their identity through social media and other sources. Confirm the information they share and cross-check their profiles for inconsistencies.

• Educate Yourself

Familiarise yourself with the typical signs of romance scams. Reputable resources such as the FTC[20] and Better Business Bureau (BBB)[21] provide comprehensive guides and tips for identifying scams, such as overly polished profiles, quick declarations of love, and sudden requests for financial assistance.

• Report Suspicious Activity

If you suspect a scammer is targeting you, report the suspicious activity immediately. Platforms like Scamwatch[22] and the Internet Crime Complaint Center (IC3)[23] allow individuals to report online scams, offering guidance on protecting yourself moving forward.

• Talk to Someone

If you’re unsure about a relationship, speaking with trusted friends or family is wise. They can provide an outside perspective and may identify red flags[24] you missed. Discussing your relationship with others often reveals inconsistencies or warning signs you may have overlooked.

Conclusion

World Romance Scam Prevention Day is a vital reminder to remain vigilant during online interactions, especially when using dating platforms. OSINT plays a crucial role in verifying suspicious individuals and identifying potential scammers, whether they are involved in traditional romance scams or not. By adopting proactive measures and employing OSINT tools, individuals can shield themselves from falling victim to these increasingly sophisticated scams.

Collaboration between technology companies, investigators, and cybersecurity experts will be essential to developing more advanced detection and protective measures. Additionally, ongoing research into the psychological tactics scammers use can help create more effective prevention strategies and support systems for victims. Still, it may also provide tell-tale signs or indicators that OSINT practitioners can look for to help identify scammers.

Experts like Erin West emphasise that staying informed and aware is crucial to fighting the rise of romance scams. By fostering open conversations around online safety and encouraging victims to seek support, we can contribute to a safer digital environment where love and connection remain positive experiences for everyone.

Authored by: The Coalition of Cyber Investigators

Paul Wright (United Kingdom) & Neal Ysart (Philippines)

© 2024 The Coalition of Cyber Investigators. All rights reserved.

The Coalition of Cyber Investigators is a collaboration between

Paul Wright (United Kingdom) - Experienced Cybercrime, Intelligence (OSINT & HUMINT) and Digital Forensics Investigator; and

Neal Ysart (Philippines) - Elite Investigator & Strategic Risk Advisor, Ex-Big 4 Forensic Leader.

With over 80 years of combined hands-on experience, Paul and Neal remain actively engaged in their field.

They established the Coalition to provide a platform to collaborate and share their experience and analysis of topical issues in the converging domains of investigations, digital forensics and OSINT. Recognizing that this convergence has created grey areas around critical topics, including the admissibility of evidence, process integrity, ethics, contextual analysis and validation, the coalition is Paul and Neal’s way of contributing to a discussion that is essential if the unresolved issues around OSINT derived evidence are to be addressed effectively. Please feel free to share this article and contribute your views.

[1] World Romance Scam Prevention Day. (n.d.). World Romance Scam Prevention Day. https://protectingheartsday.com/ (Accessed October 02, 2024)

[2] Unmasking Pig-Butchering scams and protecting your financial future | Trend Micro (GB). (n.d.). https://www.trendmicro.com/vinfo/gb/security/news/cybercrime-and-digital-threats/unmasking-pig-butchering-scams-and-protecting-your-financial-future#( Accessed October 02, 2024)

[3] What is Catfishing Online: Signs & How to Tell | Fortinet. (n.d.). Fortinet. https://www.fortinet.com/resources/cyberglossary/catfishing# :(Accessed October 02, 2024)

[4] Edwards, C. (n.d.). Romance Scam and Examples 2024 | Excellence IT. Excellence IT. https://excellence-it.co.uk/insights/romance-scam-2/ (Accessed October 02, 2024)

[5] Romance scammers’ favorite lies exposed. (2023, March 24). Federal Trade Commission. https://www.ftc.gov/news-events/data-visualizations/data-spotlight/2023/02/romance-scammers-favorite-lies-exposed (Accessed October 02, 2024)

[6] Google Images. (n.d.). https://images.google.com/ (Accessed October 02, 2024)

[7] https://tineye.com/ (Accessed October 02, 2024)

[8] Using OSINT to identify AI-generated content. (n.d.). Authentic8. https://www.authentic8.com/blog/osint-ai-generated-content (Accessed October 02, 2024)

[9] Links, S. (2024b, May 31). Elevating Background Checks with OSINT | Blog | Social Links. OSINT Blog by Social Links | OSINT Investigations. https://blog.sociallinks.io/elevating-background-checks-with-osint/ (Accessed October 02, 2024)

[10]Homepage. (n.d.). https://www.truthfinder.com/ (Accessed October 02, 2024)

[11]Homepage. (n.d.). https://www.beenverified.com/ (Accessed October 02, 2024)

[12] Zillow: Real estate, apartments, mortgages & home values. (n.d.). Zillow. https://www.zillow.com/ (Accessed October 02, 2024)

[13] Homepage. (n.d.). https://www.maltego.com/ (Accessed October 02, 2024)

[14] Combat Cybercrime with Attack Surface Management. (2024, June 5). Intel471. https://www.spiderfoot.net /(Accessed October 02, 2024)

[15] The #1 source for identity & trust | Pipl. (n.d.). https://pipl.com// (Accessed October 02, 2024)

[16] Skopenow - Unlock the power of Open-Source Intelligence. (n.d.). https://www.skopenow.com/ (Accessed October 02, 2024)

[17] Campbell, C. N. &. C. (2024, March 11). Alexander McCartney: Catfishing abuser admits girl’s manslaughter. BBC News. https://www.bbc.co.uk/news/uk-northern-ireland-68525233 (Accessed October 02, 2024)

[18] STV News. (2024, March 11). Catfish abuser who blackmailed girls on Snapchat admits manslaughter. STV News. https://news.stv.tv/scotland/catfish-abuser-who-blackmailed-girls-on-snapchat-admits-manslaughter (Accessed October 02, 2024)

[19] OffshoreAlert. (2024, September 23). Pig-Butchering Scams Cost Billions – Hear from Erin West at OffshoreAlert Bangkok. https://www.linkedin.com/pulse/pig-butchering-scams-cost-billions-hear-from-erin-west-offshorealert-wbz7e /(Accessed October 02, 2024)

[20] Consumer advice. (2024, September 26). Consumer Advice. https://www.consumer.ftc.gov/ Accessed October 02, 2024)

[21]Homepage. (n.d.). https://www.bbb.org/ (Accessed October 02, 2024)

[22] Australian Competition and Consumer Commission. (n.d.). Home | ScamWatch. https://www.scamwatch.gov.au/ (Accessed October 02, 2024)

[23] Internet Crime Complaint Center (IC3) | Home page. (n.d.). https://www.ic3.gov/ (Accessed October 02, 2024)

[24] BBC. (2023, October 6). Rip Off Britain - What is a ‘pig-butchering’ scam – and why is it on the rise? https://www.bbc.co.uk/programmes/articles/3ynjGCQShBTpfkwlm1mJMTH/what-is-a-pig-butchering-scam-and-why-is-it-on-the-rise (Accessed October 02, 2024)