Scamwatch received more than $119 million in reported investment scam losses in a single recent reporting period, and that’s just the fraction of victims who actually filed a report. Most don’t, out of embarrassment more than anything. If you’ve noticed a sudden uptick in polished crypto “opportunities” showing up in your Instagram DMs or a Facebook group you joined years ago for recipe swaps, you’re not imagining it. The pattern has become so consistent across Scamwatch’s investment scam data that we can now describe the playbook almost beat for beat.
Our take is simple: these scams work less because people are gullible and more because the scripts have been refined over thousands of attempts to exploit exactly the moment someone is deciding whether to trust a stranger with money. Understanding the script is most of the defence. The rest is a handful of checks you can run before dinner.
Why social media, specifically
Banks and telcos get blamed a lot in scam coverage, fairly, in some cases. But social platforms sit at the start of the investment scam funnel in a way that’s structurally different. A scammer doesn’t need your phone number or your email. They need an algorithm that shows your profile to the right stranger, and a direct message function that lets a conversation start without any friend request, verification or gatekeeping at all.
Meta’s platforms, TikTok and increasingly LinkedIn have all become comfortable hunting grounds because the trust signals are borrowed rather than earned. A profile with a professional headshot, a “verified” badge that may or may not mean what people assume it means, and a feed of screenshots showing supposed trading wins looks credible at a glance. Nobody’s checking whether that person actually works where their bio says they do.
We’d also argue, and this is the mildly unpopular bit, that platforms deserve more scrutiny here than they currently get in the Australian conversation. The usual framing is “scammers are clever”, which is true, but it lets the distribution mechanism off the hook. A cold DM from a stranger offering a guaranteed return is not a grey area. It’s something platforms could detect and throttle at scale if there were a stronger commercial incentive to do so.
The warning signs that actually hold up
Forget the old advice about bad spelling and dodgy English. Many of these operations run professional-grade scripts now, sometimes translated and polished by the same AI tools everyone else uses. The signs that still work are structural, not stylistic.
A guaranteed or unusually consistent return is the biggest one. Real investments, from ASX shares to term deposits to managed funds, move with the market and carry risk that’s disclosed up front. Anyone promising a fixed weekly or monthly percentage, especially anything over what a term deposit pays, is describing something that doesn’t exist as a legitimate product.
Pressure to act inside a narrow window is another. Countdown timers on “limited spots” in a trading group, or a contact who says the opportunity closes tonight, exist purely to stop you from doing the thing that would end the scam: stepping away and checking with someone else. Genuine investment products don’t evaporate because you slept on it.
Then there’s the “whitelist” or early-access framing, common in crypto-adjacent scams, where you’re told you need to be added to a special list before you can withdraw funds, and that list requires a fee. This is the modern version of the inheritance scam’s “processing fee”, just with better production values.
The relationship that isn’t quite a relationship
A newer variant we’ve seen described in Scamwatch case summaries starts as a friendship or romantic connection, sometimes going for weeks before investment ever comes up. The scammer invests real time building rapport before introducing a trading platform or app. This hybrid, sometimes called pig butchering in international reporting (the phrase describes fattening up a victim before the loss, unpleasant but accurate), tends to target people who are isolated, recently bereaved or going through a divorce. The emotional investment makes the financial one feel like a natural next step, which is exactly the design.
What the fake trading platform usually looks like
Almost every version of this scam eventually points you toward a platform or app that is not a real exchange or broker. It might look like a legitimate trading dashboard, complete with charts that tick upward and a balance that grows convincingly. Some even let you make a small withdrawal early on, specifically so you’ll trust it with a larger deposit later.
The giveaway, if you’re willing to do five minutes of homework, is that the platform usually isn’t licensed to operate in Australia. Any entity offering financial products or advice here is supposed to hold an Australian Financial Services Licence from ASIC, and you can check that register yourself rather than taking a stranger’s word for it. If a platform’s name doesn’t appear, or the licence details don’t match, stop there.
We’d also flag that these apps are frequently not available through the Apple App Store or Google Play at all. You’re asked to download an APK file directly or use a web link that installs something outside the normal app ecosystem. That’s not a neutral technical detail. It’s a sign the app wouldn’t pass even the baseline review those stores apply.
What to actually check this afternoon
If a message like this has landed in your inbox recently, or if you’ve already put money in and something feels wrong, there’s a short list of things worth doing before you do anything else.
- Search the person’s name and the platform’s name together, specifically looking for the words “scam” or “review” in the results, since other victims often post publicly within days.
- Check ASIC’s licence register for the company or individual, and check whether the website domain was registered recently, which often points to a throwaway setup built for one campaign.
- Call your bank directly, using the number on the back of your card rather than any number supplied in the chat, if you’ve already transferred money and suspect it’s gone to a scam.
That third one matters more than people expect. Banks have fraud teams that can sometimes halt a transfer that hasn’t settled yet, particularly for international transfers that take a day or two to clear. Every hour counts, so this isn’t something to leave until Monday.
Reporting it properly, even if you feel foolish
We hear the same thing from readers who’ve been caught out: embarrassment stops them reporting it at all. Understandable, but it doesn’t help anyone, including you. Reporting through Scamwatch, which is run by the ACCC, feeds into the national picture regulators use to warn banks and other agencies about active campaigns. If the scam involved a compromised account or a cyber element, the ACSC’s ReportCyber portal is the right additional channel.
None of this guarantees your money comes back. International scam operations, many run from call centres outside Australia, are genuinely hard to pursue. But the report still matters, because patterns in those reports are how a specific fake platform or phone number ends up on a watchlist that protects the next person.
The group chat problem nobody talks about
One thing that doesn’t get enough attention: a lot of these scams spread through group chats and community Facebook pages that otherwise feel completely safe, school parent groups, local buy-and-sell pages, hobby forums. A member gets scammed, then unknowingly or sometimes knowingly recruits others because the scam offers a referral bonus. We’d treat any investment tip shared in a community group with more suspicion than one from a stranger’s cold DM, not less, because the social trust of the group is being borrowed without anyone’s consent.
If you administer one of these groups, it’s worth occasionally scanning for posts mentioning guaranteed returns or specific trading apps and removing them early, before the comments fill with what look like genuine testimonials but are often other scam accounts.
Where this overlaps with other online safety habits
Investment scams rarely arrive in isolation. The same accounts that run these campaigns often sit behind other patterns we’ve covered before, including the verification-fee scams that dress up a fake job offer or marketplace sale as something needing an upfront payment, which we broke down in our piece on scam websites that charge you for verification. If you’re rebuilding your general scam awareness, it’s also worth a read of our explainer on how to protect your website from data breaches if you run any kind of small business page, since compromised business accounts are increasingly used to lend credibility to these scams by posting from a page with real history and followers.
For anyone managing a parent’s or older relative’s accounts, the eSafety Commissioner’s guidance is genuinely useful here, not just for younger users. We’d also point people toward our rundown on do you actually need a VPN in Australia, since a surprising number of these scams involve geo-blocked “exclusive” trading apps that only work through a VPN, which is itself a sign something isn’t being offered through normal, regulated channels.
Our verdict: trust the structure, not the story
The emotional story around these scams changes constantly, a new romance, a new celebrity endorsement, a new coin. The structure underneath barely moves: urgency, a return too good for the risk described, and a platform that sits outside anything ASIC recognises. If you remember nothing else, remember that legitimate investing is supposed to feel a bit boring and a bit slow, and anyone trying to make it feel exciting and urgent is usually selling you something other than a genuine return.
Fair dinkum, the best afternoon’s work you can do on this isn’t reporting a scam after the fact. It’s spending ten minutes checking the ASIC register before you ever send a cent, and treating that ten minutes as non-negotiable no matter how convincing the person on the other end of the chat seems.
— Em Castellano, Security Writer, Tech Geek
