How Modern Investment Scams Work

Investment fraud is the largest single category of UK consumer financial loss. Reported figures are in the hundreds of millions per year and the unreported total is likely 5-10x higher (Statistics-Canada-style undercounting applies in every Anglophone market). The losses concentrate in four operational patterns — recognise the shape of each and you defeat the great majority of pitches.

1. Fake brokerage / fake trading-platform scams

The dominant 2026 pattern. A polished website presents itself as a regulated broker offering forex, CFD, crypto or commodities trading. The platform shows real-looking price charts, fake "live trading" feeds, and (often) AI-generated CEO videos and fake regulatory certificates. Victims deposit, see the dashboard show steady "gains", and are encouraged to deposit more. When they try to withdraw, an unending sequence of fees blocks it. The OCCRP's 2026 Scam Empire investigation mapped 81 connected fake platforms run by a single network.

2. Pig-butchering investment

A long-form variant where a relationship is built over weeks via dating apps, LinkedIn, WhatsApp, or "wrong number" texts before any investment is mentioned. The scammer shares screenshots of their own "trading success" on a platform (always the fake one in pattern 1) and walks the target through depositing. Pig-butchering operations often run from compounds in Cambodia, Myanmar and the Philippines, with Chinese and other organised-crime control. The University of Texas estimates the global pig-butchering economy at $75bn+ extracted since 2020.

3. Recovery-room scams

Targets people who have already lost money to investment fraud. The "recovery firm" claims it can trace and return the lost funds for an upfront fee — "tracing", "court submission", "tax clearance" — that is always non-refundable. The FCA logged 4,465 fake-FCA recovery scams in just the first six months of 2025; almost two-thirds of recovery-scam victims are 56 or older. Legitimate recovery routes never charge upfront fees in crypto.

4. Boiler-room cold-calls

The classic pattern, still operating in 2026. A cold-caller (sometimes via WhatsApp instead of phone) pitches a "limited opportunity" in pre-IPO shares, tax-efficient investment schemes, or carbon-credit schemes. High-pressure tactics, claims of "guaranteed returns", and refusal to send written documentation that you can verify with the named regulator. Almost always tied to unregulated entities operating outside FCA permissions.

The Six Universal Red Flags

  1. Guaranteed returns. No legitimate investment can guarantee returns. Anyone using the word "guaranteed" about investment performance is either lying or non-compliant with FCA financial-promotion rules.
  2. Returns above market norms. Promises of weekly or monthly double-digit percentage returns are mathematically incompatible with any legitimate investment strategy. If it were possible, hedge funds would have absorbed all available capital decades ago.
  3. Pressure to act fast. "Limited time", "only 12 spots left", "the price is rising tomorrow" — pressure tactics exist to bypass your due-diligence process. Legitimate investments give you time.
  4. The firm isn't on the FCA register. Check register.fca.org.uk for any UK-targeting investment firm. If they're not authorised, they cannot legally market investments to UK consumers.
  5. Fake regulator badges. A site can put any logo or registration number on its homepage. Always cross-check the claimed registration on the regulator's own website. Several 2026 scam platforms display fake "FCA-regulated" badges.
  6. Withdrawal blocks. A platform that accepts deposits but introduces fees or hurdles when you try to withdraw is, by definition, a scam.

The Five-Minute Pre-Investment Verification

  1. Search the platform name on the FCA Warning List (fca.org.uk/consumers/warning-list-unauthorised-firms). Updated daily.
  2. Search the FCA Firm Checker (register.fca.org.uk). If the firm is regulated, you'll find it with a registration number, permitted activities, and contact details.
  3. Check international warning lists. SEC PAUSE list (US), CSA Disciplined List (Canada), ASIC banned persons (Australia), NZ FMA warnings, and California DFPI Crypto Scam Tracker.
  4. Check domain age. Use a free WHOIS lookup. Most fake platforms have domains under 12 months old.
  5. Search "[platform name] scam" on Google and Reddit. If multiple victims have already complained publicly, the verdict is in.

If You've Already Invested in a Suspect Platform

  1. Stop depositing. Every additional payment goes to the same fraudster.
  2. Screenshot the platform interface, your "balance", and any chat logs with the broker or contact who recruited you. Save in a single dated folder.
  3. Call your bank's fraud line using the number on the back of your card. Use the phrasing: "This was an authorised push payment scam. Please log it under the PSR reimbursement scheme."
  4. File with Report Fraud at reportfraud.police.uk. Save the case number.
  5. Report the firm to the FCA at fca.org.uk/consumers/report-scam-unauthorised-firm. The FCA may add the firm to its Warning List, protecting future targets.
  6. If the bank refuses your reimbursement claim, escalate to the Financial Ombudsman Service — free, independent, and binding.
  7. Read our UK Recovery Guide for the complete £85,000 PSR APP reimbursement playbook: /scamsupport/blog/uk-recovery-guide-2026.
  8. Refuse every recovery-firm approach. Within days you will receive contact from "blockchain forensics specialists", "crypto recovery solicitors", or "ex-FBI investigators". Almost every such approach is a second-stage scam — legitimate routes do not cold-contact victims.

Paste a suspicious message to scan

The Scam Message Scanner runs entirely in your browser. Your message is never sent to SignalTools or anywhere else. Paste the suspicious email or SMS below, including any sender details and links, then tap Scan message.

Scanner methodology validated across 351 cases spanning 7 UK scam categories — macro precision 98.5%, recall 98.5%, F1 98.5%. Methodology brief. Output is informational only: always verify the sender independently before clicking links, sharing details, or making payments.

Additional Resources

Protect Your Data with VPN

Use NordVPN to encrypt your connection when accessing sensitive accounts online, protecting your data from interception.

Affiliate disclosure: as a NordVPN partner, ScamSupport may earn a commission if you sign up via this link — this doesn't change our recommendation or the price you pay. Full affiliate policy →

Get NordVPN Protection
Use the Scam Message Scanner →