What this tutorial says in five lines
- A group of thousands is not social proof — most of those members are the operation.
- Screenshots of profits cost nothing to fabricate and prove nothing.
- "Signals" that work are simply backwards-read after the market moves.
- Any group that requires you to deposit through a link only they provided is a fraud channel.
- Leaving the group is safe. Once you have sent money, preserve the records first.
Why this matters
Messaging-app fraud scales because a group looks like a crowd. The crowd is the product: it supplies the social proof that makes an individual hesitate to question anything. Underneath, the mechanics are simple and repetitive, which is good news — a handful of checks defeats almost all of it.
How a fake community is manufactured
The group is constructed to produce three impressions: that many people are profiting, that the method works, and that you are the last one to join. Each impression has a cheap technical implementation.
- 01Volume: members are bought, cloned or automated. A member count proves nothing about how many humans are present.
- 02Proof: win screenshots are edited, or posted by accounts that are the operator. Losing trades are simply never posted.
- 03Authority: a "senior analyst" persona, often the same person as the admin, the support desk and the "compliance officer".
- 04Urgency: a closing window, a limited slot, a group that will be "deleted soon".
If a group's entire value proposition is a screenshot, you are looking at marketing, not trading.
The two-message test
Ask these publicly, in the group. A genuine community answers without friction. An operation deflects, removes the message, or removes you.
| Your message | Genuine response | Fake operation response |
|---|---|---|
| "Can someone who is not an admin confirm they have withdrawn this month? Please share the transaction hash, not a screenshot." | Several independent members answer with verifiable hashes, or nobody answers because it is a quiet group | Screenshots only, or a DM from a "member" who turns out to be new, or the question is deleted |
| "What is the platform's registration number, and which regulator should I check it with?" | A name, a number and a regulator you can look up yourself | A link to their own site, or "we are not required to register", or immediate removal |
Fabricated proof, by the numbers
The reason screenshots and signal claims survive is that they are never checked against the loss side. Once you count both, the supposed edge usually disappears. The chart below shows what happens to a typical "signals" claim when losing calls are counted alongside the winning ones that were posted.
A typical "signals" channel with losses counted honestly
Calls per 100 posted, split by outcome after verifying both sides
Reading: The posted side and the hidden side are of comparable size. A channel that only publishes wins is not outperforming the market; it is editing the record.
The specific scripts used in messaging apps
These are the recurring approaches. All of them end in a deposit, a fee, or a transfer to an address supplied privately.
| The approach | What it looks like | Honest reading |
|---|---|---|
| Wrong-number opener | A friendly stranger who is "so glad they reached you" | A scripted opener with a conversational destination in mind |
| Job offer | Easy remote work, paid in crypto, a small onboarding fee | The fee is the theft; there is no job |
| Trading group invite | Free signals, then a VIP tier, then a platform | The platform is the product; the signals are bait |
| Account verification scam | A "support" account asking you to confirm your seed phrase | Nothing legitimate ever needs your seed phrase |
| Spoofed giveaway | A doubled-deposit event with a deadline | There is no event. Funds sent are simply taken. |
| Romance + investment | A relationship that eventually introduces a platform | A pipeline, not a relationship |
| Recovery offer | Someone who can retrieve your earlier loss for a fee | A second fraud aimed at the already-burned |
| Job-task scam | Small paid tasks, then a "top-up" to unlock bigger tasks | The top-up is the loss; the early payments are the bait |
What to do, in order
The sequence matters: preserve, then leave, then report. Doing it in the wrong order destroys evidence.
- 01Export the chat history and take screenshots that include the group name, the member count and the timestamps.
- 02Note every wallet address and transaction hash involved. These are the only parts of the record that are independently verifiable.
- 03Leave the group and block the accounts. Do not announce why — a warning gives the operator time to remove you and clean the group.
- 04If you sent nothing, warn the people you know who are still inside, individually and privately. Public warnings get deleted.
- 05If you sent money, report it: IC3.gov and ReportFraud.ftc.gov, plus your bank or exchange immediately if any part was funded conventionally.
The single most useful habit: never send funds to an address that reached you through a private message. Verify it from a source you chose yourself.
The visual summary
Everything above, reduced to the four stages that matter for this topic. If you only look at one thing on this page, look at this.
Where this fits in the pattern
Before contact
Nothing has happened yet. This is when every tutorial here is most useful and costs you nothing but reading.
During the approach
The script is running. The verification tests in this tutorial are designed to be run here, neutrally, without confrontation.
At the money request
The decisive moment. Any request for funds, fees, taxes or unlock deposits is the end of the script, not a stage of it.
After a loss
Prevention is over; evidence work begins. Preserve, report, and never pay a second fee to recover the first.
Common questions
Check the address before you send anything else
The tracer runs a public-ledger scan on any address and produces the evidence report you would need for a complaint.
Primary sources and further reading
- FTC — Scams That Follow a Scam consumer.ftc.gov
- FBI — Common Scams and Crimes www.fbi.gov
- CISA — Cybersecurity Best Practices www.cisa.gov
External links open in a new tab so you can verify the underlying material yourself. TrueMoneyTalk is not affiliated with these organisations.
Prevention only works if it reaches people before the contact does.
Disclaimer: this tutorial is general information, not legal, financial or recovery advice, and is not a substitute for advice from a licensed professional in your jurisdiction. Individual outcomes vary and are never guaranteed.