The TLDR

If you think scams only work on gullible people, you’re exactly the kind of person they work on. Scams exploit cognitive shortcuts — trust, urgency, authority, reciprocity, sunk cost — that evolution built into every human brain. These aren’t bugs. They’re features that normally help you function. Scammers redirect them. Intelligence doesn’t protect you because intelligence increases confidence, and confidence is the vulnerability. The FBI IC3 reported over $12.5 billion in cybercrime losses in 2023. The victims include engineers, doctors, executives, and cybersecurity professionals.

The Reality

Let’s talk about who actually falls for scams, because the stereotype is wrong.

The AARP Fraud Watch Network found that:

Romance scam victims include professors, lawyers, military officers, and financial advisors. Pig butchering (cryptocurrency investment scam) victims include software engineers and venture capitalists. The common thread isn’t lack of intelligence — it’s the belief that intelligence is sufficient protection.

The Psychological Toolkit

Confirmation Bias

You see what you want to see. If you’ve already decided someone is trustworthy — because they’re attractive, or successful, or share your values — you’ll unconsciously filter information to confirm that decision and dismiss red flags.

In romance scams, this is weaponized. The scammer creates an ideal persona, and the victim’s confirmation bias maintains the illusion long past the point where objective evidence should break it. Friends and family can see it clearly. The victim can’t.

Sunk Cost Fallacy

The more you’ve invested — time, money, emotion — the harder it is to walk away. Scammers know this. That’s why the first ask is always small. By the time the asks get large, you’ve invested enough that admitting you were wrong feels worse than continuing.

Romance scam victims who’ve sent $5,000 over three months are more likely to send another $5,000 than to report the scam. The emotional and financial investment creates a trap: admitting the scam means admitting that everything you invested was wasted. The brain resists this conclusion with remarkable force.

Authority Bias

When someone presents as an authority figure — law enforcement, IRS, bank fraud department, IT support — your default is to comply. This isn’t weakness. It’s how society functions. But scammers exploit it.

The IRS impersonation scam works because people fear the IRS. The “bank fraud department” call works because people trust their bank. The IT support scam works because people defer to technical authority.

Urgency and Scarcity

“Your account will be closed in 24 hours.” “This investment opportunity closes today.” “Your grandchild is in jail and needs bail money right now.”

Under time pressure, you switch from deliberative thinking (slow, analytical) to heuristic thinking (fast, instinctive). Heuristic thinking is where biases dominate. Every scam creates urgency because a calm, unhurried analysis would catch the fraud.

Reciprocity

The scammer gives before they take. In pig butchering scams, the “mentor” helps the victim make small, real profits on an investment platform before revealing the “bigger opportunity.” In romance scams, the attacker provides months of emotional support, gifts, and attention before making the first financial request.

The victim feels obligated to reciprocate generosity. This isn’t manipulation they recognize — it feels like natural relationship dynamics.

The Dunning-Kruger Effect in Reverse

Here’s the one that gets the smart people: if you’re confident in your ability to detect scams, you’re less likely to scrutinize interactions carefully. You skip the verification step because “I’d know if this were a scam.” You don’t ask for a second opinion because you trust your own judgment.

The FTC data consistently shows that people who believe they’re scam-resistant lose more money when they do get scammed — because overconfidence means they’re deeper into the scheme before they recognize it.

The Long Game — Romance Scams

Romance scams are the purest expression of social engineering at scale.

The Timeline

Week 1–2: Contact and Qualification. The scammer (often operating from organized call centers in West Africa or Southeast Asia) initiates contact on a dating site or social media. They qualify the target quickly: emotionally available? Financially capable? Willing to move communication off-platform?

Week 2–8: The Grooming Phase. Daily communication. Consistent emotional availability. The scammer adapts to the target’s personality using techniques from a playbook — literally. Romance scam operations have written scripts for different personality types. The target falls in love with a carefully constructed fiction.

Week 6–12: The Test. A small crisis. A request for a small amount of money. If the target sends it, they’ve crossed a psychological threshold. If they don’t, the scammer either escalates emotional pressure or moves on.

Month 3–12+: Escalation. The crises get bigger. The amounts increase. The emotional stakes rise. Each payment reinforces the sunk cost. Some victims take out loans, liquidate retirement accounts, or sell property.

The End. Either the target runs out of money (the scammer ghosts), recognizes the scam (and faces devastating emotional and financial reality), or a friend/family member intervenes.

Average loss: $10,000–$50,000. Duration: 3–12 months. Recovery: years, if ever.

Common Scam Templates

Pig Butchering (Sha Zhu Pan)

The fastest-growing scam type. A “friend” or “romantic interest” introduces you to a cryptocurrency investment platform. You invest small amounts and see returns (the platform is fake, showing fabricated gains). You invest more. When you try to withdraw, you’re told you need to pay taxes or fees first. The platform disappears with your money.

The FBI IC3 reported $3.9 billion in investment scam losses in 2023 — the majority pig butchering.

Grandparent Scam

“Grandma, it’s me. I’m in trouble.” The caller sounds distressed (or, increasingly, uses AI voice cloning to sound exactly like your grandchild). They claim to be in jail, in a car accident, or stranded abroad and need money wired immediately. They beg you not to tell their parents.

IRS/Social Security Impersonation

“This is the IRS. A warrant has been issued for your arrest due to unpaid taxes. Press 1 to resolve this immediately.” Variations include Social Security Administration, DEA, and local police. The demand is always for immediate payment via gift cards, wire transfer, or cryptocurrency.

Gift Card Scams

The ask: “Go to Walmart and buy $500 in Google Play gift cards. Read me the codes over the phone.” This sounds absurd in print. Under the pressure of an authority figure threatening arrest, or a loved one in crisis, people do it. The FTC reported $228 million in gift card scam losses in 2022.

What You Can Do

The Verification Pause

Train yourself to pause before acting on any request involving money, credentials, or personal information. The pause is the defense. Scams rely on speed. Verification kills them.

Before sending money: Call the person who supposedly requested it on a number you already have. Not the number they just gave you.

Before clicking a link: Go to the website directly by typing the URL. Don’t click.

Before providing information: Ask yourself: did I initiate this interaction, or did they contact me?

The “Too Good to Be True” Heuristic

Investment returns that consistently outperform the market. A romantic partner who’s impossibly perfect and available. A job offer that pays twice the going rate for half the work. These aren’t opportunities. They’re lures.

Who to Call

The Hardest Part

If you’ve been scammed, the shame is the attacker’s final weapon. It keeps victims silent. It prevents reporting. It lets the scammer move on to the next target.

Being scammed is not a character failure. It’s the result of a professionally engineered psychological attack. Report it. Talk about it. The shame belongs to the attacker, not the victim.

Sources & Further Reading