Romance Fraud Investigation and Asset Recovery: What Victims Should Do

Romance fraud can cause severe financial and emotional harm. A victim may discover that the person they trusted was using a false identity, that the relationship was fabricated and that payments were sent to accounts, companies or cryptocurrency wallets controlled by other people.

The first priority is to stop further losses and preserve the available evidence.

An investigation may help establish who was involved, how the fraud operated and where funds moved. Asset tracing may also identify potential recovery routes. However, no investigator, solicitor or recovery company can guarantee that money will be returned.

The prospects of recovery depend on factors including how quickly action is taken, the payment method, the quality of the records, the jurisdictions involved and whether identifiable assets remain.

Romance fraud is never the victim’s fault. Criminals deliberately build trust and emotional dependence before requesting money or financial assistance. Police guidance encourages victims to report the fraud and seek support rather than feeling embarrassed or responsible.

What to do immediately after discovering romance fraud

Act promptly, but avoid making rushed payments to anyone claiming they can guarantee recovery.

Take these steps:

1. Stop sending money, cryptocurrency, gift cards or goods.
2. Contact your bank or payment provider immediately.
3. Explain that the payments were connected to suspected fraud.
4. Ask whether any transfer can be recalled, frozen or reviewed.
5. Report the matter to Report Fraud in England, Wales or Northern Ireland.
6. Contact Police Scotland on 101 if the incident occurred in Scotland.
7. Preserve all messages, photographs and payment records.
8. Secure your email, banking and social-media accounts.
9. Notify the dating platform or social network where contact began.
10. Tell a trusted person and seek emotional support.

Report Fraud advises victims in England, Wales and Northern Ireland to submit a report through its reporting service, while incidents in Scotland should be reported to Police Scotland.

Where there is an immediate threat, harassment or risk of harm, contact the police directly rather than waiting for a financial investigation.

Contact the bank as quickly as possible

The bank or payment provider should usually be the first financial organisation contacted.

Provide:

• the dates and amounts of payments;
• recipient account details;
• payment references;
• copies of messages connected to each request;
• the reason you now believe the transaction was fraudulent;
• any police or fraud-reporting reference number.

Ask the bank to consider:

• recalling recent transfers;
• contacting the receiving institution;
• reviewing the case under the applicable fraud-reimbursement rules;
• securing the account if credentials were disclosed;
• recording concerns about any further attempted payments.

Do not delay contacting the bank while waiting for a private investigation. Banking action and investigative work can proceed separately.

Preserve the evidence

Evidence can disappear quickly when accounts are deleted, usernames change or websites are taken offline.

Preserve:

• full message histories;
• emails and email headers;
• usernames and profile URLs;
• telephone numbers;
• photographs and videos;
• voice notes;
• identity documents sent by the suspected fraudster;
• bank details and payment instructions;
• cryptocurrency wallet addresses;
• transaction hashes;
• receipts and bank statements;
• company names and websites;
• parcel or courier information;
• promises, threats and requests for secrecy;
• dates of calls and attempted meetings.

Where possible, export full conversations rather than saving only selected screenshots. Screenshots remain useful, but complete message histories can provide more context and metadata.

Do not edit the original files. Keep a separate working copy and retain the originals securely.

Stop communicating or continue gathering evidence?

There is no universal answer.

In many cases, stopping contact is the safest option. Continued communication may expose the victim to further manipulation, threats or pressure.

In other circumstances, police, lawyers or investigators may advise preserving contact for a limited period. That decision should be made carefully and should never require further payments.

Do not:

• threaten the suspected fraudster;
• disclose that an investigation has begun;
• arrange an in-person confrontation;
• send money to “test” an account;
• install software they recommend;
• allow remote access to a device;
• share new identity or banking information.

Personal safety should take priority over evidence gathering.

What can a romance-fraud investigation examine?

A romance-fraud investigation may examine both the false identity and the financial network behind it.

Depending on the available information, enquiries may include:

• checking names, aliases and claimed employment;
• examining social-media profiles;
• reviewing photographs and reverse-image results;
• analysing email addresses and telephone numbers;
• identifying linked domains and websites;
• examining company records and addresses;
• assessing documents supplied by the suspected fraudster;
• mapping connections between online accounts;
• reviewing recipient bank details;
• tracing cryptocurrency transactions;
• identifying possible money mules or intermediaries;
• establishing links to known fraud networks;
• preserving findings for lawyers, banks or law enforcement.

The purpose is not simply to prove that the romantic persona was false. It is to identify useful leads, financial connections and potential routes for action.

Identity investigation versus asset tracing

These are related but distinct tasks.

Identity investigation

Identity enquiries focus on questions such as:

• Who created or operated the account?
• Are the photographs stolen?
• Is the employment history genuine?
• Which other profiles use the same contact details?
• Are there linked companies, domains or addresses?
• Does the person have identifiable associates?

Asset tracing

Asset tracing focuses on:

• where the money was sent;
• which accounts or wallets received it;
• whether funds moved through intermediaries;
• whether the recipients are connected;
• whether identifiable property, companies or other assets exist;
• whether there is sufficient information to support legal action.

An identified individual may have no recoverable assets. Conversely, a financial trail may lead to assets or account holders even where the principal fraudster’s identity remains uncertain.

Tracing bank transfers

Bank transfers may pass through several accounts before being withdrawn, converted or sent overseas.

Investigative work may seek to establish:

• the legal or beneficial owner of a recipient entity;
• links between multiple receiving accounts;
• companies associated with payment instructions;
• addresses or directors connected to those companies;
• patterns across different payments;
• possible mule accounts;
• onward transfers into other jurisdictions.

Private investigators do not have unrestricted access to private bank records. Banks, courts and law-enforcement agencies have powers that private firms do not.

Investigative intelligence can nevertheless help lawyers and authorities identify what records should be requested and which subjects or entities warrant further examination.

Tracing cryptocurrency payments

Where cryptocurrency was used, preserve:

• the wallet address;
• transaction hash;
• date and time;
• cryptocurrency and network used;
• amount transferred;
• exchange or platform details;
• screenshots and payment instructions.

Blockchain analysis may show how funds moved between addresses, whether they passed through services or exchanges, and whether different wallets appear connected.

A blockchain trail does not automatically identify the individual controlling a wallet. Linking on-chain activity to a real person or company may require exchange records, off-chain intelligence, legal process or cooperation from authorities.

Cryptocurrency tracing can support an investigation, but it does not guarantee freezing or recovery.

International romance fraud

Many romance-fraud cases cross borders.

The victim may be in the UK while:

• the false profile is operated elsewhere;
• the receiving account is in another country;
• an intermediary is based in the UK;
• cryptocurrency moves through several exchanges;
• a company or website is registered in a different jurisdiction.

Cross-border cases may require:

• local company and property searches;
• enquiries through trusted investigators;
• coordination with legal counsel;
• analysis of different disclosure and privacy rules;
• court applications in more than one jurisdiction;
• cooperation from banks, exchanges or law enforcement.

International reach alone does not make recovery impossible, but it can increase cost, time and legal complexity.

Can stolen money be recovered?

Sometimes, but never with certainty.

Potential recovery routes may include:

• a bank recalling or freezing a recent transfer;
• reimbursement through the victim’s payment provider;
• criminal confiscation or compensation;
• civil claims against identified defendants;
• freezing injunctions;
• disclosure orders;
• claims involving recipient or mule accounts;
• recovery from identifiable assets;
• cooperation from cryptocurrency exchanges;
• negotiated repayment.

Before expensive legal action begins, it is important to consider:

• the amount lost;
• the evidence available;
• the identity and location of potential defendants;
• whether assets exist;
• the cost of proceedings;
• the risk of dissipation;
• enforcement prospects.

Asset tracing can help legal advisers assess whether pursuing a claim is commercially realistic.

Recovery scams after romance fraud

Victims are frequently targeted again by people claiming they can recover the lost money.

Warning signs include:

• unsolicited contact;
• claims that funds have already been located;
• demands for tax, release, court or administration fees;
• guaranteed recovery;
• impersonation of regulators, police, banks or lawyers;
• pressure to pay in cryptocurrency;
• requests for remote access to a device;
• instructions to keep the recovery confidential.

The FCA warns that recovery-room scammers often approach people who have already lost money and demand an upfront fee or transaction charge. In some cases, they may be connected to the original fraud or have obtained the victim’s details from another criminal.

Before engaging anyone:

• independently verify the organisation;
• check professional and regulatory status where relevant;
• confirm the address and telephone number through independent sources;
• obtain a written scope and fee structure;
• ask what can realistically be achieved;
• reject anyone promising guaranteed recovery.

When should a private investigation be considered?

A private investigation may be appropriate where:

• the losses are substantial;
• multiple payments or recipients are involved;
• the fraud spans several countries;
• the bank or police require organised evidence;
• the identity behind the profile is unclear;
• companies, websites or cryptocurrency wallets are involved;
• a solicitor needs preliminary intelligence;
• there may be identifiable assets;
• the victim remains in contact and needs a managed strategy.

Before instructing an investigator, ask for:

• a clear scope;
• the proposed methodology;
• likely limitations;
• estimated fees;
• deliverables;
• reporting arrangements;
• data-protection and evidence-handling procedures.

A responsible investigator should not promise an identification, prosecution, freezing order or financial recovery.

When legal advice may be needed

Legal advice may be useful where:

• a substantial sum has been lost;
• a defendant or account holder has been identified;
• urgent freezing action may be required;
• disclosure from a bank or platform is needed;
• there are assets in the UK or overseas;
• a civil claim is being considered;
• the case involves insolvency, trusts or companies;
• the fraud overlaps with harassment or coercive control.

Investigators can gather intelligence and evidence, but only qualified legal advisers can advise on litigation strategy and court applications.

Where urgent legal action may be necessary, the investigator and lawyer should coordinate from an early stage.

Supporting a family member who has been targeted

Romance fraud may be difficult for relatives to discuss because the relationship felt genuine to the victim.

Avoid:

• ridicule;
• blame;
• issuing ultimatums without considering safety;
• repeatedly calling the victim gullible;
• demanding that all contact ends immediately without support.

Instead:

• listen calmly;
• focus on specific inconsistencies;
• encourage a pause in payments;
• help preserve evidence;
• contact the bank together;
• support the reporting process;
• consider professional verification;
• arrange emotional or safeguarding support.

UK Finance has stressed that romance fraud involves psychological manipulation and that language suggesting victims should simply have recognised the deception can increase shame and make intervention harder.

How to reduce further harm

After the immediate financial response:

• change passwords;
• enable multi-factor authentication;
• review banking and email recovery details;
• check whether identity documents were shared;
• review credit files where appropriate;
• secure social-media privacy settings;
• warn trusted contacts about impersonation;
• notify platforms hosting the false profile;
• monitor for new contact under different identities;
• watch for recovery scams.

Fraudsters may return using a new persona, or another person may claim to be a police officer, lawyer, bank employee or recovery specialist.

Romance-fraud investigation and asset-tracing support

Conflict International assists individuals, families and legal advisers with romance-fraud investigations involving false identities, financial transfers, international networks and potential asset recovery.

Depending on the circumstances, work may include:

• identity and background enquiries;
• open-source and digital investigation;
• analysis of companies, domains and contact details;
• financial intelligence;
• cryptocurrency tracing;
• asset tracing;
• evidence collation;
• support for legal advisers and law enforcement.

For advice on recognising a suspected scam before further money is sent, read How to Spot a Romance Scam: Warning Signs and Practical Steps.

Learn more about our Fraud and Financial Investigation Services and Asset Tracing Services, or contact us in confidence to discuss the available information and realistic next steps. Conflict’s current service pages cover financial investigation, transaction analysis, digital evidence and global asset tracing.

Where money has recently been transferred, contact the bank and report the fraud before waiting for a private investigation.