Investment scams

The most common types of scam

Recognize the basic types: you're promised a guaranteed return, pressured to act immediately, steered to a fake platform, or offered “help getting your lost money back” (a recovery scam). Many start with a social media ad, a message or a phone call that seems credible. Scams are no longer emails riddled with spelling mistakes. They are professional, polished and convincing.

What almost all scams have in common is that they exploit emotion, not logic: greed (“don't miss out on the returns”), fear (“your account is at risk”), loneliness (romance scams) or shame (“don't tell anyone”). Technical protection alone isn't enough, because the scammer doesn't break into a system but into a person: they get the victim to transfer the money voluntarily. That's why the most important defense is to recognize the psychological buttons being pushed.

It's also good to understand that being scammed is not a sign of stupidity. Scams are designed to deceive educated, careful and financially savvy people too, and often precisely them, because they have more wealth and more confidence in their own judgment. The more professional scams become, the less it's about the victim's knowledge and the more it's about whether the moment and the right emotional hook happened to coincide. Taking this on board removes the shame that stops people from talking and seeking help.

New and most dangerous forms

Three current forms that fool even savvy people: Romance and “pig butchering” scams: trust is built over weeks or months before the victim is steered into investing on a fake platform, where the “return” appears to grow until a withdrawal is attempted. Deepfake and celebrity ads: an AI-generated video of a well-known person who “recommends” a platform. Don't trust a face or a voice. Fake contacts from authorities or banks: the caller claims to be from your bank or the police and pressures you to “secure” your money by transferring it to another account.

What these new forms have in common is that they build trust before they strike. The old scam tried to take the money right away; today's scam invests time: weeks of conversation, “returns” on a fake platform that appear to grow, or the voice of a credible authority. The more trust has been built, the harder it is for the victim to believe they've been deceived, and the larger the sums typically become.

What makes these especially dangerous is the development of technology. AI makes convincing deepfake videos, cloned voices and messages that feel personal possible on a mass scale: the scammer can pose as a familiar celebrity, a bank employee or even a family member. This means a face, a voice or an impressive platform can no longer be trusted as proof that something is genuine. The only lasting protection is to verify the matter through an independent channel that you choose yourself, not the one the person contacting you offers.

Red flags

Stop if you come across any of these: a guaranteed or unrealistically high return, urgency and pressure, an unknown party or platform, unusual payment methods (crypto straight to a stranger, “today only”), or a request for your online banking credentials or remote access. Even one of these is reason enough to stop.

The power of red flags is that they work without you having to identify the scam itself. You don't need to know whether the offer is genuine; it's enough to recognize the warning sign and stop. This matters because scams change constantly, but their structural features (urgency, guaranteed returns, pressure, unusual payment methods) stay the same. Learn the signs, and you won't need to know about every individual type of scam.

The practical rule is simple: even one red flag is reason enough to stop and verify before you do anything. You lose nothing by waiting: a genuine investment will still be there tomorrow. If the other party can't accept you taking time and asking for advice, that in itself is the strongest possible red flag. Urgency is the scammer's most important tool, and removing it is often enough to bring the whole scam down.

How to protect yourself

Always check the authorization: a regulated provider can be found in the register of the Finnish Financial Supervisory Authority (FIN-FSA) and in international registers. Don't rush: a scam lives on urgency, while a real investment will wait. Verify the party through another channel: find the official website yourself, call customer service on the official number, and don't click the link in the message. Never give your online banking credentials, one-time passwords or remote access (e.g. AnyDesk, TeamViewer) to a “helper”. A bank or an authority will never ask for them.

The core of protecting yourself is to cut off the channel the scammer controls and verify the matter through a route you choose yourself. If you get a call from “your bank”, hang up and call the bank yourself on its official number, the one on your own card. If you see an investment ad, look up the company's details yourself with a search engine and check its authorization in the supervisor's register. Never click the link in the ad or the message. This one habit (always verifying through another channel you choose yourself) stops the vast majority of scams.

Another lasting protection is slowing down as a rule. Decide in advance that you will never transfer money or give out credentials during the same session in which someone contacts you. Instead, you sleep on it and ask at least one outside person. This simple delay neutralizes the urgency that drives a scam. No genuine, good opportunity disappears because you take a day to think it over; only a scam demands immediate action.

Talk: don't stay alone with it

Finns have traditionally found it hard to talk about money, and that is exactly the scammer's best ally. A scam is built on isolation: “don't tell anyone”, “this opportunity is just for you”, urgency and shame. The best antidote is the opposite: talk and ask. Ask the people close to you, acquaintances, investment forums and AI before you transfer money. A peer group and an outside view reveal red flags you won't notice on your own.

AI is now a good, objective tool for validating both your own thinking and the promises others make. Ask it to assess an offer critically and to look for the risks. Don't stay alone with your shame: shame is exactly the feeling the scammer uses to keep you quiet. Weak financial knowledge is overcome together, not alone.

Where to get help if things went wrong

If you suspect a scam or you've been caught out, act immediately. Minutes count:

• Your bank: block payments, close your card, ask for a chargeback.
• The police: report the crime (also via the online police, nettipoliisi).
• The FIN-FSA: check its warning list and report the scam.

Don't be ashamed and don't stay alone with it: scams are designed to deceive smart people too. And watch out for recovery scams, which target precisely those who have already become victims.

Ponzi and pyramid schemes

The most classic investment scam is the Ponzi scheme, in which “returns” are paid with new investors' money, not with real returns. As long as more new money flows in than is paid out, the scheme appears to work and pays the promised returns on time, which makes it extremely convincing. The collapse inevitably comes when the stream of new investors dries up, and then most people lose everything. The Bernie Madoff case was the largest Ponzi scheme in history, and it fooled even sophisticated professional investors for a decade.

A pyramid scheme is a related phenomenon, in which the return is based on recruiting new members rather than on a real product or investment. Both have the same hallmark: the return doesn't come from any genuine economic activity but purely from the flow of new money. Warning signs include unusually smooth and high returns (a genuine investment fluctuates), pressure to recruit others and difficulty getting your money out. If you don't understand where the return concretely comes from, that's often a sign it doesn't come from anything sustainable.

Pig butchering: a closer look at the confidence scam

“Pig butchering” is one of the fastest-growing and most devastating types of scam, and understanding it can save large sums. The name refers to its cruel logic: the victim is “fattened up” with trust and small successes before being “slaughtered”. The first contact often comes as a message that seems random (a “wrong number”, a friendly acquaintance on a dating app), and the relationship is built over weeks or months without any mention of money.

Once trust has been built, the victim is steered into “investing” on a fake platform that looks credible and where the returns appear to grow handsomely. The victim may even be allowed to withdraw a small sum at the start as proof that it's genuine. Eventually, once the victim has invested a lot, withdrawals are blocked: “taxes”, “fees” or additional investments are demanded before the money will supposedly be released, until the victim realizes that none of it exists. The protection is to recognize the pattern: a stranger who builds a relationship online and then steers you into investing on a particular platform is not a friend but a scammer.

AI and deepfake scams

Advances in AI have transformed scams, because AI makes convincing imitation possible cheaply and on a mass scale. Deepfake videos of well-known entrepreneurs, politicians or celebrities “recommend” investment platforms so realistically that video and audio are no longer proof of anything. Voice cloning makes possible a call in which a “family member” asks for money in distress. A voice sample of a few seconds is enough to make a copy.

This changes the basic rule of protecting yourself: proof of authenticity can no longer be how something looks or sounds, but whether you can verify it independently. If “your child” calls asking for money, call them back on their own number. If a celebrity “recommends” an investment, remember that genuine investment professionals don't market guaranteed returns on social media. In the age of AI, healthy suspicion of what you see and hear isn't paranoia but an essential skill. And the same AI is also a defense: you can ask it to assess a suspicious offer critically.

Crypto and scams

Crypto-assets are scammers' favorite tool for several reasons that are worth understanding. Transfers are irreversible: unlike a bank transfer, a crypto payment can't be reversed or easily traced, so once the money has gone, it's gone. In addition, crypto's technical complexity and intense hype create an environment where the victim may not understand what they're doing, and where unrealistic promises of returns seem more believable.

Typical crypto scams include fake investment platforms, fake tokens and “rug pull” projects, in which the developers collect the money and disappear. Promises of free crypto, “giveaway” scams and fake support services are also common. This doesn't mean that crypto is a scam in itself, but that its features (irreversibility, anonymity, technical difficulty) make it an ideal tool for scammers. A particular warning sign is always a request to transfer crypto straight to an unknown wallet “as an investment”. Legitimate investment services don't work this way.

The recovery scam: a second strike

A particularly cruel type of scam targets those who have already been scammed. In a recovery scam, the victim is contacted and promised “help getting the lost money back” in exchange for a fee or an upfront payment. The scammer may pose as a lawyer, an authority, an “asset recovery company” or even another victim who supposedly found a way. The information that the person has already lost money often comes from the original scammers, who sell lists of victims on.

A recovery scam strikes especially effectively because the victim is desperate and wants to believe that the lost money can still be recovered. The rule is clear: money lost to a scam can't be recovered by paying an upfront fee, and anyone who promises that is a scammer. Genuine help comes from the authorities and your bank, and they don't charge an upfront fee for recovery. If you have already been a victim, be especially careful with anyone who contacts you promising help. A second strike is statistically very likely to target precisely you.

Pressure tactics and manipulation

Scams rely on well-researched psychological manipulation techniques, and recognizing them makes them ineffective. Urgency and scarcity (“today only”, “places are filling up”) prevent careful thought. Authority (a fake bank, authority or celebrity) borrows trust. Reciprocity and commitment (a small free “return” at the start) make you feel obliged to continue. Social proof (“thousands are already in”) pressures you to follow the herd.

The most dangerous tactic of all is isolation: “don't tell anyone”, “this opportunity is just for you”, “others won't understand”. Isolation prevents exactly what would most effectively expose the scam: an outside view. When someone pressures you to keep something secret, it's an almost certain sign of manipulation. A genuine investment adviser encourages you to ask others, get a second opinion and take your time; only a scammer demands secrecy and urgency. Knowing the manipulation techniques is like a vaccine: once you see the technique, its effect weakens.

Risks for children, young people and older people

Scams target different age groups in different ways, and knowing the risks also helps you protect the people close to you. Young people are exposed to crypto and get-rich-quick scams that spread on social media, as well as promises of “easy money”, and they may underestimate the risk because they feel technically skilled. They are often lured with leveraged trading and unrealistic pictures of returns, presented eye-catchingly on social media.

Older people, on the other hand, are a particular target of romance scams, fake authority scams and phone scams, because they often have more wealth, less experience of digital fraud and sometimes loneliness that the scammer exploits. The best protection for both groups is open conversation about money in the family. When scams are talked about in advance and can be mentioned without shame, the isolation tactic loses its power. Openness between generations is the single most effective protection: a young person can help an older one recognize a technical scam, and an older person can help a young one recognize a promise that sounds too good.

Common mistakes and misconceptions

Certain common misconceptions weaken people's protection against scams. “I can't be scammed” is the most dangerous: overconfidence is exactly what makes caution slacken and leaves you exposed. “Scams are obvious” underestimates how professional today's scams are; the era of spelling mistakes is over. “I can tell a genuine company” forgets that fake platforms and deepfakes look completely genuine. And “I don't dare ask, in case people think I'm stupid” plays straight into the scammer's isolation tactic.

The most common practical mistakes are acting in a hurry, clicking a link that came with the contact, giving out credentials or remote access, and keeping the matter secret. Each of these can be avoided with one principle: slow down, verify through a channel you choose yourself, and never stay alone with the decision. The biggest lesson is that protecting yourself against scams doesn't require technical brilliance but humility: admitting that anyone can become a victim, and making sure you don't act alone and in a hurry.

How to protect yourself against scams: a checklist

Protecting yourself against scams comes down to a few principles that are worth adopting as rules in advance:

• Even one red flag = stop: urgency, a guaranteed return, pressure or unusual payment methods are enough.
• Always slow down: sleep on it, and don't transfer money or give out credentials during the same session.
• Verify through a channel you choose yourself: call the official number, find the website yourself; don't click the link in the message.
• Don't trust a face or a voice: deepfakes and voice cloning make them unreliable.
• Never give out credentials or remote access: a bank or an authority will never ask for them.
• Talk, don't stay alone with it: ask the people close to you, forums and AI; isolation is the scammer's weapon.

The most important insight is that protecting yourself against scams is an emotional skill, not a technical one: it's about being able to stop, resist urgency and ask for help without shame. If things went wrong, act immediately: contact your bank and the police, and don't be ashamed. Scams are designed to deceive smart people, so becoming a victim isn't stupidity, but talking about it and acting quickly can limit the damage.

Account security in practice

Many scams don't break into an account technically; they get the user to grant access themselves. Four basics prevent the vast majority of cases:

• Two-factor authentication on all your investment and email accounts. Email is often the key to everything else.
• A unique password for every service and a password manager. Otherwise, a password leaked from one service opens the others too.
• Never give your authentication codes to anyone. Your bank, Kvarn X or an authority won't ask for them by phone, text message or email.
• Always log in yourself through the app or an address you type in, not through a link that came in a message.

If you suspect your credentials have leaked, change your password, log out of all devices and contact the service provider right away.