Payments Security

Romance Scams: Another Look at Check Fraud Using the ScamClassifier Model

Fraudsters create scams to carry out check fraud by deceiving individuals into depositing counterfeit checks in their accounts. At the direction of the fraudster, financial institution customers who do not realize a deposited check was fraudulent may send funds from this check deposit to someone else – i.e., the fraudster. As a result, customers may become unwitting money mules by helping fraudsters transfer illicit funds. Customers also may find themselves liable for the funds they sent when these deposited checks are identified as fraud and the deposited amounts are subsequently removed from their accounts.

The Federal Trade Commission (FTC) reported consumers lost more than $12.5 billion to fraud and scams in 2024 – an increase of 25% from 2023 – despite a similar number of reports in each year (2.6 million).

As described in an earlier article, Leveraging the ScamClassifier Model for Check Scams, the ScamClassifier model divides scams into either a products or services scam or a relationship and trust scam. Relationship and trust scams typically involve a transfer of funds to an imposter acting as a trusted or authoritative party, where there is no expectation or promise of merchandise in exchange for the funds. The following scheme exemplifies how check fraud can stem from relationship and trust scams, and how the ScamClassifier model can be leveraged for more robust prevention and customer education to help customers recognize and avoid these scams.

This article is part of a series focusing on ways to improve fraud mitigation and education by classifying check fraud and scams.

Check Fraud Scheme: Online Romance
In this scheme, an online relationship is cultivated between an unsuspecting victim and a “love interest,” who is really a criminal. Over a long period of time, the “love interest” works to develop the victim’s deep level of trust. Due to the relationship that has been established, the criminal is able to convince a victim to deposit a check and forward the money. The victim later realizes the check was fraudulent and discovers the supposed “love interest” was fabricated by a criminal.

Check Fraud Timeline

Scam > Authorized Party > Relationship and Trust > Romance Imposter
When using the ScamClassifier to assess the type of scam in this scenario:

  • Step 1 is to confirm that the scenario meets the definition of a scam, outlined in the graphic below. Since “Bob” deceived Sally, this is a scam.
  • Step 2 determines whether the payment was authorized or unauthorized. Sally sent the money to “Bob” – therefore, the payment was authorized.
  • In step 3, the scam category is defined as “relationship and trust” because “Bob” leveraged the trust he developed with Sally to carry out this scam.
  • Last, in step 4, the scam type is “romance imposter” due to the way the fraudster “Bob” pretended to be a love interest to deceive and manipulate Sally.

ScamClassifier for Check
The ScamClassifier model is a tool that provides insight into the types of scams that target individuals, which can be used to increase financial institution employee and customer awareness of scams – including those related to check fraud and money mule activity. Information on the different types of money mules and the signs associated with money mule activity is available from the FBI (Off-site).

Additionally, the ScamClassifier model offers a structure for consistent classification to complement efforts to identify and prevent check fraud and the movement of illicit funds originating from scams, as well as to educate potential scam victims.

As the payments industry continues the fight against scams, explore the value of the ScamClassifier model to support consistent classification for:

  • Holistic awareness of trends
  • Scope, volume and financial impacts of check scams
  • Streamlined remediation for victims
  • Robust employee training
  • Targeted and relevant customer education

The ScamClassifier model is not intended to result in mandates or regulations, and does not give any legal status, rights or responsibilities, nor is it intended to define or imply liabilities for loss or create legal definitions, regulatory or reporting requirements. While sharing and use of the ScamClassifier model throughout the industry is encouraged, any adoption of the ScamClassifier model is voluntary at the discretion of each individual entity. Absent written consent, the ScamClassifier model may not be used in a manner that suggests the Federal Reserve endorses a third-party product or service.