SardineCon SF/2026

Learn More
Scams & social engineering4 分で読めます

Catfishingとは?

SUBSCRIBE

Catfishing is running a fake online persona, built from stolen photos and an invented backstory, to trick a victim into a relationship or trust. It is usually the front end of a romance or pig-butchering scam, building real emotional dependence before money is ever mentioned.

What is catfishing, in plain English?

Catfishing is creating and running a person who does not exist. The fraudster assembles a convincing identity, stolen or AI-generated photos, a name, a job, a life story, and uses it on dating apps, social media, or messaging platforms to draw a victim into an online relationship. Everything the victim sees is a costume.

The defining feature is that catfishing is about building the relationship, not the immediate ask. The persona invests weeks or months in daily contact, affection, and shared plans, creating genuine emotional dependence. Because there is no money involved at first, the early stage produces no financial signal at all, which is exactly what makes it hard to catch.

In fraud terms, catfishing is the trust-building layer beneath romance scams and pig-butchering. The fake identity is the vehicle; the eventual pitch, an emergency, an investment, a plane ticket, comes only after the victim is emotionally locked in.

How a catfish operation unfolds

The pattern is slow and deliberate:

  1. Build — Create the fake persona. Stolen or generated photos and an invented backstory produce an attractive, believable identity.
  2. Connect — Approach the target. The persona reaches out on a dating app or social platform and starts warm, attentive conversation.
  3. Bond — Deepen the relationship. Daily contact, affection, and future plans build real emotional dependence, while excuses avoid video or meeting.
  4. Pivot — Steer toward money. Once trust is deep, the story turns to a crisis or an investment, and the financial ask finally appears.

Who is involved?

Who

Their role

The catfish operator

Runs the fake persona, sometimes several at once, managing the conversation and timing the pivot to money.

The victim

Believes the relationship is real and grows emotionally attached before any request appears.

The real person in the photos

An unwitting third party whose stolen images give the persona a face and credibility.

Platforms and investigators

Detect reused images and behavioral tells, and try to disrupt the persona before losses occur.

What it looks like in practice

In practice

A victim matches on a dating app with an attractive profile: a professional working abroad, warm and quick to message. Over two months they talk every day, share plans to meet, and the relationship feels entirely real. Video calls never happen; there is always a reason, a bad connection, a demanding job, a time-zone clash.

Then the story shifts. The persona mentions a can-not-miss crypto opportunity and offers to guide the victim through it. Only when the victim starts sending money does the fraud produce any signal a bank could see. Up to that point, the entire scam lived in a chat window with no transactions at all.

Why it matters to operators

Catfishing is a problem precisely because it is invisible until it is expensive. The grooming happens entirely off your rails, in messages you never see, and produces no anomalies until the first payment. By then the victim is emotionally committed and will often defend the persona, ignore warnings, and rationalize the transfers.

That means detection has to lean on the payment behavior at the pivot, first transfers to a new crypto platform or overseas payee, escalating amounts, and a customer who resists questions about who they are sending money to. Understanding catfishing as the hidden front end helps operators read those payments correctly as scam-driven rather than genuine investment.

What to watch for

  • Reused or stolen images. Profile photos that appear elsewhere online under other names, or look too polished or AI-generated.
  • Never on video. Persistent excuses to avoid live video calls or in-person meetings while the relationship deepens.
  • Fast intensity. Rapid declarations of love and talk of a future, a pattern known as love bombing, used to accelerate trust.
  • Story steers to money. Conversation that keeps drifting toward a crisis, an investment, or a crypto opportunity.
  • Coached payments. A customer making new overseas or crypto transfers who is evasive about the recipient and defensive when questioned.

Quick questions

Is catfishing the same as a romance scam?

They overlap but are not identical. Catfishing is the fake persona and the deception behind it, while a romance scam is the financial fraud built on top. Not every catfish is after money, but in fraud casework the fake identity is almost always the entry point to a romance or pig-butchering scam.

Why is there no early warning sign?

Because the first stage is purely emotional and happens off any financial platform. There are no transactions, logins, or account changes to flag until the scam pivots to money. The bank only sees it once the victim starts paying.

How do investigators spot a catfish?

By reverse-image searching profile photos to find reuse, looking for refusal to appear on video, and reading the storyline for a steady drift toward money or crypto. On the payment side, new overseas or crypto transfers with a defensive customer are the tell.

Does AI make catfishing worse?

Yes. AI-generated faces avoid the reverse-image-search weakness of stolen photos, and voice or video deepfakes can even fake a live call. This erodes some traditional tells, pushing more weight onto behavioral and payment signals.

Can the victim be convinced they are being scammed?

Often not easily. Emotional attachment makes victims defend the persona and dismiss warnings, sometimes even after being shown evidence. This denial is a known feature of romance-based fraud, not a sign the victim is unreasonable.

What should a team do when they suspect it?

Treat new crypto or overseas transfers with the hallmarks as potential scam payments: add friction, ask direct questions about the recipient, warn clearly, and where possible slow or hold the payment while the situation is assessed.

Go deeper

  • FTC Consumer Advice: Scams ↗ — US consumer guidance on current scams and fraud, and how to report them.
  • FBI IC3 ↗ — The FBI Internet Crime Complaint Center. Fraud reporting and annual trend reports.

Catfishingと併せて知っておきたい用語