Hong Kong police have flagged a HK$26 million ($3.3 million) loss by a local insurance agent as the largest case in a week that saw 25 online romance scams drain nearly HK$70 million ($8.9 million) from victims across the city.
The victim, a woman in her 50s, was drawn into a fake cryptocurrency investment scheme after a prospective insurance customer contacted her last year, police said in a Saturday social-media post. That initial approach led to an introduction to a man calling himself “Uncle,” who claimed to work in the car trade. The relationship later developed into an online romance, a common route used by fraud groups to build trust before proposing financial deals.
Police said the man persuaded the woman to invest in cryptocurrency through a mobile application presented as a trading platform. Over about six months, she handed HK$4 million ($510,000) in cash to accomplices and sent almost HK$22 million ($2.8 million) to several mule accounts, which are bank accounts used to receive and move suspected criminal proceeds.
The application eventually showed that her investment had risen by more than 800%, according to police. When she tried to withdraw the apparent gains, the requests were denied. Her online boyfriend and the people who collected the cash later disappeared.
Fake trading apps turn fabricated gains into pressure
The case follows a familiar pattern in cryptocurrency-enabled romance fraud. Victims are often shown a functioning-looking application with price charts, account balances and apparent profits, but the displayed figures are controlled by the fraudsters rather than linked to real trading activity.
Early gains shown on such platforms can encourage a victim to make larger transfers. A blocked withdrawal often becomes the first clear indication that the platform is fraudulent. In some schemes, victims are then asked to pay purported taxes, verification charges or account-unfreezing fees, creating another layer of losses before contact ends.
The Hong Kong case also illustrates how these operations can use several payment channels. Cash handovers to accomplices reduce the traceability of the transaction, while transfers to multiple mule accounts can fragment funds and make recovery more difficult. The alleged fraudsters did not need the victim to send cryptocurrency directly from a personal wallet; the cryptocurrency narrative and fake trading app were sufficient to obtain conventional bank transfers and cash.
Hong Kong police did not identify the suspects, the app involved, or whether any arrests had been made in connection with the woman’s case.
International enforcement targets scam compounds
Law-enforcement agencies have increasingly treated these frauds as organized, cross-border operations rather than isolated online deception. In April, the FBI said it had worked with authorities in Dubai, Thailand and China to arrest 276 suspects and disrupt nine scam centers connected to cryptocurrency investment schemes.
Such centers commonly combine relationship manipulation with scripted investment pitches and professionally designed websites or applications. Workers may communicate with targets for weeks or months, tailoring conversations around a victim’s job, family circumstances and financial capacity before introducing an investment opportunity.
The FBI has separately warned that cryptocurrency-related fraud represents a substantial share of reported internet-crime losses. According to figures cited by the agency in the material provided, crypto-related fraud losses reached $11.3 billion in the reported year, out of $20.9 billion in total internet-crime losses tracked by the FBI.
Those figures reflect reported losses rather than a complete count of fraud, since many victims do not report incidents because of embarrassment, uncertainty about where to file a complaint, or the belief that their money cannot be recovered. Romance-linked investment scams can be particularly damaging because trust is built gradually and victims may keep sending money after relatives or colleagues raise concerns.
Hong Kong tightens account-security requirements
The police warning comes as Hong Kong’s financial regulator pushes brokerage firms and cryptocurrency trading platforms to strengthen login security. Earlier this month, the Securities and Futures Commission directed internet brokerages and crypto platforms to phase out one-time passwords for user logins and device registration.
One-time passwords, often sent by text message, can be vulnerable when criminals gain control of a phone number through SIM-swapping attacks, social engineering or compromised telecom accounts. The regulator linked the change to efforts against account takeovers, fraud and spoofing operations.
The SFC’s direction would require firms to adopt stronger authentication methods rather than relying on a single text-message code. The measure addresses a different point in the fraud chain than the Hong Kong romance case: it is designed to make unauthorized access to legitimate customer accounts harder, while the police case involved a victim being persuaded to transfer money voluntarily to fraudsters.
That distinction affects how customers assess risk. Stronger login controls can help protect an existing brokerage or platform account, but they cannot validate a trading application recommended by a new online contact or guarantee that an investment opportunity is genuine.
Police advice in romance-fraud cases generally focuses on independently checking financial platforms, treating withdrawal restrictions as a warning sign, and avoiding transfers or cash payments requested by people known only online. In the Hong Kong case, the claimed 800% return did not represent accessible profits; it was the final display on an app before the victim’s withdrawal requests were refused.
Worried about romance or phishing scams? Learn essential crypto protection steps in this security guide before investing.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.
