OSINT can expose stolen photos, false careers, fake websites, and risky financial claims before an online relationship causes lasting harm.
Online Trust Needs Independent Verification
Romance scams rarely begin with an obvious demand for money. They usually begin with attention, frequent messages, shared interests, emotional support, and a convincing personal story.
The person may claim to be serving in the military, working offshore, traveling internationally, managing an overseas project, or dealing with an emergency. These stories explain why they cannot meet while giving them time to build trust.
Some scams develop over months or years. Others move quickly from friendship or romance into cryptocurrency trading, investment platforms, identity theft, money laundering, or sextortion.
The financial damage can be severe. Romance-fraud reports in the United Kingdom rose by 9% during the 2024–2025 financial year, with reported losses exceeding £106 million. Australians reported more than A$28.6 million in romance-scam losses during 2025.
Open-source intelligence, commonly called OSINT, can help you test whether an online contact’s identity and story withstand independent scrutiny.
It cannot tell you whether someone loves you. It can reveal whether important parts of their story are false, copied, contradictory, or connected to known fraud.
Do not send money, cryptocurrency, identity documents, banking information, verification codes, or intimate images while serious questions remain unresolved.
What Is OSINT?
OSINT is the collection and analysis of information available through lawful public sources.
For a romance-scam check, that information may include:
- Search engine results
- Dating and social media profiles
- Reverse-image search results
- Public usernames
- Professional directories
- Business registrations
- Regulatory databases
- Company websites
- Domain-registration records
- News reports
- Scam warnings and victim reports
- Publicly available photographs and videos
The goal is not to uncover every private detail about another person. It is to answer a narrower question:
Does reliable information outside the person’s control support what they are telling you?
Independent sources matter because scammers can create several accounts that appear to confirm one another. A dating profile, social media page, personal website, and professional profile may all look consistent because the same person or criminal group built them.
Stop Immediately When the Request Is Dangerous
You do not need to finish an OSINT investigation before refusing a high-risk request.
Stop sending money or information when an online romantic interest asks you to:
- Pay for travel, medical treatment, legal problems, customs fees, military leave, or business emergencies
- Buy gift cards
- Transfer cryptocurrency
- Use a specific investment platform
- Borrow money, take out a loan, or sell assets
- Open a bank or cryptocurrency account
- Receive and forward money
- Receive and resend packages
- Share account passwords, security codes, or banking credentials
- Allow remote access to your phone or computer
- Send a passport, driver’s license, tax number, or other identity document
- Hide the relationship or transaction from family, friends, or your bank
Receiving and forwarding money can make you an unwitting money mule. The funds may have been stolen from other victims, exposing you to frozen accounts, financial loss, and possible legal consequences. Canadian authorities specifically warn that romance scammers may ask victims to receive money, join business ventures, or invest in cryptocurrency.
A genuine relationship should not require you to take secret financial risks for someone whose identity has not been independently verified.
Start With a Quick OSINT Check
A fast initial review can reveal whether deeper investigation is necessary.
1. Record the Claims They Have Made
Write down the important details the person has shared, including:
- Full name and age
- Birthday
- Phone number and email address
- Usernames
- Current city or country
- Previous residences
- Employer and job title
- Education
- Family details
- Travel plans
- Reasons they cannot meet
- Businesses or investments they mention
Compare new statements with earlier conversations. Scammers operating several identities may confuse dates, family details, job histories, locations, or previous explanations.
Preserve important evidence before confronting anyone. Save:
- Profile pages
- Messages and emails
- Photographs
- Phone numbers
- Website addresses
- Payment instructions
- Bank-account details
- Cryptocurrency wallet addresses
- Transaction records
- Threats or requests for secrecy
Accounts, websites, and conversations may disappear once the operator realizes they are under suspicion.
2. Reverse-Search Several Photographs
Reverse-image search can show whether a photograph appears elsewhere online.
Do not search only the main profile picture. Check:
- Casual selfies
- Travel photos
- Workplace images
- Uniform photographs
- Pictures of homes, vehicles, offices, or pets
- Cropped versions focused on the face
- Images sent privately during conversations
Results may show that an image:
- Appears under another name
- Belongs to a public figure, model, military member, or influencer
- Comes from a stock-photo library
- Has been used across unrelated dating profiles
- Predates the account by several years
- Has appeared in previous scam warnings
A match proves only that the image exists elsewhere. It does not automatically show who copied it, who first published it, or who operates the suspicious account.
The person in the photograph may be completely innocent and unaware that their identity is being used.
A missing match is not proof of authenticity. AI-generated faces and private or recently stolen photographs may produce no useful reverse-image results.
3. Search Usernames, Email Addresses, and Phone Numbers
People often reuse usernames across social networks, dating apps, forums, gaming platforms, marketplaces, and professional sites.
Search the exact username inside quotation marks. Then try variations involving:
- Numbers
- Initials
- Nicknames
- Underscores
- Periods
- Reversed first and last names
Search the person’s email address and phone number as well.
Look for connections to:
- Different names
- Conflicting locations
- Old profiles
- Marketplace listings
- Business records
- Fraud reports
- Other dating accounts
Treat phone-location clues cautiously. Internet calling services allow someone to obtain a number associated with a country or city where they do not live. A country code is a clue, not proof of physical location.
A limited online presence is not automatically suspicious. Some people avoid social media or use strict privacy settings. Concern increases when a thin history appears alongside contradictions, financial requests, copied images, or evasive behavior.
4. Verify Employment and Education Independently
Romance scammers often claim occupations that explain travel, restricted communication, or an inability to meet.
Common stories involve:
- Military service
- Offshore engineering
- Oil and gas work
- Shipping
- Aviation
- Medicine
- International contracting
- Humanitarian work
- Construction projects
- Overseas business
Check whether the employer exists and whether the claimed role is plausible.
Useful sources may include:
- Official company websites
- Professional-license databases
- Industry associations
- Staff directories
- Conference programs
- Business registries
- Regulatory records
- University departments
- Alumni publications
- Reputable news coverage
Do not rely solely on LinkedIn or another profile controlled by the person. Professional histories, qualifications, and photographs can be copied from real people.
Find the organization independently. Do not use only the website, phone number, email address, or contact person supplied by the online relationship.
5. Compare the Timeline and Location
Create a simple timeline of the person’s story.
Compare:
- Employment dates
- Travel dates
- Education
- Previous residences
- Family events
- Previous relationships
- Military service
- Business ownership
- Social media activity
- Dates shown in photographs
Ask practical questions:
- Have they claimed to be in two places at the same time?
- Do their working hours fit the claimed time zone?
- Does the employer operate in that location?
- Did the business exist when they supposedly worked there?
- Does the person’s online history begin shortly before they contacted you?
- Have major facts changed without a reasonable explanation?
- Do their excuses repeatedly prevent independent verification?
A single mistake may be harmless. A continuing pattern of changing stories is more significant.
Weather, accents, posting times, backgrounds, and phone numbers may support an investigation, but none reliably proves where someone is physically located.
Use Deeper OSINT Checks When the Story Involves Money
A polished profile may be enough to create an emotional connection. Financial fraud often requires a wider supporting network of fake companies, websites, documents, advisers, and payment systems.
Examine Websites and Email Domains
Romance scams may involve fake:
- Employers
- Shipping companies
- Law firms
- Banks
- Charities
- Cryptocurrency exchanges
- Trading platforms
- Investment advisers
- Government agencies
Check:
- When the domain was registered
- Whether the business is officially registered
- Whether its physical address exists
- Whether listed directors or employees can be verified
- Whether website text was copied from another company
- Whether contact details match independent records
- Whether the domain closely imitates a legitimate organization
- Whether a claimed financial license exists
A new domain is not proof of fraud, and an old domain is not proof of legitimacy. Criminals can buy existing domains, compromise legitimate websites, or use privacy services that hide registration details.
Look for combinations of evidence rather than treating domain age as a verdict.
The padlock icon in a browser only shows that the connection is encrypted. It does not prove the website owner is trustworthy.
Treat Documents as Unverified Claims
Scammers may send professional-looking:
- Passports
- Driver’s licenses
- Military identification
- Employment contracts
- Medical bills
- Bank statements
- Customs forms
- Airline tickets
- Legal letters
- Shipping invoices
- Investment certificates
These documents may be stolen, edited, fabricated, or generated with artificial intelligence.
Logos, fonts, signatures, and official language are weak forms of authentication. Instead:
- Locate the issuing organization independently.
- Check official licensing or reference databases.
- Confirm whether the stated fee or process genuinely exists.
- Contact the organization through verified contact details.
- Check whether the terminology matches the country and industry.
- Refuse to pay based solely on documents sent through private messages.
Do not upload your own identity documents or facial images to unknown “verification” websites. The FBI has warned about schemes that direct dating-platform users to fraudulent verification sites that collect information or trigger recurring charges.
Search Distinctive Parts of Their Story
Names and photographs can change, but scam scripts are frequently reused.
Search unusual sentences from messages inside quotation marks. You can also combine the supposed situation with words such as “scam” or “fraud.”
Examples include:
- “Oil rig romance scam”
- “Military leave fee scam”
- “Package held at customs romance scam”
- “Unable to access bank account overseas”
- “Medical emergency dating scam”
- “Crypto investment romance scam”
- “Travel money before meeting scam”
- “Inheritance release fee scam”
Repeated plots include:
- A frozen bank account
- Emergency surgery
- A delayed inheritance
- A seized package
- Military leave charges
- Travel costs
- Business-equipment problems
- Legal fees
- Cryptocurrency investments
- Taxes required before a withdrawal
The details vary, but the structure is usually similar: emotional trust is used to justify an urgent financial decision.
Investigate Investment Claims Separately
Relationship-investment fraud may begin as romance, friendship, a wrong-number message, or casual social-media contact.
After building trust, the scammer may claim to be a successful investor or introduce a relative, mentor, analyst, or trading expert. The victim is then directed to a professional-looking website or app showing fabricated profits.
Common warning signs include:
- Guaranteed or unusually consistent returns
- Private links to trading websites or mobile apps
- Instructions to buy cryptocurrency
- Coaching on how to transfer funds
- Pressure to invest larger amounts
- Screenshots of supposed profits
- A small early withdrawal designed to build confidence
- Demands for taxes, deposits, insurance, or verification fees before withdrawal
- Requests to approve access to a cryptocurrency wallet
Canadian authorities warn that some fake platforms allow an early withdrawal before blocking later attempts, while newer “approval phishing” schemes trick victims into granting criminals access to cryptocurrency wallets.
Before investing:
- Check the business through the relevant national or regional financial regulator.
- Confirm the license using the regulator’s own website.
- Search the company name, domain, directors, and address independently.
- Check whether the regulator has issued a warning.
- Avoid applications distributed through private or unofficial links.
- Never give another person remote access to your device.
- Never share wallet seed phrases, private keys, or authentication codes.
- Speak to an independent licensed financial professional.
Money shown on a dashboard is not proof that an investment exists. A scam platform can display any balance or profit its operators choose.
AI Makes Profiles, Messages, Voices, and Video Less Reliable
Modern romance scammers can use generative AI to create:
- Realistic profile photographs
- Personalized messages
- Translated conversations
- Fake identity documents
- Cloned voices
- Altered photographs
- Synthetic video
- Large numbers of distinct online identities
The FBI reported that scammers use AI-generated profiles and conversational scripts to make confidence and romance fraud more believable. Its 2025 Internet Crime Report recorded more than $19 million in reported losses from confidence and romance complaints with a likely AI connection.
AI changes how evidence should be interpreted:
- Perfect grammar does not prove the person is genuine.
- A unique photograph may be synthetic rather than authentic.
- A familiar voice does not prove identity.
- A video call does not confirm a name, job, location, or financial story.
- An official-looking document may have been generated in seconds.
A live video call can still be useful when someone repeatedly avoids appearing on camera. Ask ordinary, spontaneous questions connected to earlier conversations.
However, treat the call as one layer of evidence. Prerecorded video, face-swapping tools, voice cloning, poor connections, or another person acting on the scammer’s behalf can create a convincing appearance.
Judge the Evidence by Strength
Not every clue deserves the same weight.
| Evidence level | Examples | What it means |
|---|---|---|
| Strong evidence of danger | Money requests, an unauthorized investment firm, stolen photos tied to conflicting identities, false employment, wallet-access requests, remote-access demands, or money-mule activity | Stop the transaction and contact the relevant institutions |
| Concerning but inconclusive | Recently created profiles, changing stories, repeated canceled meetings, copied biographies, secrecy, isolation, or a new business website | Pause the relationship and verify independently |
| Weak evidence | Few followers, limited social media, an unfamiliar accent, unusual posting times, a personal email account, or a mismatched country code | Do not accuse anyone based on this alone |
The strongest conclusions come from several independent findings that point in the same direction.
A real name, genuine company, established social profile, or successful video call does not prove the person contacting you controls that identity. The real individual may be impersonated.
Someone can also use their genuine identity while committing fraud, coercion, financial abuse, harassment, or manipulation.
Know What OSINT Cannot Prove
No Results Do Not Prove Legitimacy
A scammer may use private accounts, stolen images, synthetic photographs, newly created identities, or contact details that have never appeared publicly.
A Name Match Does Not Confirm Identity
Common names can produce false connections. Several details should match before assuming that two records refer to the same person.
Reverse-Image Tools Can Produce False Matches
Facial-search and image-matching systems may connect unrelated people. Treat results as investigative leads, not final proof.
Public Records May Be Incomplete
Business registrations, professional directories, licensing records, and public profiles vary by country and may be delayed, outdated, or unavailable.
OSINT May Expose the Impersonation, Not the Operator
You may identify the innocent person whose photographs were stolen without learning the scammer’s real name or location.
Do not contact, accuse, or publicly expose the person shown in stolen photographs unless there is a legitimate and safe reason to do so.
Keep the Investigation Ethical and Legal
Protecting yourself does not justify invading someone else’s privacy.
Use public information and legitimate search methods.
Do not:
- Hack accounts
- Guess passwords
- Install spyware
- Track someone’s precise location
- Impersonate another person
- Create deceptive profiles
- Buy illegally obtained data
- Harass family members, employers, or coworkers
- Publish personal information
- Make public accusations based on uncertain evidence
Keep the investigation focused on safety.
You do not need to discover everything about the person. You need enough reliable information to decide whether continuing the contact is safe.
What to Do If Intimate Images Are Used for Blackmail
Sextortion may be combined with romance and investment scams. Criminals may persuade someone to share intimate material and then threaten to send it to relatives, employers, or social contacts.
INTERPOL reported in 2026 that sextortion was increasingly being integrated into romance and investment fraud, including schemes using scripts and AI-generated content.
If you are threatened:
- Do not send more images.
- Do not pay.
- Preserve the messages, threats, usernames, profile links, and payment instructions.
- Stop engaging once the evidence is saved.
- Report the account to the platform.
- Contact local police or the appropriate cybercrime authority.
- Tell a trusted person rather than dealing with the threat alone.
- Secure your email and social accounts.
- Review who can see your contacts, friends, and personal information.
Paying does not guarantee that the material will be deleted. It may lead to repeated demands.
What to Do If You Suspect a Romance Scam
Act quickly, especially when money, account access, or identity information has been shared.
- Stop sending money and information.
- Preserve profiles, messages, payment details, wallet addresses, and transaction records.
- Contact your bank, card provider, payment service, or cryptocurrency exchange immediately.
- Ask whether transfers can be stopped, recalled, frozen, or traced.
- Report the account to the dating, messaging, or social media platform.
- Change exposed passwords and enable multifactor authentication.
- Remove any remote-access software you were told to install.
- Monitor bank accounts, credit reports, identity records, and cryptocurrency wallets.
- Tell a trusted friend or family member.
- Report the fraud to the appropriate authority.
Do not reveal every OSINT finding to the suspected scammer. Explaining your methods may help the operator repair the false identity, delete evidence, or create a more convincing explanation.
Where to Report a Romance Scam
| Country | Main reporting steps |
|---|---|
| United States | Contact the financial institution immediately. Report the fraud to the Federal Trade Commission and file a complaint with the FBI’s Internet Crime Complaint Center. |
| United Kingdom | Contact the bank immediately. People in England, Wales, and Northern Ireland can report through Report Fraud. In Scotland, report fraud and cybercrime to Police Scotland through 101 unless there is an emergency. |
| Australia | Contact the bank or card provider, report the scam to Scamwatch, and use ReportCyber when money, identity information, compromised accounts, or cybercrime are involved. |
| Canada | Contact the financial institution, local police, and the Canadian Anti-Fraud Centre. For investment fraud, also contact the relevant provincial or territorial securities regulator. |
| Other countries | Contact the bank or payment provider, local police, the national cybercrime-reporting service, the relevant financial regulator, and the platform where contact began. |
Reporting does not guarantee that money will be recovered, but it may help financial institutions freeze funds, connect related cases, block criminal infrastructure, and protect other potential victims.
Be cautious of anyone who later promises to recover lost money, cryptocurrency, or personal data for an upfront payment. Recovery scammers regularly target people who have already suffered fraud. Australian authorities specifically warn victims to expect follow-up scams offering to retrieve stolen funds.
Common Questions About OSINT and Romance Scams
Can a reverse-image search prove that a profile is fake?
No. It can show that an image appears elsewhere or under another identity. You still need to determine whether the profile copied the image and whether the person shown is being impersonated.
Does a successful video call prove the person is genuine?
No. It confirms only that someone appeared on video. It does not independently verify their legal name, career, location, intentions, or financial claims.
What if the person has no searchable online history?
A missing history is not proof of fraud. Some people value privacy. It becomes more concerning when combined with changing stories, financial pressure, avoidance of meetings, or unverifiable employment.
Should you confront a suspected romance scammer?
Usually, preserving evidence, stopping payments, securing accounts, and reporting the contact are safer than presenting a detailed case. Confrontation may cause the operator to delete evidence or intensify manipulation.
Can OSINT identify the scammer’s real identity?
Sometimes, but often it cannot. OSINT may reveal stolen content, reused contact details, fake businesses, or connected infrastructure without identifying the individual operating the account.
Verify Early and Trust Independent Evidence
OSINT cannot determine whether someone’s feelings are genuine. It can test whether their identity, career, location, websites, photographs, and financial claims survive independent scrutiny.
Start with the highest-value checks: record the person’s claims, reverse-search several images, search contact details and usernames, verify employment independently, compare timelines, and investigate every financial platform through an official regulator.
Treat no single result as proof. Look for patterns.
Most importantly, stop when an online relationship leads to money requests, cryptocurrency transfers, account access, identity documents, secrecy, financial favors, or pressure to use a platform selected by the other person.
The safest rule is simple:
Verify early, rely on independent evidence, and never let emotional pressure override unresolved risk.