Romance scams — sometimes called catfishing, sweetheart scams, or "pig butchering" when combined with fake investments — are consistently among the costliest fraud categories reported to the Canadian Anti-Fraud Centre, with average losses per victim far higher than most other scam types. In 2026, the tools behind these scams have changed: AI image generators can produce a photorealistic face that has never existed and can't be traced through a reverse image search, and AI chatbots can carry on a coherent, emotionally convincing conversation with dozens of targets at once.
This guide covers how romance scams actually work in 2026 — from AI-generated fake profiles to the escalation toward money requests — how to recognize the warning signs at each stage, exactly what to do if you've already sent money, and how to support a family member, especially a senior, who may be a target without realizing it. For the account-security side of a scam that involved a compromised device or shared screen access, see our guide on warning signs your computer is hacked.
Who wrote this guide
This article was written and reviewed by IT Cares certified technicians based on our work helping clients across Canada secure devices and accounts after a scam or account compromise. We are not a recovery or credit-repair company — this guide reflects the same steps we'd walk a client through on the phone.
How It Starts: Fake Profiles and AI in 2026
The classic romance scam — a stolen profile, photos lifted from a stranger's Instagram, a story full of holes — still exists. But in 2026, a newer generation of scam operations relies on generative AI tools that anyone can access, making fake profiles significantly harder to spot than even two or three years ago.
Photos of people who don't exist
AI image generators can now produce photorealistic human faces that belong to no one — untraceable through a standard reverse image search, since the photo never existed anywhere else on the internet. These images often have studio-quality lighting, a "professional headshot" composition, and a slightly-too-perfect symmetry. Some scam operations go further and generate a full, consistent set of photos of the same fabricated person — beach, restaurant, office — to create the illusion of a documented real life. Tell-tale details still slip through: hands with an unnatural number of fingers, jewelry or clothing patterns that warp inconsistently, backgrounds that don't hold together physically, or facial symmetry that's just slightly too perfect.
Conversations partly run by AI chatbots
This is the most significant shift of 2026: organized scam operations — frequently run from overseas call centers managing dozens of targets in parallel — increasingly use generative-AI chatbots to carry a substantial share of early conversations. These tools can maintain a consistent backstory over weeks, adjust tone based on a target's responses, and answer personal questions with a fluency that far exceeds the old copy-paste scripts. The result is a relationship that feels more natural and more attentive, and a trap that closes more slowly and more effectively than before.
One signal still tends to give it away: a sudden shift in writing style mid-conversation, replies available at any hour of the day or night with no delay at all, or answers that feel slightly "off" from the specific question asked — a chatbot often responds to the general topic rather than the precise detail.
Where it actually starts
Contrary to popular belief, most romance scams don't stay on the dating app where they began — they move quickly to less-monitored channels:
- Dating apps (Tinder, Bumble, Hinge) — the classic starting point, but the scammer usually pushes to move off the app fast
- Facebook and Instagram — unsolicited friend or follow requests from a recently created profile padded with stolen photos to look established
- WhatsApp and Telegram — the preferred destination once initial contact is made, outside the reporting tools of the original platform
- Online games and chat platforms — increasingly used to establish a "natural" first contact that doesn't look like a dating scenario at all
Did a device get shared with someone you met online?
If an online contact asked for remote access or had you install software, our certified technicians can check the device for active compromise and secure your accounts the same day — from $119.99.
Warning Signs: How to Spot a Suspicious Profile
No single sign proves a scam on its own. But the more boxes you check below, the higher the odds — and the combination of refusing verifiable contact AND asking for money, even a small amount, is nearly always a reliable signal on its own.
Checklist: Spotting a Suspicious Profile
Comparison Table: Warning Signs by Relationship Stage
Romance scams almost always follow a predictable multi-phase script. Recognizing which stage you're at can help you act before financial losses become serious.
| Stage | Typical Signal | What's Actually Happening | Recommended Action |
|---|---|---|---|
| Weeks 1-2 Initial contact |
Very attractive profile, flattering and personalized opening message | Scouting — the scammer is running the same script on several targets to see who responds | Run a reverse image search before replying at length |
| Weeks 3-6 Love bombing |
Intense declarations of love, constant availability, promises of a future together | Rapidly building an emotional bond to create dependency before the ask | Deliberately slow the pace down; request a video call |
| Months 2-3 Isolation and small tests |
Encourages keeping the relationship secret; small "test" requests (gift card, minor fees) | Checking whether the target is willing to send money, even a small amount | Decline any request for money, no matter how small; tell someone you trust |
| Month 3+ Major financial emergency |
Accident, arrest, customs issue, "blocked inheritance," urgent investment opportunity | The main ask: a large transfer or a cryptocurrency "investment" | Send nothing; report to the Canadian Anti-Fraud Centre before acting |
| After the first payment | New emergencies keep appearing, sometimes several per month | Continued escalation for as long as the target keeps paying | Stop all payments and all contact; preserve every piece of evidence |
How the Scam Escalates Toward Money
The progression toward a money request is rarely a straight line — it's deliberately engineered, step by step, so that each refusal feels harder than the last.
The first ask is almost always small and "reasonable": a gift card to "prove trust," modest transfer fees, or help with a minor unexpected cost. This first test measures whether the target is willing to pay at all. Once that first payment goes through, the requests escalate quickly: customs fees to release a "package" or an "inheritance," urgent medical costs abroad, bail to get out of a fabricated arrest, or capital needed to seize an "exceptional investment opportunity" — frequently in cryptocurrency.
Pig butchering: the crypto-investment hybrid
A particularly lucrative variant for criminals blends romance with a fake cryptocurrency trading platform. After weeks of built-up trust, the scammer introduces a trading platform that looks legitimate, shows fabricated "profits" on a convincing fake dashboard, and encourages the target to invest steadily larger amounts. The name comes from the idea of "fattening up" the victim before the financial slaughter: when the target tries to withdraw, the account is frozen, blocked by fake "activation fees," or the scammer simply disappears with the funds.
If a target refuses or starts asking questions, some scammers escalate to threats — claiming to have intimate photos or videos exchanged during the relationship and threatening to publish them unless money is sent, an escalation known as sextortion. Others, less commonly, use AI voice cloning to attempt a brief, confusing "verification" call before hanging up quickly citing a bad connection.
Canadian Case Studies
The scenarios below are fictional composites based on well-documented, common romance scam patterns in Canada — they don't depict any real person, but accurately reflect the typical mechanics of these frauds.
📍 Diane, 66, Ottawa
Contacted on Facebook by a profile claiming to be an "engineer" on an offshore oil platform, Diane exchanged messages for nearly four months with a profile featuring polished photos — a suit, a modern office, a consistent set of travel photos. Video calls were always postponed "because of the time difference and unstable connection." After a request to help cover "customs fees" to release a blocked family inheritance, Diane sent an initial $2,000, followed by several more transfers over six weeks.
Her son noticed unusual withdrawals during a visit and ran a reverse image search: the photos belonged to a European actor with no connection to the profile at all.
Total loss: approximately $18,000 CAD📍 Marcus, 53, Calgary
Marcus met "Elena" on a popular dating app. The relationship moved quickly to WhatsApp, then into daily affectionate conversations for over three months. Elena, who described herself as a financial analyst, eventually shared an "opportunity" on a cryptocurrency trading platform she said she used successfully herself. Marcus started with $1,500, watched his "balance" climb on a convincing dashboard, and reinvested increasingly larger amounts over several weeks — encouraged by small early withdrawals the platform allowed to build trust.
When he attempted a larger withdrawal, the platform suddenly demanded additional "activation fees" — a classic fraud signal at that stage, but by then most of the invested funds were already gone.
Total loss: approximately $45,000 CAD📍 Grace, 70, and her daughter Emily, Halifax
Grace had been corresponding for three weeks with a widowed "doctor on a humanitarian mission" when he first mentioned, out of nowhere, medical equipment stuck in customs requiring $800 to release. Grace mentioned the situation to her daughter Emily during a routine call, without any particular intent — just sharing her day.
Emily immediately recognized several signals from the checklist above: repeated refusal of video calls, an overseas-emergency backstory, and a money request after only three weeks. The two ran a reverse image search together; the photos traced back to an unrelated LinkedIn profile. Grace sent nothing and reported the profile.
Loss avoided: $800, and likely much moreWhat to Do If You Sent Money
Act Fast
Every hour matters, especially for a recent bank transfer or e-transfer. Work through these steps in order:
Contact your financial institution immediately
Ask whether the transfer or payment can be recalled or blocked. The odds of success drop fast with time, especially after the first 24 to 48 hours.
Cut off all contact with the scammer
Stop responding, don't confront the person, and don't send anything else, even under pressure or threats. Any reply confirms a real human is actively monitoring the account.
Preserve every piece of evidence
Screenshots of conversations, the profile itself, transfer confirmations, receipts, usernames, and any information — even partial — about the identity used against you.
Report it to the Canadian Anti-Fraud Centre
Call 1-888-495-8501 or report online at antifraudcentre-centreantifraude.ca. This feeds a national database that supports investigations, even without a guarantee of recovering funds.
File a report with your local police service
The case or reference number is frequently required by your bank or credit card company for dispute and recovery processes.
Report the profile to the platform
Dating app, Facebook, Instagram, WhatsApp — every report can help protect other potential targets from the same profile or network.
Consider a credit freeze
If you shared any personal information — address, date of birth, SIN — contact Equifax Canada and TransUnion Canada to reduce the risk of identity theft on top of the financial loss. See our identity theft recovery guide for the full process.
Have your computer or phone checked
If you installed an app the scammer suggested, or shared your screen at any point, a technician should check for spyware or unauthorized remote access left behind.
Watch for "recovery scams"
Once someone is known to have lost money to a scam, they frequently become the target of a second one: a fake "fund recovery agency" or a fake "cryptocurrency recovery lawyer" promising to get the lost money back — for an upfront fee. This is almost always a new scam layered on top of the first. No legitimate recovery service asks for advance payment to recover stolen funds.
How to Help a Senior Family Member Targeted by a Romance Scam
Seniors are targeted disproportionately by these scams — not because they're naive, but because scammers deliberately exploit loneliness, a desire for companionship after losing a spouse, and a generational tendency to trust polite, attentive strangers. Here's how to step in without making things worse.
Avoid judgment and direct confrontation. Phrases like "how could you believe that" or "it was so obviously fake" almost always trigger shame, which pushes the person to hide the rest of the relationship rather than ask for help — sometimes until losses become severe. Favor open questions instead: "How did you two meet?" "Have you been able to video call yet?"
Show, don't just tell. Rather than insisting the relationship is fake, offer to run a reverse image search on the profile photo together. Seeing concretely that the photo belongs to someone else is almost always more convincing than any verbal argument.
Watch for signs of coercive control. If your family member suddenly becomes secretive about their finances, avoids certain topics, or repeats phrases that sound like they came straight from the scammer ("they understand me better than you do"), this may be advanced manipulation that calls for an even more careful approach — potentially with support from a mental health professional or social worker.
Involve the financial institution early. Banks can sometimes flag unusual withdrawals and delay a suspicious transfer — but only if they're made aware of the situation. An adult child or caregiver can ask about setting up account alerts or a limited power of attorney, with the person's consent whenever possible.
In severe, repeated cases — where someone keeps sending money despite clear evidence and significant losses already sustained — it may be necessary to consider more formal protective measures, such as a power of attorney or guardianship arrangement, best discussed with a lawyer specializing in elder law or vulnerable-persons protection. A provincial seniors' safety line or elder abuse helpline can help point toward the right local resources.
Worried a Family Member's Device Was Part of This?
IT Cares helps clients across Canada determine whether a shared screen, installed app, or remote-access request from an online contact left a device compromised — and secures affected accounts the same day.
What IT Cares Offers — Pricing in Canadian Dollars
If a family member shared access to their computer, installed software suggested by an online contact, or is worried their accounts may be compromised, our technicians can check the device remotely or on-site and walk them through recognizing the next attempt.
Security Diagnostic
Full check for spyware or unauthorized remote access
Post-Scam Cleanup
Remove installed software, secure compromised accounts
Full Security Setup
Antivirus, two-factor authentication, strong passwords across accounts
Scam-Awareness Training
1-hour personalized session on spotting fake profiles and AI-generated content
Canadian Resources for Reporting and Support
| Resource | Contact | Purpose |
|---|---|---|
| Canadian Anti-Fraud Centre | 1-888-495-8501 | Report any fraud or attempted fraud |
| Local police (non-emergency line) | Varies by city | File an official report; banks often require the file number |
| Canadian Centre for Cyber Security | cyber.gc.ca | Cybersecurity guidance and current alerts |
| Competition Bureau Canada | competitionbureau.gc.ca | Fraud and scam prevention information |
| Provincial seniors' safety / elder abuse line | Varies by province | Financial or psychological exploitation of a senior |
| NeedHelpNow.ca | needhelpnow.ca | Support if intimate images were shared without consent (sextortion) |
Comments (3)
This could have been written about my mother. We ran the reverse image search together like it says here and sure enough, stolen photos. Thanks for explaining how to bring it up without making her feel foolish.
The stage-by-stage table was eye opening. I was already in the "love bombing" phase without realizing it until I read this. Cut contact in time.
IT Cares checked my dad's laptop after he installed an app someone he met online suggested. They found active remote access we had no idea was there. Fast, and zero judgment about how it happened.
Leave a Comment