Fraud prevention series
Fraud in Canada: the conversation doesn’t stop in March
Fraud Prevention Month may be behind us, but the threat to payment businesses isn’t seasonal. Fraud evolves year-round — and so should your awareness of it. We’re continuing our series spotlighting the fraud trends most relevant to payment service providers, money services businesses, and the merchants we work with.
Pig butchering scams—also known as romance investment or “pig butchering” frauds—remain one of the most destructive forms of crypto crime. Scammers “fatten up” victims over weeks or months through fake romantic connections or friendly chats on social media, dating apps, or unsolicited texts, then steer them into fake investment platforms showing illusory gains before draining their funds.
The traditional money trail stops at legitimate crypto exchanges: victims buy crypto with fiat, transfer it to a scammer-controlled wallet, and the funds vanish into offshore addresses, mixers, or layered transactions. Recovery is rare due to jurisdictional barriers and obfuscation techniques. Global losses from pig butchering alone have topped tens of billions, with Chainalysis reporting a 40% year-over-year revenue jump for these scams in 2024 (part of at least $9.9 billion in total crypto scams that year).
Let’s flip the script productively: helicopter up and close the one-way loop. After cashing out (often via complex laundering networks), scammers reinvest proceeds into lead-generation infrastructure—paying for marketing services, AI tools, bulk social media profiles, and paid ads on major platforms to attract the next wave of victims. This creates a self-sustaining flywheel: victim funds → laundering → marketing reinvestment → new victims. Why chase only the dead-end crypto trails when the upstream demand side (ads and marketing) is more traceable, involves identifiable businesses or platforms with real-world footprints, and directly fuels the scam pipeline?
This article scrutinizes and builds on that idea with fresh data from blockchain analytics, regulatory reports, and platform disclosures. It offers actionable insights for crypto exchanges (onboarding and client education to spot ad-driven victims), law enforcement (shift investigative priority to ad sources and marketers), and general audiences (practical awareness to break the cycle). The core argument: rather than layering more rules on legitimate financial institutions, regulators and LE should prioritize the enablers who knowingly (or negligently) profit from scam lead gen.
The Full Scam Cycle: From Ads to Laundering—and Back Again
Lead Generation via Social Platforms and Marketing Services: Scams rarely start cold. Victims encounter sponsored posts, targeted ads, fake investment groups, or “accidental” DMs promising easy crypto gains, job opportunities, or romantic connections that pivot to trading. Platforms like Meta (Facebook/Instagram), TikTok, and others host these. Scammers buy seasoned profiles from fraud shops ($5–$20 each) and use paid services for social media management, mass texting, and data lists to scale outreach.
Trust-Building (“Fattening”): Conversation shifts to WhatsApp, Telegram, or encrypted apps. Scammers share fake portfolios or build emotional bonds.
The Transfer: Victims are guided to buy crypto on legitimate exchanges and send it to a controlled wallet or fake platform. Early “wins” encourage larger deposits.
Cashing Out and Reinvestment: Proceeds flow through consolidation wallets, informal networks (e.g., Huione Guarantee, processing billions in scam-related crypto), and laundering services. Critically, funds cycle back into scam infrastructure: AI tools for deepfakes/personas, data vendors for targets, and marketing services (including paid ads and profile buying).
Chainalysis documents clear cyclical flows—scam inflows spike shortly after payments to AI/software and social media vendors.
This isn’t speculation. Huione Guarantee (a Cambodian-linked marketplace) has facilitated hundreds of millions in scam tech purchases, including social media services explicitly tied to pig butchering operations. Scammers treat marketing as a core business expense—low-cost, high-ROI lead gen that keeps the pipeline full.
Scrutinizing Accountability: Why Marketing Services and Social Platforms Face Limited Heat
Marketing Services and Fraud Shops: These aren’t always traditional ad agencies; many operate as underground vendors selling profiles, management tools, and lead lists. They receive direct crypto payments from scammers and often have some KYC or banking ties in their jurisdictions. Unlike anonymous wallets, these entities leave paper trails (invoices, accounts, principals) that LE can pursue. Some reports highlight third-party marketers using real business IDs for ad campaigns. If they ignore red flags like “guaranteed returns” language or romance-to-investment pivots, they enable fraud at industrial scale.
Accountability is weak because enforcement focuses downstream on exchanges or victims. Resource limits and cross-border issues play a role, but the hypothesis holds: these services know their clients. Targeted actions (e.g., sanctions on key vendors or banking restrictions) could disrupt the reinvestment loop far more efficiently than chasing tumbled crypto.
Social Media Platforms: They pre-approve (or algorithmically greenlight) ads and profit handsomely. Internal Meta documents projected ~10% of 2024 revenue (~$16 billion) from scam and banned-goods ads, with 15 billion “higher risk” impressions daily generating $7 billion annualized. The company removed 159 million scam ads in 2025 alone but faces criticism for under-investment in detection, high revenue thresholds for bans (95% fraud likelihood), and penalty bidding that still monetizes suspicious advertisers.
Platforms lean on U.S. Section 230 immunity for third-party content, treating themselves as neutral hosts. Yet ads are paid content they actively distribute. The EU’s Digital Services Act demands faster action on illegal content. In the U.S., bipartisan proposals like the Safeguarding Consumers from Advertising Misconduct (SCAM) Act (introduced February 2026) would require “reasonable steps” to verify advertisers and prevent deceptive ads—shifting liability upstream with FTC/state AG enforcement.
Caveats to the hypothesis: Not every platform or vendor is complicit—volume is massive, scammers adapt quickly (proxies, AI), and over-regulation risks chilling legitimate ads or free speech. Blanket blame ignores sophisticated obfuscation. Still, when platforms see patterned clusters of high-return crypto/romance ads leading to mass complaints, and when marketers invoice known scam ops, “not my problem” rings hollow. Precedents like FTC actions against deceptive promoters and growing lawsuits against Meta show momentum for change.
Practical Recommendations
Actionable steps for exchanges, regulators, and the public to reduce fraud exposure and break the cycle.
For crypto exchanges
Onboarding and victim detection
The best time to protect a potential victim is before the transfer happens. A few targeted interventions can make a meaningful difference.
Smarter onboarding questions
Ask how clients first heard about the opportunity. Flag mentions of social media ads, dating apps, or unsolicited DMs recommending a specific wallet — these warrant enhanced due diligence.
Educational friction at transfer
Show plain-language pop-up warnings during large fiat-to-crypto conversions. A simple reminder about pig butchering scams can give a victim the pause they need — with a link to reporting tools.
Red-flag monitoring
Track rapid transfers following recent social contact or outflows to known scam wallets. Share anonymized ad-driven inflow data with regulators to support broader intelligence efforts.
Canadian compliance angle
Document ad-origin risks in your compliance program. This strengthens your STRs and demonstrates proactive risk management aligned with FINTRAC expectations.
For law enforcement and regulators
Refocus investigations upstream
Exchanges are the last visible stop in a chain that starts with a paid ad. Investigations should follow the money further back.
Follow the ad trail
Subpoena platform ad logs to identify clusters of similar crypto or romance campaigns. Trace payments from known scam wallets to marketing vendors and fraud infrastructure.
Target reinvestment nodes
Map reinvestment flows to AI and social media services. Collaborate internationally on vendors with real-world footprints using blockchain analytics.
Push for liability reform
Advocate for advertiser verification requirements. Knowing facilitation of scam ads should be treated as an unfair or deceptive practice under consumer protection law.
Expand task force intel
Add marketing intelligence to joint task forces alongside exchange reporting. Early intervention at the ad-payment stage beats post-laundering recovery every time.
For the general public
Spot it, report it, break the cycle
Anyone can be targeted. Knowing what to look for — and what to do — makes all the difference.
Don’t engage unsolicited pitches
Never respond to investment or romance approaches from social media, texts, or dating apps — especially if they arrive out of nowhere.
Trust your instincts
If it promises guaranteed returns or creates pressure to act fast, it’s a scam. Legitimate investments never require urgency or secrecy.
Report what you see
Flag suspicious ads to the platform and report to the Canadian Anti-Fraud Centre, the FTC, or IC3. Every report helps build the case for stronger enforcement.
Protect your exposure
Tighten your privacy settings, avoid clicking “investment opportunity” links, and demand that platforms take responsibility for the ads they serve.
