Classic email fraud asked for money bluntly. Modern document fraud asks for process: KYC, compliance, soft offers, blocked funds, “bank readiness,” and message traffic that looks institutional.
Scam Wire’s desk repeatedly sees the same architecture: a large notional number, a dense PDF pack, a middleman with access claims, and a fee that is small relative to the fantasy — large relative to your cash.
Building blocks of the illusion
- Shell companies and letterheads that mimic real banks
- Forged or template SWIFT / MT language
- “Lawyers” and notaries who only exist inside the PDF pack
- Slide decks and term sheets with impossible timelines
- Pressure to skip independent bank confirmation
What actually gets stolen
Rarely the fantasy principal. Usually: advance fees, “tax” prepayments, crypto “collateral,” passport packs sold onward, and months of attention that prevent you from walking away.
Related: CF-001, CF-002, CF-006.
Standards: Scam Wire publishes document patterns and public red flags. We do not invent convictions. Names appear as they surface in tips and document trails. Independent verification always comes first.
Tips: tip desk · Archive: case files.