NFT Romance Scam: How a Dating Match Can Put Your Crypto Wallet at Risk

You meet someone on a dating site, and the conversation feels easy. Later, they offer to show you how they make money with NFTs.

They don’t ask you to send the money to them. They tell you to keep it in a wallet you control.

Overview

The money starts in the target’s own wallet

In the NFT romance scam described by federal investigators, someone met people online, gained their confidence, and pointed them toward websites that supposedly offered NFT investments.

An NFT is a digital token that can represent a collectible or another asset. Nothing about that label guarantees an income stream or makes a website trustworthy.

The pitch felt safer than sending money to someone from a dating app. Victims were encouraged to put crypto into wallets they controlled and link them to the investment site.

The distinction matters. Your money can start in your own wallet, yet still become exposed through an approval or transaction you don’t understand.

Investigators traced wallet activity, not just messages about profit

On October 27, 2026, the U.S. Department of Justice announced charges against six people in an investigation into a suspected operation in Madagascar.

Those charges are allegations, not convictions. A separate finding in the case is directly useful to anyone worried about their crypto: investigators traced transfers victims didn’t recognize.

In one account described in the FBI affidavit, a Maryland resident reported losing about $11,926 after being introduced to the supposed investment through WhatsApp.

That amount is one person’s reported loss, not a total for the case. The papers describe several sites and multiple reports, not one universal website or profile to block.

There are three records worth keeping apart

When the site says you’re making money, it can be tempting to focus on its dashboard. Start by separating what each record can actually tell you:

• The chat shows what the person promised, which site they recommended, and what they asked you to do.
• The investment dashboard shows what its operator chose to display. A gain there isn’t a transfer into your wallet.
• Your wallet history and the public transaction record show what assets actually moved. They don’t tell you whether the person in the chat was honest.

If those records don’t agree, pause the investment. You don’t need to prove who ran the site before you stop funding the wallet or signing requests.

How the NFT Romance Scam Works

Step 1: The conversation begins before the investment does

A match on a dating site is an invitation to talk, not a financial recommendation. That ordinary beginning gives the relationship time to feel separate from the money.

In the case described by prosecutors, people behind the accounts presented themselves as women interested in getting to know their targets. The financial opportunity came later.

A normal conversation can involve photos, daily routines, or family stories. None of those things verifies the source of an investment offer that turns up in the same chat.

You don’t have to solve the identity question first. You can keep your money out of the conversation even if you’re still deciding whether to trust the person.

Step 2: The contact offers to show you an investment

The idea may sound like a favor: they found a way to earn money and want you to try it too. Their confidence can make the jargon feel less intimidating.

In the affidavit, one resident thought they were buying an NFT and later tried what they understood to be NFT staking. The website was the contact’s recommendation.

Staking is sometimes used to describe locking an asset in exchange for potential rewards. A site using that term hasn’t proved that it runs a real program.

Before any financial step, stop and ask a question outside the conversation: would you have chosen this website if the person hadn’t sent it to you?

Step 3: Keeping the crypto in your wallet makes the offer feel safer

Many people know not to transfer money to a stranger. Moving crypto into your own wallet seems like it avoids that risk, which is exactly why the distinction matters.

The case describes people being asked to link their wallet to an unfamiliar site. The government says the fraudulent setup then allowed funds to be removed without their knowledge.

Simply connecting to a site doesn’t automatically give it permission to spend everything. Signing a request, allowing spending, and sharing a recovery phrase are different actions with different consequences.

If you can’t explain what the wallet prompt authorizes, don’t sign it. A contact calling it verification doesn’t change what the request can do.

Step 4: A small gain can make the next deposit seem reasonable

The affidavit says the Maryland resident saw an apparent $15 gain on one of the investment pages. A subsequent attempt to withdraw everything from the platform didn’t work.

That small number did useful work for the scheme. It made the site look as though it had done something with the investment, even without delivering real proceeds.

Investigators describe another funding step followed by an unauthorized transfer from the wallet. After a later deposit, money again moved to the same outside address, according to the affidavit.

If money leaves unexpectedly, don’t put more in to find out whether it happens again. Protect what’s left and document the first transfer.

Step 5: The discrepancy becomes visible in your wallet history

A missing withdrawal on the website and an outgoing transaction in your wallet are two separate warnings. Either one is a reason to stop sending funds.

If the dashboard continues to display a balance, it doesn’t cancel the transaction recorded by the network. Check which asset moved, where it went, and when.

Even a familiar chat contact can’t reverse the transfer by explaining it. Stop discussing the account with them and seek help through a wallet provider or exchange you know independently.

What to Check Before Connecting a Wallet

Don’t treat a convincing profile as a financial credential

A voice note or a photo can tell you somebody has access to a voice or an image. It doesn’t show they own a platform or manage an investment.

Even a live call wouldn’t establish the claims about returns. Keep the relationship question separate from whether there is an independently verifiable service behind the recommendation.

If the person says only they can walk you through the site, step away from the link. A genuine service doesn’t need a dating contact to explain your permissions.

Read the wallet prompt, not the page behind it

A page may say connect, verify, stake, or unlock. Check whether your wallet is actually asking you to approve spending or authorize something more than opening a session.

Don’t agree simply because a request doesn’t show a payment amount. Some permissions can matter later, when an app tries to act on the approval.

If someone asks to see your screen, don’t reveal a private key, recovery phrase, or backup. They never need those details to explain a website or check a return.

Know how to tell a screen balance from a real transfer

A number on an investment page isn’t proof that the assets it claims to show are there. Check for a completed transfer in your own wallet.

If you inspect a public blockchain record, you shouldn’t need to connect your wallet to the explorer just to read a transaction. Use an explorer you found independently.

Write down the chain as well as the amount. Identically named assets can appear on different networks, and a transaction on one network won’t appear on another.

Don’t send a test deposit because a promoter promises you can withdraw it immediately. Being allowed to withdraw a small amount wouldn’t establish that the rest is safe.

What Your Wallet Can Tell You After the Conversation

If you saw a prompt but didn’t approve it

Look at what actually happened in the app. Closing a prompt without approving it is different from signing a request and closing the website afterward.

If you’re unsure which happened, check the wallet’s recent activity and connected sites. Take note of anything you don’t recognize rather than returning to the promoter for clarification.

You can remove the site’s session from the wallet without opening the site again. Check separately for older approvals if you remember agreeing to a request.

If the dashboard looks normal but money has moved

Compare your wallet balance with the most recent incoming and outgoing records. The loss may be visible there even if the investment page still says everything is fine.

Pay attention to the asset that moved. The page may talk about an NFT even though what left the wallet was a stablecoin you deposited to fund the purchase.

If you bought crypto through an exchange before sending it to the wallet, save both records. The exchange receipt and the later transfer describe different parts of the incident.

If you helped a friend fund the wallet

Keep your own payment receipt and note whether your wallet interacted with the site. Sending someone money and approving a request from a suspicious app are different exposures.

Don’t move more money to help them reach a withdrawal threshold. If they want to verify what happened, offer to help gather receipts and reach official support.

If the person feels embarrassed, start with the facts that can still help: when the last transfer happened and which accounts or devices might still be exposed.

What to Do if You Have Fallen Victim to This Scam

1. Stop adding funds and stop signing requests from the site. If the promoter says another deposit unlocks your position, don’t treat it as a chance to fix things.

   Don’t let a timer on the website or a new account in the same chat dictate what you do. Use a route you opened yourself.

2. Preserve the chat and wallet history. Save the dating profile, messages, website name, transaction IDs, public addresses, chain, amounts, and times. Write down which requests you remember approving.

   Keep records of transfers you made separately from transactions you didn’t recognize. That gives an investigator a clearer timeline than a screenshot of the site’s balance alone.

3. Check approvals if you signed a request. Disconnect the suspicious site, then use trusted wallet tools to review and revoke any dangerous spending permissions that are still active.

   Ethereum’s permission guide explains the difference between disconnecting and revoking. Canceling an approval may limit further loss; it doesn’t return assets already transferred.

4. Treat a shared recovery phrase as a separate emergency. An exposed phrase can give someone control beyond any one approval. Changing a password won’t make the phrase private again.

   Use a safe device and official wallet support to plan how to protect remaining assets. Don’t send the phrase to anyone offering to inspect your wallet.

5. Contact an exchange if it handled a transfer. Open a fraud case through its official support channel. Provide the transaction IDs and ask what it can flag or preserve.

   A completed blockchain transfer usually can’t be reversed like a card charge. Report it promptly anyway; a service may be able to preserve records or act within its systems.

6. Report the accounts and the financial loss. Tell the dating and messaging services. US readers can follow the FBI’s reporting guidance for crypto scams.

   Share public transaction information and the investment pitch. Do not include your private key, wallet backup, or recovery phrase in a report or publicly posted screenshot.

7. Ignore people who promise a guaranteed recovery. The FBI warns about recovery offers that turn an earlier loss into another fee demand.

   Knowing the amount lost isn’t proof someone has recovered it. The original sender may know your story, and public transaction records can reveal information about the transfer.

Frequently Asked Questions

Can this scam work without someone asking me to send crypto directly?

Yes. In the reported case, people funded wallets they controlled and were guided toward investment sites. The risk arose from what happened after the funds were in place.

Does a wallet connection by itself give away my crypto?

Not ordinarily. Check what you signed, which permissions exist, and whether anything actually moved. If you shared a recovery phrase, the risk is broader.

How is this different from buying a token I can’t sell?

A blocked sale leaves you unable to exchange a token. Here the court papers describe assets leaving victims’ wallets. Check your history before deciding which problem you have.

Should I trust a dating contact who lets me withdraw a small amount?

No. A small payment only shows one transaction occurred. It doesn’t prove the service is safe or that you can recover a larger deposit.

Does the government case mean I’ll get my money back?

No. Charges and asset seizures aren’t automatic refunds. Preserve your records and use official reporting channels. Don’t pay anyone who claims they can put you on a recovery list.

What if I only chatted and never connected a wallet?

Stop engaging, preserve the conversation, and report the account. If you didn’t move money or share credentials, the chat alone doesn’t mean your wallet was compromised.

The Bottom Line

Don’t connect a funded wallet to an NFT investment site recommended by a dating contact. Keeping crypto in your own wallet doesn’t make every request from that site safe.

If the NFT romance scam has already reached your wallet, stop signing and depositing. Check the transaction history, review permissions, and report any unexplained transfers.