A Hong Kong insurance agent in her 50s lost approximately HK$26 million, or $3.3 million, after a man posing as a romantic partner persuaded her to deposit money through a fraudulent cryptocurrency investment application.
The case, reported by The Block on August 3 based on information released by Hong Kong police, was the largest of 25 online romance scams reported in the city between July 24 and July 30. Those cases generated combined losses of approximately HK$70 million, or $8.9 million.
The woman was introduced last year to a man through someone presented as a prospective insurance client. The man called himself “Uncle,” claimed to work in the automotive industry and gradually developed an online romantic relationship with her.
He later described himself as an experienced cryptocurrency investor and encouraged the woman to use an investment application that he recommended.
Fake Crypto App Showed Returns Above 800%
The victim reportedly handed HK$4 million, or approximately $510,000, in cash to people connected to the scheme over a period of roughly six months. She also transferred another HK$22 million, or about $2.8 million, into bank accounts opened under other names.
The application displayed investment returns of more than 800%, creating the appearance that the cryptocurrency strategy had generated substantial profits.
Those gains did not represent actual trading activity. The application functioned as a controlled interface through which the scammers could determine the balance and returns shown to the victim.
When the woman attempted to withdraw her funds, the request was rejected. The man and the other people involved then stopped communicating with her.
The sequence follows a common form of cryptocurrency investment fraud in which criminals first establish a personal relationship, introduce an investment opportunity and direct the victim toward a trading platform controlled by the fraud group.
The Investment Account Never Existed
Fake investment applications give fraudsters an advantage because the victim believes the money remains inside an identifiable financial account. In reality, funds transferred to personal bank accounts, cryptocurrency wallets or cash collectors leave the victim’s control immediately.
The numbers displayed inside the application can be changed without any corresponding transaction taking place in a legitimate market.
Scammers may initially permit a small withdrawal to establish credibility. Once the victim is convinced that the platform works, the fraudster encourages larger deposits, borrowing or the liquidation of existing investments.
The FBI describes the same process in its guidance on cryptocurrency investment fraud. Victims are contacted through social media, text messages, dating platforms or apparently accidental messages before being introduced to a false investment opportunity.
The use of cash collectors and multiple third-party bank accounts in the Hong Kong case also indicates that the scheme extended beyond one person operating an online identity. These payment routes allow organized groups to divide responsibilities among relationship handlers, account holders, cash couriers and money-laundering participants.
Why Financial Professionals Still Fall Victim
The victim’s work as an insurance agent illustrates that professional exposure to financial products does not eliminate vulnerability to relationship-based fraud.
The investment proposal is introduced only after the fraudster has established trust. By that stage, the victim may evaluate the opportunity as advice from a romantic partner rather than as an unsolicited financial promotion.
Fraud groups also separate the emotional and financial elements of the scheme. One participant may manage the relationship while others operate the platform, receive the funds or pose as customer-service representatives.
This structure creates the impression of a functioning business with different departments and payment procedures. It also allows the person maintaining the romantic relationship to distance himself from withdrawal delays by blaming the platform, compliance checks or other employees.
Hong Kong police warn that a new online acquaintance who begins promoting investments should be treated as a significant fraud indicator. The force has previously reported cases in which victims downloaded fake applications and transferred cryptocurrency, gold investments or cash after developing an online relationship with a person claiming to possess investment expertise.
Hong Kong Investment Scam Losses Are Rising
The HK$26 million case comes as Hong Kong authorities report increasing losses from investment scams.
Investment fraud in the city generated losses of approximately HK$920 million during the first three months of 2026, an increase of 17% from the same period a year earlier. In June, police arrested 69 people suspected of helping a cross-border syndicate launder approximately HK$200 million through mule bank accounts.
Older victims have also become a larger part of the problem. Hong Kong police recorded more than 9,400 scam reports during the first quarter of 2026. The number of victims aged over 60 increased from 952 to 1,264, with combined losses of HK$530 million.
One 67-year-old victim lost HK$84 million after entering an online relationship with a person claiming to be an investment expert and transferring cryptocurrency to wallets specified by the scammer.
276 Arrested in International Crypto Scam Crackdown
The schemes are increasingly linked to organized transnational operations rather than individual fraudsters.
On April 29, the US Department of Justice announced that cooperation among the FBI, Dubai Police, the Chinese Ministry of Public Security and the Royal Thai Police had led to at least 276 arrests and the dismantling of at least nine centers used for cryptocurrency investment fraud.
Dubai authorities arrested 275 people, while another suspect was detained in Thailand. US prosecutors also unsealed wire fraud and money laundering charges against alleged managers and recruiters connected to three scam organizations.
According to the DOJ, the groups built relationships with victims before directing them to fraudulent cryptocurrency platforms. Victims were shown apparent profits and encouraged to invest additional money, borrow from relatives or take out loans.
The FBI’s Operation Level Up has separately identified and contacted almost 9,000 potential victims since 2024. By April 2026, the initiative was estimated to have prevented approximately $562 million in additional losses.
Crypto-Related Complaints Cost Victims More Than $11 Billion
The FBI’s 2025 Internet Crime Report recorded more than one million complaints and almost $21 billion in reported losses from internet crime.
Complaints involving cryptocurrency produced the highest losses. The Internet Crime Complaint Center received 181,565 cryptocurrency-related complaints involving more than $11 billion.
Investment fraud was the principal driver, accounting for almost half of losses attributed to cyber-enabled scams. People over 60 reported approximately $7.7 billion in losses, about 37% of all reported losses and up from $4.9 billion in 2024.
The scale of the losses explains why law enforcement agencies increasingly treat cryptocurrency investment fraud as an organized-crime and money-laundering problem rather than solely as a consumer-education issue.
Hong Kong Orders Brokers to Move Away From OTPs
The case is separate from account-hacking incidents at licensed financial platforms, but it emerged as Hong Kong’s Securities and Futures Commission introduced stronger authentication requirements for online brokers and licensed virtual asset trading platforms.
In a July 9 circular, the SFC said email and SMS one-time passwords were not resistant to phishing and should no longer be used for client logins or device registration.
The regulator identified passkeys and securely bound devices as acceptable alternatives. Firms must also monitor suspicious logins, trades and withdrawals, notify customers of activity involving new devices and respond quickly when unauthorized activity is detected.
Large brokers and virtual asset platforms are expected to implement the stronger controls immediately. Other covered firms have until July 8, 2027.
Those measures are aimed primarily at account takeovers in which criminals intercept login credentials and OTPs through fake websites. They would not, by themselves, have prevented the HK$26 million romance scam because the victim knowingly authorized the payments.
That distinction is central to the challenge facing banks, brokers and cryptocurrency platforms. Authentication controls can stop a criminal from accessing an account without permission. They are less effective when a victim has been manipulated into approving the transaction personally.
The 800% Return Was the Clearest Warning
The promise of an 800% return should have made the platform’s legitimacy subject to immediate verification, but the relationship element of the fraud was designed to suppress that skepticism.
Other warning signs included instructions to hand cash to third parties, transfers to accounts held under unrelated names, use of an application recommended by an online acquaintance and the absence of an independently verifiable licensed provider.
The victim was not investing through a poorly performing cryptocurrency platform. There was no investment to recover and no 800% profit to withdraw. The application existed to document a fictional balance while real money moved through cash collectors and third-party accounts controlled by the fraud network.