TRACE / BLOG / IS THIS PERSON A SCAMMER?

GUIDE · 10 SEPTEMBER 2026

IS THIS PERSON
A SCAMMER?

They started messaging a week ago. The photos are good, the conversation flows, the attention is intense. Now something has come up and money is needed. This guide gives you the checks to run before you send anything: twelve signs, three steps to verify the photo, and what to do in the first 24 hours if it is already too late.

Reverse face search results for a profile picture in the Trace panel: accounts found across different platforms, each with a similarity score

SHORT ANSWER

One signal proves nothing; three together settle it. The three strongest are: (1) the profile picture appears elsewhere under a different name, (2) they push to move the conversation to WhatsApp or Telegram quickly, and (3) money, crypto, gift cards or an "investment opportunity" come up. The third is sufficient on its own — if someone you have never met in person is asking for money, stop looking for other evidence.

Verifying the photo takes two minutes: search the image with Google Lens first, then the face with reverse face search. And read an empty result correctly: finding nothing is not innocence — a face with no public history, attached to someone describing a ten-year life, is a warning in itself.

THE SCALE OF THIS

Do not feel foolish for asking the question; the numbers are on your side. According to figures the US Federal Trade Commission published in April 2026, people reported losing $2.1 billion to scams that started on social media in 2025 alone — making social media the costliest fraud contact method that year, with nearly 30% of all reported losses starting there. In the same data, nearly 60% of people who reported losing money to a romance scam in 2025 said it began on a social media platform.

The pattern is old and industrialised. The person on the other side is very likely running a script that has worked hundreds of times before. Which leads to the most useful conclusion here: your suspicion is already the correct signal. The remaining work is turning it into a check you can run in two minutes.

12 SIGNS

The signs come in four groups with different weights: photos and money are heavy, story and behaviour are supporting evidence.

The photos

  • 1. Everything looks professional. Studio lighting, perfect framing, not one ordinary snapshot. A real person's gallery is messy; a stolen portfolio is not.
  • 2. There are very few photos — three or four — and the subject changes when you ask for more. Someone who only has what they downloaded cannot produce a new frame.
  • 3. The photos don't agree with each other. Different ages, different weights, sometimes a different-looking person. Or the opposite: all taken the same day in the same place.
  • 4. Something is off around the face. In generated faces the ears are asymmetric, one earring is missing, a glasses arm vanishes, hair blends into the background. Text and hands remain the weakest points of generated images.

The story

  • 5. The job requires being far away. Soldier deployed overseas, engineer on an oil platform, captain at sea, doctor across a border. These professions are not chosen at random; they are chosen as a reason not to video call.
  • 6. The life described doesn't match the life you can find. If someone with a fifteen-year career appears nowhere on the public web, one of the two is wrong.
  • 7. Details drift. City, age, number of siblings or employer change over two weeks. A memorised story stays consistent; an invented one drifts.

The behaviour

  • 8. They want to switch platforms immediately. "Messaging here is bad, let's continue on WhatsApp." The only real function of this is to escape the platform's fraud detection and its records.
  • 9. The emotional pace is abnormal. Becoming "the love of my life" within a week is not a sign of romance, it is a technique. Urgency is manufactured to suppress scrutiny.
  • 10. There is always a reason the video call can't happen. Bad internet, broken camera, busy at work, time difference. Once is an excuse; the fourth time is an answer.

The money — stop here

  • 11. Money, crypto or gift cards are requested. A parcel stuck in customs, a relative in hospital, a frozen account, a plane ticket. The reason changes every time; the pattern does not. A gift card or crypto request is conclusive on its own — both are chosen precisely because they are irreversible.
  • 12. A "profitable investment" comes up. The most common shape of romance fraud in 2026 is no longer asking for money directly; it is steering you onto a fake investment or crypto platform. The first small deposit shows a profit; when you try to withdraw, a "tax" or "commission" appears.

How to read it: one signal from the photo group plus one from the behaviour group = serious suspicion, run the verification. One signal from the money group = end the conversation. Three or more signals = you do not need to look for anything else.

THREE STEPS TO VERIFY THE PHOTO

A list of suspicions produces a judgement; verification produces evidence. It takes two minutes and the order matters.

Step 1 — search the image (free). Screenshot the profile picture, crop the face, and upload it to Google Images and Yandex. What you are looking for: does the same photo appear on a stock library, a model's portfolio, a news story, or another profile under a different name? If it does, you are finished — a stolen photo is the most common form of fake profile.

Step 2 — search the face. If image search came back empty, the real question remains: could this person have posted a different photo of themselves somewhere? Reverse face search compares the face rather than the file, so it can find the same human in a completely different frame. You are looking for one of two outcomes:

  • The same face on an account opened under a different name. This is the deciding finding.
  • The same face on an account consistent with what they told you. Not conclusive confirmation, but reassuring — check the account's age and posting history.

Read the score properly. In Trace every result carries a score from 70 to 100. 90–100 is where genuine matches live. 80–89 is strong but not sufficient alone; confirm with a second frame. 70–79 is mostly people who merely look alike. A score is never an identity.

Step 3 — test them live. Ask for an unannounced video call and request something specific: hand on cheek, three fingers up, say a particular word right now. This is the one step that eliminates both a stolen photo and a pre-recorded video at the same time. If it is refused, you have your answer.

WHAT AN EMPTY RESULT MEANS

This is the most commonly misread part. If a face search finds nothing, that is not proof of innocence. It has four possible meanings:

  • The person genuinely leaves no digital trace. Entirely plausible and common.
  • Their accounts are private. Photos on private profiles are not indexed anywhere.
  • The photo was generated. An AI-generated face has no history online. In 2026 a serious share of fake profiles no longer steal, they generate — because a generated face defeats reverse image search too.
  • The photo quality is insufficient. A small, dark, side-on or sunglasses-wearing frame does not carry enough information to measure.

The critical move: read the empty result against the story you were told. For a private, offline person, nothing found is normal. For someone describing a fifteen-year career, a company, travel and a wide circle of friends, nothing found is a contradiction — and a contradiction is the strongest single red flag there is.

THE FOUR MOST COMMON PLAYBOOKS

  • The soldier or engineer abroad. Distance explains the absent video call; "deployment" explains the urgency. The request usually arrives via shipping, customs or a leave ticket.
  • Impersonating someone you know. A new account using a relative's photo, opening with "my phone broke, I'm writing from this number". The fix is trivial: call the old number. Verifying by text does not work.
  • Fake investment or crypto. A relationship is built first, then you are steered onto a platform via "my uncle's firm" or "inside information". A small deposit shows a profit; withdrawal triggers a tax, commission or "account verification fee".
  • Sextortion. Intimacy is established fast, a video call is recorded, then the threats begin. The only correct move is not to pay and to report immediately — payment demands never end.

THREE THINGS NOT TO DO

  • Don't warn them. Saying "I looked you up" makes the account disappear along with the evidence. Collect the evidence first, then cut contact.
  • Don't try to identify them yourself. A face search result does not give you someone's address or identity, and it should not. Identification, evidence-gathering and prosecution are the job of law enforcement; your job is to protect yourself and report it.
  • Don't treat a score as proof. A 92-point match means "these two images resemble each other closely". It does not mean "this person is that person". The difference is both legally and ethically large.

IF YOU WERE SCAMMED: THE FIRST 24 HOURS

Order matters. Each step makes the next one possible.

  • 1. Stop the money. Call your bank immediately and ask them to recall the transfer. The first hours are decisive; once the funds are withdrawn, recovery odds fall fast. If you paid by card, file a chargeback.
  • 2. Preserve the evidence. Before deleting anything, screenshot the profile, the username, the entire conversation, phone numbers, account or wallet addresses, receipts and photos. The account is about to vanish; these records will be all you have.
  • 3. Report it. In the US, report to the FTC at reportfraud.ftc.gov and, if money was lost, to the FBI's IC3. Elsewhere, report to your national fraud reporting body and your local police.
  • 4. Report the account to the platform. Instagram, Facebook and every dating app have fake-account and fraud reporting flows. This will not return your money, but it protects the next person.
  • 5. Skip the shame. There are teams who do this professionally, with written scripts. Being deceived is about facing a prepared attack, not about intelligence. Not reporting only makes the same team's next job easier.

FAQ

How can I know for certain that a profile is fake?

There is no certainty, only accumulated signals. One red flag can be a misreading; three together change the picture. The three strongest are: the photo appears elsewhere under a different name, the conversation is pushed off-platform quickly, and money, crypto or gift cards come up. The third is sufficient on its own — if someone you have never met in person is asking for money, you do not need another sign.

If a face search finds nothing, does that mean the person is real?

No. An empty result tells you the face leaves no trace on the public web; it does not tell you the person is genuine. In two situations an empty result is itself a warning: when the photo was AI-generated, because a generated face has no history online, and when the person is describing a rich past. Someone with a ten-year career who leaves no public trace at all is telling you a story that does not match what can be found.

What photos do dating app scammers use?

The classic profile is professional-looking, studio-lit and short on photos. The most commonly stolen categories are soldiers, doctors, engineers, sailors and mid-sized social media creators. The reason is simple: these professions inspire trust and simultaneously supply a ready excuse for being far away, unable to video call, and suddenly in urgent need of money. In 2026 a third category joined them: faces that never existed, generated by AI.

What should I do first if I have been scammed?

Order matters. Stop the money first: call your bank and ask them to recall the transfer — the first hours are critical, and if you paid by card, file a chargeback. Then preserve evidence: screenshot the conversation, the profile, payment receipts and photos before anything is deleted. Then report it to your national fraud authority and the police, and report the account to the platform. Do not warn or confront the person: a warned account disappears along with the evidence.

Will they know I ran a face search on them?

No. The search runs over publicly accessible web pages; no notification is sent to the person, their profile is not touched, and no trace is left on any platform. In Trace you also do not need to create an account, and the photo you upload is deleted after 30 days or the moment you delete the scan.

I don't want my own face in an index like this.

You can leave Trace's index permanently: upload a single photo at remove my photos. Every matching entry is deleted and the face is added to a permanent do-not-index list. No account, no email, no ID — and the photo sent for the request is not stored.

SOURCES

  1. Federal Trade Commission — New FTC Data Show People Have Lost Billions to Social Media Scams, April 2026 (2025 data: $2.1 billion in reported losses from scams starting on social media; nearly 60% of romance scam loss reports began on a social platform; nearly 30% of all reported scam losses started on social media).
  2. Federal Trade Commission — reportfraud.ftc.gov, the official US fraud reporting channel.
  3. GDPR Article 9 and Türkiye's Law No. 6698 (KVKK) Article 6 — biometric data as a special category of personal data.

Responsible use. Trace is a verification tool. Only search photographs you have the right to search — your own, or with the subject's consent. Trace returns publicly available web results with a similarity score; it is not a background check, not an identification service, and results are not proof of identity. Face data is a special category of personal data under GDPR and KVKK; using it to identify, monitor or harass someone without consent is unlawful.

BEFORE YOU SEND ANYTHING

TWO MINUTES, ONE PHOTO.

A stolen profile picture usually surfaces on the first search. No account, no subscription, credits that never expire.