A fellow scam victim introduced George to someone who could recover his money. Then he learned that the help was all part of another scam.
George had good news when he joined the call with Operation Shamrock. He said the timing was fantastic. Something had happened the day before that might explain what happened to his money.
He had been working with a man named Richard, who claimed he could recover stolen cryptocurrency. Richard said he’d located millions of George’s lost money. George had even received a nearly $700,000 deposit into his crypto wallet. The money, however, had mysteriously disappeared. Still, George thought he might finally be getting somewhere.
Erin West stopped him and said, “I think Richard is a scammer.”
George pushed back. He had seen the money in his wallet. A woman from an online investment class had recommended Richard. She said he had recovered $2 million for her after she’d been scammed.
As the conversation continued, George began confronting a possibility he had not expected: Richard and his classmate might be part of the same kind of operation that had taken his money in the first place.
An Investment that Looked Familiar
George had been trading cryptocurrency for years. He remembered buying Bitcoin when it cost about $3,200. He had made money buying and selling other cryptocurrencies. He believed the investments could produce real returns.
Later, he encountered discussions about mining pools in an online crypto community. Other participants mentioned them, and he decided to try one.
At first, everything appeared to work. He created an account, his balance grew, and the profits soon looked substantial. Eventually, George’s wallet balance showed $15 million. The next day, however, it was gone.
He was led to believe his investments had generated $15 million. The apparent gains sustained his belief that there was still money to retrieve.
A Classroom Built to Earn Trust
The mining pool experience eroded George’s trust. But not enough to stop him from investing. An online cryptocurrency course seemed to offer a different way in. The WhatsApp group had roughly 50 participants, people presenting as professors and daily lessons explaining the news and its effect on the market.
The lessons arrived as text accompanied by market images. They looked prepared and professional. George had been to college; he recognized the appearance of a structured class.
The class lessons analyzed the daily news and its impact on the market. The instructors sounded knowledgeable. — George, Crypto Scam Survivor
The course let him participate without risking his own money right away. Students were offered $500 to use for initial trades. They could keep the profits as long as they returned the original amount. Later, the trading platform offered him a $300,000 “loan” he could use to trade without risking more of his own money. On the screen, the trades appeared to generate millions.
Then came the demand for repayment.
George asked why he couldn’t deduct the loan from his profits. They said repayment had to come from outside funds.
The instructors stepped in, offering to cover most of the loan and leaving George responsible for $30,000. He refused to pay. But he still believed he had $15 million in the account.
The Classmate with a Similar Story
Soon after, a classmate named Jeanne contacted George through WhatsApp. She asked whether he had lost money. She said she had lost $2 million and was facing bankruptcy.
Jeanne’s story sounded familiar. George understood what it meant to be trapped in an investment he couldn’t withdraw from.
They stayed in contact. Later, she returned with what sounded like good news. Her father and an attorney had found someone who could recover the money: Richard. Even better, Richard had already recovered $2 million for her.
Erin recognized a pattern. Jeanne’s referral included several layers of apparent reassurance:
She had been in the same class.
She had experienced a very similar loss.
A family connection and an attorney supported the recommendation.
She claimed the recovery had already worked.
George contacted Richard via WhatsApp and provided cryptocurrency addresses linked to his losses. Richard told him he had located approximately $14 million.
The Operation Shamrock team explained to George that Jeanne’s story was likely another part of the original fraud. By posing as a fellow victim, she used a shared experience to establish trust, then direct him toward a supposed recovery specialist.
Shocked, George began to realize that the scammers were repeatedly re-victimizing him with a series of related scams.
You think my classmate is also a scammer? — George, Crypto Scam Survivor
A Recovery that Raised More Questions
The supposed recovery became more complicated when Richard told George he had deposited nearly $700,000 into his wallet. George found a record of the deposit — and its removal.
Richard accused George of withdrawing it.
To George, the apparent deposit supported the recovery claim. He didn’t suspect Richard. He wondered whether something tied to the original scheme had allowed the earlier scammers to take the money.
In all, George lost about $500,000 of his own money. He felt he’d lost close to $15 million, based on supposed investment gains that never materialized.
When he spoke with our team, George said he hadn’t paid Richard. The team warned that Richard’s blaming him for the missing deposit was likely a scheme to demand money from him.
Even the apparent recovery could create another obligation, another problem to solve, another reason to stay in contact.
The Complexity Seems to Confirm the Story
One element that made it seem realistic was how many people seemed involved: instructors, assistants, classmates, Jeanne, and Richard. Each new contact gave George another reason to keep believing.
Each seemed to support part of what the others had told him. The Shamrock team explained that scammers often coordinate or manufacture the players in the ruse. An active group chat didn’t mean there was really a classroom full of independent investors.
They gave you so many reasons to believe. They corroborated the story in so many different ways. — Erin West, Operation Shamrock
George had heard of pig-butchering investment scams, but he didn’t initially see his experience matching that description. He had found the mining-pool discussions himself. He had joined what looked like an educational program.
His experience shows why descriptions of fraud need to include more of the situations people may encounter: an investment discussion group, a convincing and helpful instructor, or a fellow victim with a recovery recommendation.
To someone inside the scheme, each element can look like a reason to trust.
Something Beyond the Scam
Near the end of the conversation, George described another part of his life. He plays guitar. He writes songs. He calls himself a Jersey boy.Erin encouraged him to spend time on his music. George suggested that his next song might be called “The Crypto Blues.”
His story shows how the promise of recovering money can keep a survivor connected to people who may cause further harm. A victim who recognizes the original scam can still be persuaded by someone claiming they, too, understand it and can investigate or undo it.
George joined the call believing he had good news about a recovery. By the end, the team was helping him recognize why he couldn’t trust the people promising that recovery.
Jesse Ratner is a writer from San Francisco whose daughter was a recent victim of a bank scam.
At Operation Shamrock, our mission is to educate the public, mobilize collective action, and disrupt the operational networks of transnational organized criminals to prevent further harm.
Have you experienced a scam? Connect with the Operation Shamrock team to share your story and learn about resources for survivors.
Related Stories from Our Blog
