The Investment that Was Never Real: Gary’s Story
Approached through LinkedIn, scammers drew him into sophisticated crypto trading. By the time his wife intervened, they’d stolen more than $4 million.
Guest post from Jesse Ratner
Gary had every reason to believe he understood investing.
An engineer by training, he held a master’s degree in finance and had built a successful career in the supply-chain industry. His work had been featured in a Harvard Business School case study. He had managed investment portfolios for himself and, after his brother died, the family entrusted the college funds for a niece and nephew to him.
“I’ve been an excellent investor,” Gary said. “That’s why this is all so painful.”
In September 2024, a woman calling herself Caroline contacted him on LinkedIn. The approach did not seem unusual. Because of his professional experience, Gary regularly received messages from people seeking advice.
Caroline asked thoughtful questions about AI, finance, and investing. She said she was connected to a consortium of wealthy investors whose trading strategy relied on high-speed computers. She described an uncle with ties to the Luke Oil family and presented herself as someone with privileged access to financial opportunities unavailable to ordinary investors.
The conversation gradually became more personal. Caroline sent photographs of meals, vacations, and places she visited. She asked Gary about his wife, his children, and the life he hoped to provide for them. They eventually moved the conversation from LinkedIn to WhatsApp.
From Professional Contact to Trusted Crypto Teacher
For several months, Caroline didn’t ask Gary for money. By December, she’d positioned herself as a knowledgeable friend who wanted to help him improve his family’s future. She told Gary that she had been highly successful trading cryptocurrency. If he kept the opportunity private, she said, she would become his teacher.
Her appeal was carefully calibrated. She didn’t approach Gary as someone who needed financial rescue. She appealed to his identity as a capable investor, husband, and father.
“Don’t you want to improve the lives of your kids and your wife?” — Gary’s scammer
Caroline directed Gary to a platform called Triangle Digital, a polished and functional website, where he began investing small amounts in what Caroline described as AI arbitrage trading.
The strategy seemed to work. Balances rose. Transactions appeared to update instantly. Gary was even able to withdraw a small amount, reinforcing the impression that the platform and its profits were legitimate.
The initial success was essential to the scam.
Caroline gradually moved him into Bitcoin options trading. The reported profits increased, and she sometimes appeared to transfer her own money into his account so he could qualify for larger trades. Her contributions made the relationship feel reciprocal; they encouraged Gary to invest more.
On the screen, his balance eventually appeared to exceed $37 million. None of it was real.
“It just kills me when I see it out there, and I just can't get it, can't get it back.”
The Withdrawal Trap
By February 2025, Gary decided to withdraw his money. The platform’s customer service department told him he’d first need to pay a verification charge. He paid. Then they classified his account as high risk and required another $613,000 before releasing the funds.
This demand follows a common pattern in cryptocurrency investment fraud. A fake platform displays enormous profits but prevents withdrawals unless the victim pays taxes, verification costs, liquidity deposits, security fees, or other invented charges. Every payment leads to another demand.
When Gary balked, the scammers suggested he borrow against his home.
All this time, Caroline continued urging Gary forward. She advised him not to discuss the investment with his wife. Once the money was released, she said, the profits would be a wonderful surprise.
By then, Gary had depleted his retirement and taxable investment accounts, transferring the funds through Coinbase to cryptocurrency wallet addresses controlled by the scammers.
During roughly the same period, a second woman contacted Gary through LinkedIn. She claimed that her father had been an analyst at JPMorgan Chase and that she belonged to another investment group. She offered to help Gary recover from problems he was experiencing with the first platform. She directed him through Crypto.com to another site. Its web address changed repeatedly, but the account balance displayed eventually reached nearly $1 million.
That money was also fictitious.
“My wife wasn’t under the spell; I was.” — Gary, investment scam victim
The Person Who Finally Saw It Clearly
When the platform required yet another payment before he could access the money, Gary finally told his wife. As an IT auditor, she immediately recognized something was wrong.
“This can’t be right,” she told Gary.
The scammers had been conditioning him for months, but she hadn’t been part of that process. She could see the situation without the fabricated profits, emotional pressure, secrecy, and promises that had distorted his judgment.
“My wife wasn’t under the spell; I was,” Gary said. Without her intervention, he believes he would have continued sending money until almost nothing remained.
But by then, the scammers had stolen more than $4 million.
The loss changed the family’s plans almost overnight. Gary and his wife had planned to use their savings to support their daughters, to travel, and eventually to transfer wealth to their children. One daughter was considering returning to the United States from abroad; Gary had promised to help her relocate and possibly purchase a home.
The hardest conversation came on Mother’s Day, when Gary told one of his daughters what had happened. She was initially incredulous. In fact, Gary had warned her repeatedly to stay away from cryptocurrency.
“You of all people told me not to go near it,” she said. Then she understood that the money was gone, and she began to cry.
Reporting the Crime
Gary reported the scam through the FBI’s Internet Crime Complaint Center (IC3). He also contacted the Federal Trade Commission, the Securities and Exchange Commission, the state attorney general’s office, the US Secret Service, and the county Sheriff’s Office.
He provided transaction records, wallet addresses, phone numbers, screenshots, WhatsApp conversations, and details about the LinkedIn profiles used to contact him.
The sheriff’s office opened a case and said investigators were waiting for cryptocurrency tracing. But weeks, then months, passed without the urgent intervention Gary believed the scale of the theft required.
He received almost no meaningful response from federal agencies.
“This isn’t right,” Operation Shamrock founder Erin West told him. “You had millions of dollars stolen from you, and nobody called you.”
Gary also notified LinkedIn after finding several profiles that used the same woman’s photograph under different names. He believed the duplication should have been easy for the company to detect. Instead, the profiles and websites kept reappearing on the platform.
And in terms of moving money, Gary had transferred funds from his Charles Schwab accounts to Coinbase, and then to wallets connected to the fraudulent platforms. Schwab contacted him during the transfers, but Gary said the questions largely focused on whether he had authorized the transactions and whether the money was going where he intended. He used the responses that scammers had coached him to use.
Eventually, Gary retained an attorney to examine whether Coinbase or other financial institutions failed to conduct sufficient due diligence.
Recovery Scams Begin
After the original scam, Gary was contacted repeatedly by people claiming they could recover the stolen cryptocurrency. Some claimed connections to Coinbase or Crypto.com.
Another presented himself as associated with Blackstone. He showed Gary what appeared to be tracing data and sent him an alleged Blackstone contract containing a D-U-N-S number. But the number was fake. The man communicated through WhatsApp, would not clearly explain whether he represented Blackstone, and demanded an extraordinary hourly fee — $82K per hour — for recovery work.
“He wanted $82,000 an hour to do recovery!” — Gary, investment scam victim
Other supposed recovery agents told Gary that his cryptocurrency was still visible on the blockchain and could be returned — if he paid them in advance.
The fake trading accounts supported the illusion. Months after the theft, Gary could still log in and see enormous balances. One platform showed nearly $1 million; another showed tens of millions.
In fact, the numbers were designed to trick Gary into believing he could recover his losses. Operation Shamrock warned Gary that anyone contacting him online and promising recovery for a fee should be treated as another potential scammer. In most cases, only law enforcement acting quickly enough to trace and freeze funds has a realistic chance of recovering cryptocurrency.
The recovery offers were simply another attempt to further monetize Gary’s loss.
Rebuilding Trust at Home
Today, Gary is working to stabilize his family’s finances, resolve the tax consequences of the money he withdrew, and repair the trust damaged by the secrecy of the scam.
He meditates. He volunteers with organizations serving people experiencing hunger. He participates in a survivor support group. He is trying, he said, not to wallow in what happened. But the effects extend beyond money. Gary fears that his marriage might not survive the loss. Although his wife has stayed, rebuilding their relationship will take time.
“We’re not where we need to be,” he said. “It’s going to take a long time to get the trust back.”
He continues to struggle with self-blame. He remembers the warning signs he missed, the searches he did not perform, and the conversations he should have had with his wife.
Operation Shamrock’s team urged him to consider the scam differently. He hadn’t been defeated by a single persuasive stranger. He’d been selected and manipulated by a coordinated criminal operation using social engineering, stolen identities, professional-looking websites, fake customer service representatives, fabricated account balances, and carefully timed financial pressure.
“I wish I could do more to fight back. I’m angry.”
Seeking Accountability
Today, Gary wants accountability from the social media platforms, financial institutions, technology providers, and government agencies that encountered pieces of the crime but failed to stop it.
He also wants people to understand that education and professional success don’t make anyone immune to manipulation. “I’ve had a sterling career,” he said. “I have a master’s degree. I’ve been a successful investor.”
The scammers used his strengths against him. They made the investment appear sophisticated enough to deserve his attention. They offered access, exclusivity, and expertise. Then they isolated him from the person most likely to challenge the scheme. And it worked.
“I don’t want anybody else to experience what I went through.”
At Operation Shamrock, our mission is to educate the public, mobilize collective action, and disrupt the operational networks of transnational organized criminals to prevent further harm.
Do you have a survivor story? Connect with our team to share your experience.
Jesse Ratner is a writer from San Francisco whose daughter was a recent victim of a bank scam. His novel, The Origins of Anxiety, is available on Kindle.
Related Stories from Our Blog
