Catfishing - Fake Online Identities and Romance Scams
About 2 min read
Catfishing is the act of building a fictitious persona (a fake name, background, and someone else's photos) on social media or dating apps and deceiving a target by exploiting romantic feelings or trust. It is often used as the entry point for romance scams that defraud victims of money, and is classified as a form of social engineering. The name resembles phishing, which steals credentials by luring victims to fake sites, but catfishing is fundamentally different in that it fakes a human relationship itself rather than a system.
Where the Term Comes From
The term comes from the 2010 American documentary film "Catfish," in which producer Nev Schulman documented his own experience of discovering that the person he had met online was completely different from who they claimed to be. From 2012 it continued as the MTV series "Catfish: The TV Show," which investigates suspicious online romances. The term spread rapidly in 2013 when a star US college football player was widely reported to have been deceived by a fictitious girlfriend, and it entered the Merriam-Webster dictionary in 2014.
Tactics and the Scale of the Damage
The typical flow is staged: contact with an attractive profile, rapid intimacy through daily messages, an excuse for never meeting (overseas assignment, military service, a remote location), and finally, once trust is established, requests for money, investments, or sexual images. In the FBI Internet Crime Complaint Center (IC3) 2023 report, Confidence/Romance fraud drew 17,823 complaints in the year with losses of about 652 million dollars. In Japan as well, police authorities have repeatedly warned about the same type of scams starting on social media.
How It Differs from Phishing
| Aspect | Catfishing | Phishing |
|---|---|---|
| What is faked | A person (profile and relationship) | Sites and emails (systems) |
| What is targeted | Money, personal data, images (via trust) | Credentials such as passwords |
| Time frame | Weeks to years (a long game) | Minutes to days (a quick strike) |
| Main defense | Verifying the person exists and refusing money requests | Checking URLs and multi-factor authentication |
Warning Signs to Watch For
- Persistently avoiding video calls or meeting: changing excuses (a broken camera, poor signal, being busy) while refusing only to show their face is the biggest red flag
- Photos are unnaturally few or too polished: photos are often taken from someone else, and a reverse image search with a search engine is effective
- The relationship progresses abnormally fast: repeating "you are my destiny" or "I want to marry you" soon after meeting is a standard tactic to inflame emotions and impair judgment
- Requests for money, investments, or gift cards: whatever the reason, the moment an online-only contact asks for money you should suspect a scam
Concrete steps for verifying someone's profile are covered in the article on whether online friends are real, and how much a person can be identified from public social media information is explained in the article on social media OSINT risks.
Common Misconceptions
The belief that "only people with little romantic experience get fooled" is wrong. Catfishing attacks universal emotions such as loneliness, goodwill, and the desire for approval, so age, education, or high IT literacy is not a decisive defense. "There is no real harm as long as they never try to meet" is also a misconception: there are schemes that build trust over months without ever meeting and then induce transfers under the guise of investment, and schemes that reuse the personal information collected through the conversation for other fraud or account takeovers.
Real-World Use Cases
"A family member was about to send money to an 'engineer working overseas' they had met on social media, so I ran a reverse image search on the profile photo and found it was a stock photo of a completely different person. They were convinced this was 'a sincere person who messages me every day,' and I could not persuade them until I showed the photo evidence. It made me realize how important it is to verify early, before the emotions take hold."
Frequently Asked Questions
- What is catfishing?
- It is the act of impersonating a fictitious person (a fake name, background, and someone else's photos) on social media or dating apps and deceiving a target by exploiting romantic feelings or trust. The term comes from the 2010 American documentary film "Catfish," and the tactic is often used as the entry point for romance scams that defraud victims of money.
- What is the difference between catfishing and phishing?
- Phishing fakes a "system" (fake sites and emails) to steal credentials such as passwords in a short time. Catfishing fakes "a person and a relationship," building trust over weeks to years before defrauding the victim of money, personal information, or images. The defenses also differ: for phishing, checking URLs and multi-factor authentication; for catfishing, verifying the person exists and refusing requests for money.
- How can I spot catfishing?
- Watch for four signs: (1) persistently refusing video calls or meeting while changing excuses, (2) unnaturally few or too-polished photos (a reverse image search can sometimes confirm they are taken from elsewhere), (3) abnormally fast progression such as repeating "destiny" or "marriage" soon after meeting, and (4) requests for money, investments, or gift cards. Especially at the moment (4) appears, you should suspect a scam whatever the reason given.
Was this article helpful?