NEW // SOCIAL ENGINEERING SIMULATION

PLENTY
OF PHISH

THE SWIPE-STAKE

Eight profiles. Real warning signs. One question: are you matching a genuine person, a romance scammer, or an AI-generated trap?

08 PROFILES03 HEARTS01 TRUST METER
START THE SAFETY CHECK ↓
LIVE SAFETY SIMULATIONREADY
♥♥♥
TOO PARANOIDTRUST COEFFICIENT 50%TOO TRUSTING
DirtyPhish, the untrustworthy matchmakerDIRTYPHISH PRESENTS

PLENTY
OF PHISH

Match genuine people. Block romance scammers. Keep your judgement balanced - or get hacked, heartbroken, or left alone in the server room.

FICTIONAL PROFILES // REAL SAFETY SIGNALS
£116MUK ROMANCE-FRAUD LOSSES REPORTED
APR 2025 to MAR 2026
12,348UK REPORTS IN THE SAME PERIOD
$1.14BFTC ROMANCE-SCAM LOSSES
REPORTED FOR 2023

Reported losses are not the whole harm: romance fraud also exploits trust, privacy and emotional wellbeing. View official sources ↓

HOW TO PLAY

Swipe on behaviour.
Not just a face.

The game rewards balanced judgement. Matching everyone pushes the meter towards “too trusting.” Blocking everyone pushes it towards “too paranoid.” Strong decisions use evidence.

01

Read the whole profile

Check the biography, pace, claims, proposed communication method and any request - not just the photograph.

02

Block or match

Swipe left to block a suspicious profile. Swipe right when the behaviour looks reasonable enough to continue carefully.

03

Survive the DM

A matched scammer sends a simulated link or payment request. Verify independently or lose a heart by following the bait.

ROMANCE SCAM FIELD GUIDE

Six patterns hiding behind a polished profile.

A fake profile is only the wrapper. The clearest signals often appear in the story, pressure and payment method that follow.

01 // INVESTMENT

Crypto-romance grooming

A new contact slowly introduces a supposedly exclusive trading opportunity. The website may show fake profits, but withdrawals fail or trigger demands for tax and release fees.

02 // EMERGENCY

The stranded professional

A contractor, doctor, engineer, soldier or traveller claims they cannot access money. The first request may be deliberately small before the story escalates.

03 // IDENTITY

AI clone or stolen face

Generative AI can create convincing images and messages, while stolen photographs can support a long-running persona. A realistic face is not identity proof.

04 // SUBSCRIPTION

Fake safety verification

A match sends a “free” verification link requiring card or personal data. The site may create hidden subscription charges or collect information for identity fraud.

05 // ISOLATION

Move off-platform now

Pressure to switch immediately to encrypted messaging can remove platform safety controls and make the account harder to report after the fraudster disappears.

06 // EMOTION

Love, secrecy and urgency

Fast intimacy, private crises and countdowns narrow the time available to think. A healthy connection can tolerate questions, boundaries and independent checking.

LONG-TERM INVESTMENT FRAUD

What “pig butchering” means.

The term describes a confidence scam in which criminals spend days, weeks or months building trust before steering a victim towards a fraudulent investment. The relationship may begin on a dating app, social network, professional platform or through an unexpected message.

Early deposits may appear profitable inside a fake website or app. The display is controlled by the criminal; it is not evidence of a real investment. When the victim tries to withdraw, the platform may demand more deposits, taxes or fees.

  1. 01CONTACTAn attractive profile or accidental message starts a conversation.
  2. 02GROOMFrequent attention and shared stories create emotional trust.
  3. 03INVESTA secret platform shows invented returns and encourages more deposits.
  4. 04TRAPWithdrawals fail, extra fees appear and the contact disappears.
BEFORE YOU TRUST

A five-minute dating-profile safety check.

1

Stay on the service initially

Use built-in messaging while you establish basic consistency. Report pressure, impersonation or suspicious links through the platform.

2

Verify through another route

Use a live call and information you found independently. Never rely entirely on links, documents or contact details supplied by the person being checked.

3

Never mix romance and investing

Do not send cryptocurrency, wire transfers, gift cards or investment deposits because an online romantic contact promises returns.

4

Protect personal material

Avoid sharing identity documents, banking information, authentication codes or intimate content that could enable fraud, takeover or extortion.

2024 to 2026 REALITY CHECK

Why this game exists.

£116 million

The UK National Crime Agency reported that 12,348 romance-fraud reports covering April 2025 to March 2026 involved £116 million in losses - more than £13,000 every hour.

National Crime Agency source ↗
$1.14 billion

The US Federal Trade Commission reported 64,003 romance-scam reports for 2023, totalling $1.14 billion with a median reported loss of $2,000.

Federal Trade Commission source ↗
Fake verification

In April 2024, the FBI warned that dating-site users were being directed to “free” verification services that collected personal and card data or caused recurring subscription charges.

FBI IC3 warning ↗

Figures describe reports received by the cited organisations and may not capture unreported fraud. Game profiles, names and conversations are fictional composites created for education.

PEOPLE ALSO ASK

Romance scam questions.

What is a romance scam?+

A romance scam is fraud built around a false emotional or romantic relationship. The scammer gains trust, avoids reliable verification and eventually asks for money, investments, gift cards, cryptocurrency, personal information or access to an account.

How can I spot a fake dating profile?+

Look beyond the photograph. Warning signs include instant declarations of love, repeated reasons they cannot meet or video call, pressure to leave the dating platform, inconsistent details, copied language, emergency money requests, secret investments and external verification links.

What is a pig-butchering scam?+

It is a long-term confidence and investment fraud. A criminal slowly builds trust - sometimes through romance - then introduces a fake cryptocurrency or investment platform showing invented profits. Deposits escalate and withdrawals are blocked or tied to more fees.

Can a verified or realistic-looking profile still be fraudulent?+

Yes. Photos, documents, social accounts, video and voice can be stolen, staged or generated. Verification badges vary by service and should never replace independent judgement. Behaviour, pressure and financial requests matter more than polish.

Why should I avoid dating verification links sent in chat?+

The FBI has warned that fake verification sites may collect card and identity data or enrol victims in expensive subscriptions. Reach safety features independently through the dating service or a trusted official website instead of using a stranger’s link.

What should I do if an online romantic interest asks for money?+

Stop before paying. Speak to someone you trust, verify the story using contact information you found independently, preserve messages and payment details, report the profile to the platform and report fraud to the relevant national authority.

Does reverse-image searching prove a profile is genuine?+

No. It may expose a stolen photograph, but finding no match does not prove authenticity. New, private or AI-generated images may not appear in search results. Treat it as one check among several.

Is Plenty of Phish connected to a dating company?+

No. Plenty of Phish is an independent DirtyPhish educational parody and cybersecurity awareness game. It is not affiliated with, endorsed by or operated by any dating platform.