1. Home
  2. Scam Check
  3. Lesson 2: Common Schemes
Essential20-25 minLesson 2Scam Check

Common Scam Schemes — How the Money Actually Moves

Six recurring schemes (Ponzi · mentor fraud · signal inflation · PAMM pyramid · pump-and-dump · recovery scam) — with real cases from CFTC / SEC / FBI files and the one test that catches each one.

Last reviewed: 2026-05-20

Choose your reading depth — content adapts, URL stays the same.
This course is being reworked. The lesson below is the v1 draft; we're rewriting Scam Check with a friendlier, less alarmist voice. New version coming soon.
Quick answer
Six structures account for the overwhelming majority of retail trading fraud: Ponzi/HYIP (paying old depositors with new deposits), mentor/guru fraud (lifestyle + affiliate course funnels), signal-service inflation (cherry-picked screenshots, no public tracker), PAMM/copy-trade pyramids (returns tied to recruitment, not trading), crypto pump-and-dump (coordinated buys + dumps on retail), and the meta-scam of recovery fraud (preying on prior victims with up-front fees). Each has a single diagnostic test.
TL;DR — 60 sec

6 schemes · 60-sec test for each

  • Ponzi/HYIP — "fixed % per day/week" → walk away.
  • Mentor fraud — no read-only Myfxbook? Selling courses, not trading.
  • Signal inflation — VIP channel + no third-party tracker = cherry-picked.
  • PAMM pyramid — returns from referrals, not the master's PnL.
  • Pump-and-dump — top-10 wallets hold > 50 %? Hype is the exit.
  • Recovery scam — "we'll get your money back, pay now" → never.
Universal counter: independent read-only tracker + Tier-1 regulator + clean separation of trading vs recruitment economics.
Standard lesson body

The 6 scheme families, with real cases

Every scheme below has been prosecuted at least once by a Tier-1 regulator (CFTC, SEC, FCA, BaFin, FBI). The pattern recurs because it works on the same psychological loop: visible early winners → social proof → new deposits → fake balance → eventual collapse.

1Ponzi / HYIP — paying old depositors with new deposits

A 'high-yield investment program' that promises fixed daily/weekly returns and pays early users from later users' deposits — there is no underlying trading.

Real case
Mirror Trading International — $1.7 B Ponzi (CFTC, 2020)

MTI claimed an AI bot generated 10 %+ monthly returns on Bitcoin futures. CFTC investigation found no real trading; the operator (Cornelius Steynberg) used new deposits to pay earlier 'returns' until inflows dried up. Steynberg later convicted on $1.7 B fraud.

Source
How the money moves

Operator advertises a fixed return, takes deposits, posts fake 'profits' in a dashboard. As long as new deposits exceed withdrawals, the dashboard balances. When inflow stops, the scheme collapses overnight.

Defence — the test

Test: ask for an independently audited proof of the underlying trading (broker statements, third-party tracker). Real strategies have variable returns. A flat % is the diagnostic.

2Trading mentor / guru fraud

An influencer flexes a luxury lifestyle, claims a six- or seven-figure year, and sells a course/community that teaches almost nothing actionable.

Real case
The Tate brothers — 'Hustlers University' / 'The Real World' (multiple jurisdictions)

Built on TikTok/YouTube reels of cars and watches with no verifiable broker statements. The 'university' is a Discord-style affiliate program: students earn commission for recruiting more students. Multiple regulators (FCA UK 2022, Romania investigation) issued warnings.

How the money moves

Revenue ≠ trading; revenue = course subscriptions + recruitment commissions. The 'mentor' rarely shows a verified live track. Lifestyle imagery is rented or borrowed.

Defence — the test

Test: demand a verified, real-money, multi-year track record (Myfxbook / FX Blue with read-only API access, NOT a screenshot). If they refuse, they are selling courses, not trading.

3Signal service inflation

A 'VIP signals' Telegram channel posts +X pips screenshots, hides losses, deletes bad calls, and sells a monthly subscription on the survival-bias picture.

Real case
Pattern across ~80 % of paid Telegram signal groups (FCA + ESMA warnings, 2019-2024)

ESMA and FCA repeatedly warn that signal services advertising fixed win rates (>80 %) and high pip totals are mostly cherry-picked. The decisive marker: refusal to publish trades to an independent tracker with read-only API access.

How the money moves

Channel posts setups in real time. Wins are screenshotted, posted again, and pinned. Losses get deleted or quietly closed; messages are edited or removed. Subscriber sees a survival-bias feed.

Defence — the test

Test: require a public, read-only third-party PnL feed (Myfxbook, FX Blue, our own AI Signals public API). No tracker = no proof.

4PAMM / copy-trade pyramid

A 'managed account' service that lets you join a 'master trader' — but the structure is recruitment-driven, not trading-driven.

Real case
Forsage 'smart-contract' MLM — SEC charge, 2022

Forsage marketed itself as a decentralised investment platform; the SEC found it was a Ponzi/pyramid where 'returns' were just new participants' deposits routed through smart contracts. ~$300 M lost.

Source
How the money moves

Returns to existing 'investors' depend on recruiting new participants below them. The trading layer is either nonexistent or trivial; the real cash flow is the affiliate tree.

Defence — the test

Test: separate the trading economics from the affiliate economics. If your expected return depends on referrals (not on the trader's PnL), it is a pyramid.

5Crypto pump-and-dump

Coordinated buying of a low-liquidity altcoin to spike the price, then dumping onto retail buyers who saw the move on social media.

Real case
SafeMoon — SEC charge, 2023

SafeMoon's founders and developers were charged with defrauding investors of $200 M through a classic pump-and-dump. They unlocked liquidity pools (which they had promised would stay locked) and cashed out.

Source
How the money moves

Insiders accumulate cheaply, orchestrate hype (paid influencer posts, Discord 'signals'), trigger FOMO buying, then sell into the spike. Retail buyers hold the bag as the price collapses.

Defence — the test

Test: any 'guaranteed' or 'time-sensitive' move on a low-cap token is a scheme. Check token-holder distribution (Etherscan, BscScan) — if top-10 wallets hold > 50 %, walk away.

6Recovery scam (the meta-scam)

After you lose money to one of the above, a 'recovery agent' DMs you offering to claw it back — for an up-front fee.

Real case
FBI IC3 warnings (2021-2024)

FBI repeatedly flags 'asset recovery' fraudsters who target victims of prior scams. They claim insider law-enforcement contacts, demand a retainer or 'court fee', and disappear. Victims are scammed twice.

Source
How the money moves

Scammer buys leaked victim lists (from the original scam's leaked DB) and pitches them with personalised hooks. The retainer is the entire revenue — no recovery is ever attempted.

Defence — the test

Test: NO legitimate lawyer, regulator, or law-enforcement contact demands an up-front recovery fee. File complaints through official channels (IC3 in US, Action Fraud in UK, Europol EC3 in EU) — they do not cold-call you.

Key terms

Definition
Ponzi scheme
A fraudulent investment structure where returns to existing participants are paid from the principal of new participants, rather than from any genuine profit. Named after Charles Ponzi (1920). Collapses when inflows fall below promised outflows.
Definition
PAMM
Percentage Allocation Management Module — a legitimate broker feature that lets retail clients copy a master trader's trades proportionally to their allocated capital. PAMM itself is not fraudulent; the fraud appears when the structure is wrapped in a referral pyramid.
Definition
Pump-and-dump
A market-manipulation scheme where insiders accumulate a low-liquidity asset, generate artificial demand (paid social media, fake news, Discord 'signals'), and sell into the resulting price spike. Retail buyers who arrived during the hype hold the position as the price collapses.

Worked example — "Daily 2 % AI Bot"

"Our proprietary AI bot trades BTC futures and produces a steady 2 % daily return. Audited. Withdrawals in 24 h. $250 minimum, $50 k maximum per account."

Classification: Ponzi / HYIP (Scheme #1).
  • Fixed daily % → cannot be real trading. BTC has 70-80 % annualised volatility; a 2 % daily return implies + 30,000 % annual, which would dominate the entire BTC futures market in weeks.
  • "Audited" with no auditor named or report linked → empty signal.
  • Caps both ways ($250 / $50 k) → maximises affiliate-style spread, minimises any single regulator's scrutiny threshold.

Diagnostic test: ask for the trading account's read-only broker statement covering 90 days. If they refuse / stall / produce only a dashboard screenshot — confirmed Ponzi.

Guided practice — the 6-question decision tree

Run this on any offer you encounter. Each step takes ~5 seconds; the whole tree fits in under a minute.

  1. 1
    Does the offer promise a fixed % return?

    If yes → Ponzi / HYIP. Walk away.

  2. 2
    Does revenue depend on recruiting referrals?

    If yes → pyramid (PAMM / DeFi / 'club' wrappers all count). Walk away.

  3. 3
    Does the 'mentor' refuse a read-only Myfxbook / live tracker link?

    If yes → mentor scam. Their revenue is courses, not trading.

  4. 4
    Does the signal service ban third-party tracking?

    If yes → signal inflation. You're seeing a cherry-picked survival-bias feed.

  5. 5
    Is the token low-cap with concentrated top-10 wallets and viral hype?

    If yes → pump-and-dump setup. Check Etherscan / BscScan.

  6. 6
    Did someone DM you offering to recover prior losses for an up-front fee?

    If yes → recovery scam. Pay nothing; file with IC3 / Action Fraud / Europol EC3.

Independent practice — match the pitch to the scheme

Four pitches. Identify the scheme, then expand the verdict to check yourself.

Offer 1

"Daily 1.5 % returns on a Bitcoin AI bot. Withdraw anytime. Audited."

Show scheme + reason
Ponzi / HYIP — paying old depositors with new deposits

Test: ask for an independently audited proof of the underlying trading (broker statements, third-party tracker). Real strategies have variable returns. A flat % is the diagnostic.

Offer 2

"$497 mentorship — I made $1.2 M last year. DM me for the curriculum + Discord access + affiliate program (60 % commission)."

Show scheme + reason
Trading mentor / guru fraud

Test: demand a verified, real-money, multi-year track record (Myfxbook / FX Blue with read-only API access, NOT a screenshot). If they refuse, they are selling courses, not trading.

Offer 3

"VIP Telegram signals · 92 % win rate · +3,400 pips this month · NO outside tracking allowed — internal proof only."

Show scheme + reason
Signal service inflation

Test: require a public, read-only third-party PnL feed (Myfxbook, FX Blue, our own AI Signals public API). No tracker = no proof.

Offer 4

"Join MasterFX PAMM. Returns come from the master trader AND from your downline — earn 10 % of each referral's profit, 5 % of their referral's, …"

Show scheme + reason
PAMM / copy-trade pyramid

Test: separate the trading economics from the affiliate economics. If your expected return depends on referrals (not on the trader's PnL), it is a pyramid.

Apply — investigate one channel this week

Real-world task
Pick ONE Telegram / Instagram / Discord channel claiming "guaranteed signals" or "mentorship". Run the 6-step decision tree. Classify it into one of the six scheme families and record one piece of evidence in the journal below.
How AI Signals handles this

Manual: verify a signal source by checking for a public, read-only tracker (Myfxbook / FX Blue) and reading independent community feedback.

Our reference: the AI Signals service we run exposes a public WS + REST API. Every signal is auditable; nothing is editable post-publish. It's a working example of the transparency the lesson asks you to demand.

When manual wins: for any other signal source you encounter — always demand a tracker. We are not asking you to use ours; we are asking you to refuse anyone who refuses to publish.

Public-API live forex signal stream (WS + REST).
See AI Signals feed →

Mastery check

Seven questions. Pass at 6 of 7 (≈ 80 %). Randomised — take it twice if you slip on a question.

Common Schemes Mastery Quiz

Test your understanding with 7 questions. Pass with 6/7 correct.

Reflect

Reflection

Type your honest answers — saved on this device only. Use them next week to spot patterns in your trading thinking.

Pro deep dive

Ponzi forensics — the inflow-outflow signature

You can usually distinguish a Ponzi from a real fund by looking at the relationship between deposit inflows and withdrawal outflows over time. Real funds have outflows uncorrelated with the daily inflow curve (clients withdraw on their own schedule). Ponzi funds force outflows to track inflows because there is no other revenue.

Mirror Trading International — leaked logs analysisPro

Post-collapse analysis of MTI's ledger (made public during the CFTC case) showed that 96 % of outgoing 'profit payments' in any given week fell within ± 5 % of that week's new deposits. A real bot's PnL would diverge from inflow because it would depend on market moves, not deposit volume.

Forsage smart-contract economicsPro

Forsage was on-chain, which made the pyramid mathematically explicit: each participant's expected return required N new joiners below them at each level. SEC analysts modelled the geometric series and showed that after 12 levels the required new participants exceeded the global internet population — a tell-tale unsustainable curve.

Edge cases

Real strategies that look Ponzi-ish at first glancePro

Some genuine fixed-income or insurance-linked strategies produce remarkably stable monthly returns over short windows (3-6 months). Distinguishing them: (a) real assets under management on an independent custodian, (b) audited NAV by a top-50 audit firm, (c) regulator filings (Form ADV in US, SUP 16 in EU). All three must hold — any one alone is forgeable.

Legitimate copy-trading vs PAMM pyramidPro

Legitimate copy-trading (e.g. Myfxbook AutoTrade, eToro CopyTrader on regulated brokers) lets you copy a master's trades through your own brokerage account — your funds stay with the broker, not the master. Pyramid-PAMM pools your funds under the master's control + adds affiliate compensation. The custody model is the diagnostic.

Bibliography

  • CFTC — Mirror Trading International ($1.7 B)
  • SEC — Forsage smart-contract MLM ($300 M)
  • SEC — SafeMoon ($200 M pump-and-dump)
  • FBI IC3 — recovery scam warnings (annual reports)
  • FCA — UK investment fraud warning list
Educational only
Naming any specific company or product as "legitimate" here would be irresponsible. Use the decision tree on every offer, every time — including the ones recommended by friends.
Recall card — review in 1 week
Name 3 of the 6 scheme families and the one diagnostic test for each.
Show answer

Examples — Ponzi/HYIP: ask for independently audited broker statements. Mentor fraud: demand a multi-year read-only Myfxbook link. Signal inflation: refuse any service that bans third-party tracking. PAMM pyramid: check whether expected return depends on referrals or master's PnL. Pump-and-dump: check top-10 wallet concentration on the explorer. Recovery scam: never pay an up-front fee — file through IC3/Action Fraud/Europol.

Next: Trading is Real Work

Educational material only — not investment advice. Trading carries risk of capital loss. Always practice on demo and use a stop-loss. ← Back to Scam Check