UtilForge.org is a digital inclusion organisation offering free cybersecurity and online safety tools and guides. A 2026 Champion of Cybersecurity Awareness Month. What you check stays on your phone or computer.

Guide · 24 October 2026

When trust is built to be used later.

Slow-burn scams, borrowed authority and false warnings, and four habits that work against all three.

Most trust online is well placed: the friend who shares a recipe, the page that posts useful local news, the relative who forwards a warning because they care. A small number of scams depend on that same trust, built patiently and then used. This guide covers three of them: the slow-burn scam, where friendship or romance comes weeks before any request for money; the page that builds a following with harmless posts and later changes what it sends; and the warning that mixes good advice with a false claim. Four habits work against all three.

Facts checked on 24 October 2026. Sources are listed at the end, with dates.

Two free checks that go with this guide

Is this warning real? reads a forwarded warning and points out the signs of a chain message and of a genuine official alert. What could a criminal find about us? is a private checklist for families, companies, charities and creators. Both run on your own phone or computer, and what you enter stays on your device.

Check a warning Open the checklist

Slow-burn scams: when friendship comes first

A slow-burn scam begins as a friendship, a romance or a helpful contact, and the request for money comes much later. The Federal Trade Commission in the United States described the pattern in February 2026: the new contact “might contact you every day and talk about everything under the sun. But eventually, they’ll ask for money”, perhaps for a medical emergency or for tickets to visit. In other cases the request arrives as an opportunity: an investment platform the new friend says has worked for them.

The money involved is large. In 2025, people aged 60 and over reported losing $584 million to confidence and romance scams in 10,188 complaints to the Federal Bureau of Investigation’s Internet Crime Complaint Center, and $3.52 billion to investment fraud, the largest single category, out of more than $7.7 billion reported by that age group in total. The Federal Trade Commission, which runs a separate reporting system, said on 19 October 2026 that reported losses by people aged 60 and over reached about $3 billion in 2025, with investment scam losses up 42 per cent to more than $1 billion, and that scammers often reached people through social media. Both are counts of what people reported, not of everything that happened: the Federal Trade Commission estimates that the full cost of fraud to older adults in 2025 could be as high as $119.5 billion.

The time spent is the method. Weeks of daily messages build something real on one side, so the request, when it comes, arrives from someone who already feels like a friend. The moment to notice is the turn: from friendship to money, from chatting to an investment app, or from openness to “keep this between us”.

The Federal Trade Commission suggests three checks: search the person’s photo with a reverse image search (a search that finds where else a picture appears online, which can show the same face under another name), search their claimed job with the word “scammer”, and talk to someone you trust before sending anything. For an investment, the investment scam check and the guide to seven questions for any investment offer help; for any payment, Before You Pay does.

Borrowed authority: pages that change what they send

Some pages and accounts build a following with posts that are harmless or helpful, and later use that audience for something else. Fact-checkers call one version “like-farming”. Snopes, the United States fact-checking site, explained in January 2020 that the early posts on such pages are often harmless, and that once the audience has grown, the operators can change the page’s focus to harmful links, requests for personal details or spammy products, or sell the page on.

A second version changes a single post. Lead Stories, a fact-checking organisation, examined a widely shared Facebook post in May 2023 that appealed for help finding a missing man and his dog. It found no evidence that either was missing; once the post had been shared enough times, it was edited into an advert for paid surveys. The people who shared it were trying to help a stranger, and their kindness carried the advert to their friends.

The audience that follows a page or shares a post lends it authority, and that authority stays when the content changes. On Facebook, the Page transparency section shows when a page was created and whether its name has changed, so a page called “Local Weather Updates” that began life under a different name is worth a second look. The same approach works for copies of real organisations: the checklist What could a criminal find about us? helps families, charities, companies and creators see what a copycat could borrow from them.

False warnings that carry true advice

Some of the most widely shared false messages are warnings, and they spread because people care about each other. Early in 2026 a message travelled on WhatsApp and Facebook telling people to stop helping strangers with their phones. It described a “help-seeking scam” in which a stranger asks you to read a code or check a message, and claimed that touching the phone lets criminals capture your fingerprints, voice and face, build a “digital clone” and ruin you financially in 30 minutes. It ended by asking readers to share it widely.

Africa Check rated the message false on 18 February 2026, and Mimikama, the Austrian fact-checking organisation, rated its central claim false on 9 March 2026. Both explained that phones keep fingerprint and face data locked on the device, and that a copy of a fingerprint would not open a bank account without the phone itself. Mimikama found no evidence of the cases the message described.

The message was not wrong about everything. Both fact-checkers noted what it got right: artificial intelligence (AI) can imitate voices and faces, and it is wise never to read out a code, or hand personal details to a stranger. Africa Check pointed to how impersonation fraud really works, citing a 2024 case in Hong Kong in which a finance worker transferred about $25 million after a video call with faked colleagues, built from material that targets people rather than phone sensors.

That mixture is what makes such warnings hard to judge. The true advice makes the whole message feel familiar and responsible, and the false claim travels with it. A warning like this can also point attention in the wrong direction (this is an inference, not a measured effect): it teaches people to fear a stranger’s phone, which is not how the fraud works, rather than the request to read out a code or a call in a familiar voice asking for money, which is. The people a warning most wants to protect are the ones who receive it from someone they love and trust, and that trust is the reason to check it before it travels further. Is this warning real? uses this message as one of its worked examples.

Four habits that work against all three

  • Check the source. Who issued this, and can you find it on their own website, typed in yourself? A real alert names a real body: a police service, a government department, a regulator or a bank. A real friend can be checked too, with a reverse image search or a video call.
  • Check the date. A warning with no date may be years old and going round again. A page with a recent name change may not be what its name says.
  • Slow down when a message asks you to act or to forward. Urgency, secrecy and “share with everyone” are the moments to pause. Search the main claim with the words “fact check”.
  • Talk to someone you trust. The Federal Trade Commission gives this advice for romance scams, and it works for every scam in this guide. A family can agree a family safe word so that a call in a familiar voice can be checked in a moment.

For people aged 60 and over, and the families who help them, the free video course Safe & Savvy After 60 covers these habits and many more, for making the most of life online.

Questions people ask

What is a slow-burn scam?

A scam that begins as a friendship, a romance or a helpful contact, with the request for money coming weeks later. The Federal Trade Commission describes contacts who message every day before eventually asking for money, for example for a medical emergency or tickets to visit.

How much do people aged 60 and over report losing to romance and investment scams?

In 2025, people aged 60 and over reported losing $584 million to confidence and romance scams and $3.52 billion to investment fraud to the Federal Bureau of Investigation’s Internet Crime Complaint Center. These are reported losses, not the full total.

What is like-farming?

A page or post that gathers likes and shares with harmless or emotional content, so that the audience can later be used for something else, such as harmful links, requests for personal details or adverts. Fact-checkers including Snopes and Lead Stories have described it.

Can someone steal my fingerprints by touching my phone?

Africa Check and Mimikama both rated this claim false in 2026. Phones keep fingerprint and face data locked on the device, and a copy of a fingerprint would not open a bank account without the phone itself.

Should I stop forwarding warnings?

No. Forwarding a warning is usually an act of care. Check who issued it and when, on the issuer’s own website or with a fact-checker, before you send it on.

Sources

This guide is general information, not professional security advice.

Trust built over weeks deserves the same patience in return, and a warning worth forwarding will still be true after the time it takes to find out who issued it.

Related guides

Free

If you doubt it,
UtilForge it.

Check a forwarded warning, or see what a criminal could find about your family or organisation, on your own phone or computer.

Is this warning real? What could a criminal find? Read the free book

For the household, the Family Safety Tools pack gathers fifteen checks into files you keep. You pay what you want, including nothing.