It starts in the same feed as everything else, from an account you have followed since the spring, and every step after that feels like your own idea.
How much money are we talking about?
Action Fraud recorded GBP 879.8 million lost to UK investment fraud in 2025, across 34,673 reports. That is roughly GBP 2.4 million a day, and the number of reports was up 35% on the previous year. Cryptocurrency featured in 66% of them.
How much of that rise is real?
Both halves of that deserve a warning label before anyone builds an argument on them. Reported fraud is always an undercount, because a large share of victims never report at all and investment fraud carries an embarrassment penalty that suppresses reporting further, so the real total sits above the published one by an unknown margin.
Pushing the other way, any count built from reports moves when reporting gets easier, when the categories are redrawn, or when one scam gets a fortnight of publicity, so a 35% rise in reports is not automatically a 35% rise in fraud. The scale is solid. The year-on-year change is soft, and anybody quoting it as a growth rate is quoting a measurement of how loudly people complained.
Where do people encounter it?
Increasingly on social media. Around 36% of reports in 2024 were linked to a social media platform, which means the introduction is happening in the same feed as everything else, from somebody who looks like a person rather than an advert. That is a very different proposition from a cold call. The composition, crypto as the vehicle and social media as the introduction, is the part of the data nobody argues about.
It matters because the old advice, be suspicious of unsolicited contact, does not fit. Nobody rang you. You followed an account, watched some content, found it useful, and then acted on a recommendation. Every step felt like your own decision, which is exactly the design.
Does regulated always mean safe?
No, and the FCA's own enforcement work makes the point better than any warning. In October 2025 the regulator disclosed that more than 90,000 UK consumers had lost GBP 75 million over four years at a single CFD firm promoted by finfluencers. That works out at roughly GBP 833 each. The firm was not a boiler room operating from nowhere.
So the harm was not fraud in the classic sense. It was ordinary people being funnelled into a high-risk leveraged product by people they trusted, at scale, and losing money the way most people lose money in that product. The regulatory perimeter did not prevent it. It is worth being clear that authorised does not mean suitable, and suitable for somebody else does not mean suitable for you.
| Warning sign | What it looks like in practice | Why it works |
| Urgency | Closing soon, limited allocation | Removes time to check |
| Social proof | Screenshots of other people's returns | Feels like evidence, is not |
| Familiar face | Someone you have followed for months | Trust was built before the pitch |
| Small first step | Just deposit GBP 250 to try it | Commitment escalates from there |
| Difficulty withdrawing | Fees or taxes due before release | The money was never there |
| A second call offering help | We can recover your losses | Same victim, second theft |
Six patterns that recur across investment fraud reports. None of them require the underlying investment to be fictional.
What is a recovery room?
The second theft. Someone who has already lost money is contacted by a person offering to get it back, usually for a fee paid up front, sometimes claiming to be from a regulator or a law firm. The lists of previous victims circulate, which is why the approach so often arrives suspiciously soon after the original loss.
There is no clean public count of how often this second approach is made, which is part of the problem, because a recovery attempt on an existing victim tends to be logged as another investment fraud report rather than as a category of its own.
What can be said is that 34,673 reports in one year produce a very long list of people known to have had money and known to have lost some, and a list like that has a resale value. That is the strongest argument going for reporting a loss to Action Fraud rather than trying to sort it out privately, and for assuming the offer of help is part of the same event rather than a rescue from it.
What actually protects you?
Checking the FCA register by firm reference number, not by name, before any money moves. Names are copied. Clone firms replicate the details of authorised businesses down to the address, and the only reliable check is the reference number against the register entry, with the contact details taken from the register rather than from the firm's own website. After that, slowness. Almost every technique in the table above is an attack on your timeline. Anything genuine survives a week's delay, so imposing one costs you nothing and defeats most of it.
Where should you look things up?
The FCA register for authorisation, the FCA warning list for firms already flagged, and Companies House for who is actually behind an entity. All three are free, all three are authoritative, and none of them will tell you whether a legitimate product is a good idea for you.
For that last question you want research that has actually examined the thing rather than repeating its marketing. Real money changes hands before The Investors Centre forms a view on anything: it opens and funds live accounts with its own money to test UK trading platforms rather than compiling rankings from providers' published fee schedules, which is a low bar and one most of the internet fails.
Two things that does not do, and both matter here. It is not a fraud check. And the coverage stops at the regulated perimeter, which is precisely where the money in this article is not. An operation working out of a rented office with no permissions, no UK entity and no intention of settling a withdrawal will never appear in any platform comparison, because there is no genuine account to open and nothing to time. Research built from funded accounts is good for separating a decent regulated firm from a mediocre one. It cannot see the thing that took the GBP 879.8 million, and a reader who treats the absence of a firm from a comparison table as a verdict on it has misread what the table is for.
What to do if it has already happened
Report it to Action Fraud, tell your bank immediately because some payments can still be stopped or recalled, and write down everything while you remember it: names, dates, account numbers, screenshots. Then assume the recovery approach is coming and treat any offer of help as part of the same event.
And do not pay anyone up front to get money back. That is the one rule in this article with no exceptions in it. Everything else here is a matter of degree; that one is not, and it holds whoever is asking, whatever they say they are, and however plausible the paperwork looks.