Since 2017, Agari has been tracking and gathering intel on a Nigeria-based crime ring we’ve named Scarlet Widow. This report presents an in-depth look at how the group’s romance scams work, and includes the heartbreaking case study of a victim who was conned out of more than $50,000.

In this report, we uncover:

  • How Scarlet Widow mastered the seductive art of the romance scam
  • Which types of people  are most frequently targeted as victims, and
  • What kinds of emails are sent to encourage victims to send money

Download Scarlet Widow: Breaking Hearts for Profit to see how easy it is for cybercriminals to take advantage of vulnerable populations for their own gain.

The Long Con:
Making Moves for Money

After creating a new profile on a dating site, generally posing as an attractive woman looking for love, Scarlet Widow simply waited for men to contact them to start a conversation.

By far, the most prominent and successful fictitious persona used to facilitate their schemes was named “Laura Cahill.” To bring this persona to life, the group used photos of a real person, a former model, likely copied from her social media profiles. The likeness of this real-world individual served as the face of the Laura Cahill persona for more than two years.

After an initial email was received from an interested romance seeker, “Laura” responded with a very detailed, pre-crafted email, where she would tell them about her background and her interests. She tells them that she’s originally from Texas, but she’s currently in Paris for a modeling seminar and would be traveling back to the United States in a few days.

As the conversation continued, Scarlet Widow used a series of other detailed templates, each containing more information about Laura and asking the other people questions about themselves as a way to build rapport and trust.

The first response includes phrases to encourage trust and perhaps lower skepticism: “I also believe in open communication, Standing in trust, Being honest and having integrity. Honoring and respecting each other is high on my list. And again, I treat people the way I like to be treated because I believe what comes around goes around. I’m in no rush to find a partner, I want it to happen naturally.”

Later, it continues, “You can’t communicate deeply with someone you do not trust. Family is also a very important thing to me. The one good thing i learnt from my parent is to be honest. The kind that sits together at dinner and open with each other. They also have made me strive to never lie to someone. NEVER! I personally know how much it hurts to be lied to and i have no desire to ever put someone through that. Life is too short. Especially at this stage and point in life.”

The emails do contain plenty of off-notes, using the dialog that seems more likely to come from a 25-year-old male Nigerian scammer than a 25-year-old American woman: “I also have several pairs of shoes. I am open to a new things and I am willing to try different stuff but if it doesn’t match with my personality i won’t wear it. I use facial cleansers at times, Lotions and eye creams. I generally don’t smell.”

In her list of favorite foods alongside sushi and tacos, Laura lists “candy yams”—usually eaten in the United States only on the Thanksgiving holiday, while yams are a staple of the West African diet.

Emails like these continue until Scarlet Widow believes that they have a willing target. This is the point where “Laura” moves from getting to know the person to testing their willingness to fall for her scam.

Example of a “Laura Cahill” Email Template Used With a Romance Scam Target

Making the Move

Once rapport has been established, Laura gets to the hook: she likes the mark and would like to meet him. Unfortunately, there is a problem. She’s still in Paris and her credit card has been frozen due to possible “identity theft.” Laura tells the target that she doesn’t have any other means to pay for the return plane ticket back to the United States and asks them for help. She asks the target to send some money via Western Union or MoneyGram to help pay for the flight.

The “Hook” Email Sent to Test Willingness to Send Money

If the mark is hesitant to send the funds, Laura gives them the information for a “travel agent” who they can contact to confirm her story. If the target reaches out to the travel agent, which is simply a separate account under control of the group, they receive a “confirmation” of Laura’s story.

The Email from the “Travel Agent” Validating Laura’s Story

If the target accepts this explanation and sends the money as requested, Laura sends the victim an email containing an airline “confirmation” that a ticket has been purchased for the flight home. In reality, this confirmation is, of course, fake. Scarlet Widow created these fake airline confirmation emails by booking and canceling actual flights to receive the email from the airline, then modifying the source HTML code in the legitimate email to make them look realistic.

Once the victim has been scammed, Scarlet Widow continues to engage with him, exploiting him as long as possible. Of course, Laura never travels back to the United States and provides a variety of excuses for why she can’t leave Paris, generally revolving around her modeling agency still needing her for additional projects. All communication between the victim and “Laura” is done over email and text messages. They never talk on the phone or meet in person, allowing Scarlet Widow to continue the scam as long as the victim is willing to fall for it.

Example of a Fake Laura Cahill Flight Confirmation Email

Starry Eyes for Starling Micheal

While Laura Cahill was, by far, the most frequent persona used by the group, Scarlet Widow has used a number of other fictitious identities to lure victims into their trap over the years.

There has been “Britney Parkwell,” a 27-year-old woman from San Jose, California. Britney is half Puerto Rican and works in art and fabric sales, which she was introduced to by her father who died five years ago. Her favorite sports are baseball and basketball and she describes herself as “independent, optimistic, respectful, sensual, and attractive.” She’s really focused on finding “Mr. Right” and she’s ready to relocate anywhere in the United States to be with her true love

Then there’s “Lisa Frankel,” an only child who lost her mother to cancer when she was four years old. She lives in Oslo, Norway, and just got out of a relationship a few months ago because she found her ex-boyfriend cheating on her. Lisa sells medical equipment for a living and loves traveling to visit interesting places. She hopes to travel to America on vacation one day, but she doesn’t know anyone there that she could visit. Lisa is looking for an “honest and caring man to date and have as my future husband,” who will be a person who “knows the meaning of love and what it takes to love.”

But the most interesting persona used by Scarlet Widow has to be “Starling Micheal,” a supposed active duty U.S. Army Captain. Captain Micheal was used as an identity to con women through romance sites including MilitaryCupid.com and MarriedDateLink.com during a six-month period between February 2017 and August 2017.

According to one of his fake dating site profiles, Captain Micheal is a 43-year-old Catholic man from Austin, Texas, who is currently serving a tour of duty overseas in Kabul, Afghanistan. His profile indicates that, like most of the other personas created by Scarlet Widow, he has lost a loved one in his past. In this case, Captain Micheal lost his wife, as his status describes him as “Widowed.” Since the death of his wife, he has been “searching for so long” for the perfect woman and hopes the woman has a trusting mind to fall in love.

Digging a little deeper into Captain Micheal’s personality, he describes himself as the “life of the party” and considers himself sarcastic, noting that “Dennis Miller is a cream puff compared to me.” He seems to be quite an environmentalist, saying that his fashion sense is “nature loving,” and he loves wearing hemp shorts and an Earth First t-shirt. In a description that is likely very intentional, Captain Micheal says that he’s “generous to a fault” when it comes to money.

While it may seem that Captain Micheal’s profile is a relatively benign description of a man looking for a partner, parts of it are specifically used to act as a priming mechanism so that potential victims enter a conversation with a conditioned mindset. When he writes that he hopes potential partners will be trusting, it’s because he wants them not to think twice when he tells them something that is untrue. When he says that he’s generous when it comes to money, it’s because he hopes a potential victim would reciprocate this mindset when he eventually asks for money.

“Captain Starling Micheal’s” Dating Site Profile 

During email conversations with suitors, Captain Micheal is aggressively affectionate. Even early in their “relationship,” he constantly tells the women he’s communicating with that he loves them and can’t wait to build their “special friendship” into a family. His messages are also generally shorter and to the point. The tone used by Scarlet Widow in the Captain Micheal persona is notable when compared to one of their female personas, which usually takes a softer, inquisitive, and more verbose tone. These differences demonstrate how scammers adapt based on who they’re pretending to be and how they think their target population wants to be treated.

Example of “Captain Starling Micheal’s” Email Tone

Up Close and Personal:
The Case of “Robert Blackwell”

While we have observed a number of victims that have been conned by Scarlet Widow’s romance scams, one stands out as a notable example of how intrusive and damaging these scams can be.

The victim, in this case, is “Robert Blackwell,” a Texas man whose real name has been changed to protect his identity. During his initial conversations with Laura in August 2015, Robert described himself as being a very religious man who was going through a painful divorce. After being run through the same deceptive process described above, Robert was persuaded to send Laura money for a flight home to Denver, where she said she was currently living.

But that’s not where this story ends. Laura’s exploitative relationship with Robert continued for another year, finally ending in August 2016. After Laura’s initial flight to Denver unsurprisingly fell through, the two continued communicating and regularly exchanged pictures via email. After a month passes, Laura again told Robert that she was going to fly to the States to visit him.

Once again, Robert helped Laura pay for the ticket by sending $1,700 via Western Union to her “travel agent.” Once again, though, Laura’s tells Robert that she has to postpone her trip because she was offered a long-term modeling contract with a (fictitious) French modeling agency. As evidence of this new opportunity, Laura sent Robert a fake contract that stated that she would be paid $145,000 for 10 months of work.

Laura Cahill’s Fake Modeling Contract

At this point, Robert was out more than $2,500, but he still had faith that his relationship with Laura would flourish. Over the next few months, Robert became convinced that he and Laura were meant for each other and it was divine intervention that brought them together. After three months, Robert opened multiple bank accounts in his name and gave Laura online access to the accounts. He regularly deposited large sums of money into the accounts for Laura so she could withdraw the funds electronically, thereby enabling her to easily and quickly continue to swindle him out of his money.

As time went on, some of Robert’s friends and family began to sense that something wasn’t right and confronted him about the possibility that he was being scammed. When one of his relatives warned him that he was being “catfished,” Robert responded that their relationship was part of God’s plan and he needed to have faith that everything would work out.

Robert was fully committed to Laura, financially and psychologically. At one point, Laura failed to respond to a series of messages from Robert for more than a week. Robert’s manic email to Laura demonstrates how psychologically invested he had become in this relationship:

The amount of money Robert sent to Laura was staggering. Over the course of their one-year “relationship,” Robert sent Laura at least $50,000. Underscoring the lengths he went to please Laura at one point, Robert’s stepfather confronted him about an incident where Robert apparently stole $10,000 from him to “give to some stranger.”

The relationship between Robert and Laura ended in August 2016 after Laura abruptly stopped responding to Robert’s messages. This also corresponds with a mysterious absence in activity amongst the entire group of more than a month. Laura Cahill’s disappearance likely saved Robert from continuing to send her money, ultimately limiting the pain and suffering caused by the members of this exploitative group.

Chain of Fools

Unfortunately, the case of Robert Blackwell is not that unusual. Hundreds of people throughout the world get scammed by Scarlet Widow and other groups like it every single day. While Robert’s case shows how deeply entrenched he was in the relationship, he is one of the lucky ones, as there is no evidence that he ever became an unwitting money mule for the group— which is the case for others thrown into his situation.

Scarlet Widow is one of an uncounted multitude of online con artists conducting romance and other scams. The Nigerian gangs appear to share tactics, evolving their methods together over the several years during which Agari has had insight into their operations.

We are tracking a number of Nigerian scammer groups that continue to engage in romance scams and seek out new victims. In 2018, Agari documented a long-running, $500,000 swindle of a divorced American woman with children who refinanced her home to send money to the con artist. Eventually the creditors closed in, and she was forced to sell her house, pull her children out of school, and move the family in with a friend. She continued to believe he was real until Agari presented her with irrefutable evidence of the truth, enabling her to finally break free in 2018.

1234
Close button
1234
Mail Letter

Would you like the confidence to trust your inbox?