CASE OVERVIEW
What our client brought us was a feeling she could not shake, and a wire transfer she could not explain away
If you have ever had a feeling about someone that turned out to be wrong, you understand something about the particular kind of pain this client carried when she came to us. The difference is that most people who have a bad feeling about someone are dealing with a person. Dana was dealing with a production.
She had met him online. His name, he said, was Dominic. He was in the military, stationed abroad, counting down the days until he could come home to her. He had photographs, credentials, a story, and a warmth in his messages that had convinced her over the course of their relationship that he was genuine. Then the money entered the picture. A family inheritance being held up overseas. Legal fees that needed to be covered. Wire transfers he promised would be returned as soon as the funds were released. And a meeting scheduled at a local tire shop in Texas City that he never showed up for.
She came to Terrance Private Investigator & Associates not fully certain she had been part of a romance scam. She was still hoping there was an explanation. She asked us to find out who Dominic actually was.
Ten days into the romance scam investigation we could tell her exactly who he was, which is to say that he was not anyone. What existed in Dominic’s place was one of the most sophisticated romance fraud operations our investigators have documented in the Houston market. Here is exactly what we found.
Client name and identifying details have been changed. This case study is published with permission.
THE CHALLENGE
We were not asked to find where a man went, we were asked to prove whether he existed at all
There was no subject to follow. There was no vehicle to track. There was a persona, a set of communications, a series of financial transactions, and the question of whether any of it connected to a real, identifiable human being or to something considerably more organized and deliberately untraceable.
Three specific obstacles shaped this romance scam investigation from the intake conversation forward.
The first was that Dana had been given proof, and the proof was good. Photographs, documents, a lawyer, a compliance officer, and a coherent story that accounted for every gap. Disproving a well-built persona takes more work than proving a real one, because every element has to be individually broken rather than collectively doubted.
The second was time. Weeks had passed since the wire left her account. Money moves fast in these operations and it does not wait for a client to work through the emotional arithmetic of accepting what happened. Every day between the transfer and our first blockchain query narrowed what we could still trace.
The third was that Dana was still hoping. A romance scam investigation is not a neutral errand for the person paying for it. She had not hired us to confirm a conclusion she had already reached. She had hired us to find out, which meant our findings had to be documented well enough to survive her wanting them to be wrong.
THE INVESTIGATION
Ten days spent proving that the man in the photographs had never once been in the conversation
A romance scam investigation demands a fundamentally different toolkit than a surveillance case: reverse image forensics, metadata analysis, communication pattern review, corporate registry work, domain and registrar history, and blockchain tracing. Our team spent seventeen years building that toolkit, and this case used nearly all of it.
The man in the photographs was real, and he had no idea his face was being used
We began where every romance scam investigation begins, with the images.
Reverse image analysis across multiple engines placed the photographs in circulation years before Dana ever received them. The same face appeared on social profiles under several different names, in several different countries, attached to several different backstories. Tracing the images back to their earliest verifiable appearance led us to a real man, living overseas, with an ordinary professional life and an active social presence that predated the fraud by nearly a decade. He was not involved. He was a victim of a different kind, a person whose likeness had been harvested and put to work by strangers he will probably never learn the names of.
Metadata told us more. Several of the images had been re-saved and re-compressed repeatedly, consistent with photographs pulled from a public profile, stored, and redistributed rather than taken and sent by the person in the frame. The intimate photographs, the ones meant to feel like proof, were the most heavily degraded of all.
The communications carried their own signature. We reviewed the full message history and found timestamp clustering inconsistent with the time zone Dominic claimed to be in and consistent with a different one entirely. We found phrasing patterns that recurred with a rigidity real conversation does not have, the kind produced by a script being worked by more than one operator. We found the structural arc these operations follow: an accelerated intimacy phase, an isolation phase in which he discouraged her from discussing the relationship with family, a manufactured crisis, and then the money.
The military documents did not survive contact with anyone who has handled real ones
Dominic had sent Dana documentation, and this is the part of the case that had convinced her most. It is also the part that fell apart fastest.
The paperwork carried formatting inconsistencies, terminology no serving member would use, unit designations that did not correspond to the deployment he described, and identifying numbers that did not conform to the structure real ones follow. One document referenced an office that had not existed under that name for years. Our investigators have reviewed manufactured credentials in dozens of fraud cases, and these were competent forgeries built by someone working from templates rather than from experience. Convincing to a civilian. Immediately wrong to anyone who has handled the real thing.
The supporting cast collapsed under the same scrutiny. Dominic had introduced Dana to a lawyer handling the inheritance and a compliance officer handling the release of funds. Both firms had websites. Neither firm existed. The domains had been registered within months of Dana’s first contact with Dominic, through privacy-shielded registrars, on hosting shared with a cluster of similar sites built from the same template. The addresses resolved to virtual office suites. The attorney headshots came from a stock photography library. This was not one man improvising. This was infrastructure.
The wire went to a company that had already stopped existing
Corporate registry work put a date on the receiving LLC within an hour. The entity had been administratively terminated well before Dana ever sent a dollar to it, and its registered agent address was a mail drop. The account was almost certainly opened by a money mule, a recruited intermediary whose own identity and banking history are used to give a fraudulent transfer a legitimate first stop. Mules are frequently recruited through fake remote job postings, and they are frequently prosecuted while the people who recruited them are not.
From there the money did what this money always does. It converted quickly, moved through a series of wallets in structured amounts, passed through a mixing service, and dispersed. Blockchain tracing let us follow a meaningful portion of the path and document it in a form law enforcement can actually use, including wallet addresses, transaction hashes, timestamps, and the exchange points where the funds touched regulated infrastructure.
This was the portion of the romance scam investigation her bank would ultimately lean on hardest. The clustering patterns were not the work of a lone actor. The wallet behavior, the timing, the automation of the hops, and the reuse of infrastructure we could tie to other reported frauds pointed to an organized West African cybercrime operation of the kind the FBI has been documenting for years. The tire shop in Texas City was never going to have anyone standing in front of it. There was no Dominic to show up.
EVIDENCE WE PRODUCED
Everything below came out of a ten-day romance scam investigation and appears in the client’s report with supporting exhibits.
Reverse image forensics. Photographs traced to a real, uninvolved man overseas, in circulation years before first contact.
Metadata analysis. Repeated re-compression consistent with harvested and redistributed images rather than original photography.
Communication pattern review. Timestamp clustering inconsistent with the claimed deployment location, and scripted phrasing indicating multiple operators.
Credential examination. Forged military documentation with structural, terminological, and unit-designation errors.
Domain and registrar history. Two fake law firm websites registered months before contact, privacy-shielded, template-built, shared hosting.
Corporate registry search. Receiving LLC administratively terminated before the transfer, registered to a mail drop.
Blockchain tracing. Wire converted to cryptocurrency, structured through multiple wallets and a mixing service, with documented exchange touch points.
Attribution. Infrastructure reuse and wallet clustering consistent with an organized West African fraud operation, not an individual.
HOW THE EVIDENCE HELPED
What a bank, the FBI, and her attorney could each do with a documented file
The deliverable at the end of a romance scam investigation is not a verdict, it is a file. A conclusion is something a client has to take on faith. A documented file is something other people can act on, and that difference is the entire reason this work is worth paying for.
Her bank received the corporate registry findings and the transfer records, which moved the matter from a customer saying she had been defrauded to a customer demonstrating that the receiving entity had been legally terminated before the wire arrived. That is the difference between a conversation and a fraud claim with a recall attempt attached.
The FBI’s Internet Crime Complaint Center received a submission with wallet addresses, transaction hashes, timestamps, and exchange touch points attached. Most victims file a narrative, because a narrative is all they have. A filing with traceable financial infrastructure in it can be matched against other reports and folded into an existing case, and the reuse patterns we documented made that matching considerably more likely.
Her attorney received the credential analysis and the domain history, which established the deliberate, constructed nature of the fraud rather than leaving it as a private dispute about a relationship gone wrong.
And a portion of the file went, through the appropriate channel, toward flagging the exploited profile of the real man whose face had been used, because he deserved to know.
THE RESULTS
She stopped negotiating with a story, and got her certainty back in a form other people could act on
We closed the romance scam investigation in ten days. Dana stopped sending money that week.
Recovery in these cases is difficult and we told her that on day one. We do not promise money back, because anyone who promises you that before tracing the funds is selling something. What we can promise is that you will stop wondering, and that what you learn will arrive in a usable form rather than as an opinion.
After seventeen years and more than eight hundred cases, we can tell you the emotional architecture of these operations is remarkably consistent even as the details change. The relationship moves faster than relationships normally do. There is always a reason a video call cannot happen. The person is geographically unreachable in a way that comes with built-in explanations, and military deployment, offshore contracting, and international medicine are the three most common covers we see. Trusted third parties appear at exactly the moment money is discussed, because a lawyer or a compliance officer lends borrowed credibility the persona cannot generate alone. There is a crisis with a deadline. And there is quiet, steady pressure to keep the relationship private, because isolation is not an accident of these scams, it is the mechanism.
If any of that is landing close to something you are living right now, stop sending money before you do anything else, preserve everything including messages, photographs, transfer receipts, and account details, and file with the FBI’s <a href=”https://www.ic3.gov” rel=”dofollow”>Internet Crime Complaint Center</a>. Then get the facts verified by someone who does this work. Not because we expect you to be wrong about your instincts, but because instincts do not go into a bank fraud claim and documentation does.
WHY CHOOSE US
Seventeen years of documented casework. Founded in 2009, with more than eight hundred cases closed nationwide.
A specialized fraud toolkit. Every romance scam investigation we take uses reverse image forensics, metadata analysis, corporate registry research, and blockchain tracing, applied together rather than in isolation.
Reports built to be used. Our findings are structured for banks, law enforcement, and attorneys, not just for your own peace of mind.
Honest expectations from day one. We tell you what recovery actually looks like before you hire us, not after.
Discretion as a standard, not a feature. Nothing about your case is discussed outside your case.
Licensed and accountable. Texas DPS License A30913601, with investigators operating across six metro markets.
CONTACT US
Ready to know for certain?
If something about the person you have met online is not adding up, you do not have to keep carrying that alone, and you do not have to prove anything to us before we take you seriously. A confidential consultation costs you nothing and will tell you whether a romance scam investigation makes sense for your situation.
Call 832-404-3400 or request a confidential consultation below. Everything you tell us stays between us.
[Standard investigator block runs directly beneath this section: Terrance Sanders, Chief of Investigations, and Ashley Roseborough, Deputy Chief of Investigations. Pull existing bios and headshots from the bio pages.]
FREQUENTLY ASKED QUESTIONS
How long does a romance scam investigation take? Most of our cases resolve within one to three weeks depending on how much documentation you have preserved and how far the money has already traveled. This case closed in ten days. Speed matters, so the sooner you bring us the messages, photographs, and transfer records, the more of the trail is still traceable.
Can you get my money back? Sometimes, and we will never tell you more than that before we have traced the funds. Recovery depends on how recently the transfer happened, whether it moved through a regulated exchange, and how quickly your bank acts. What we can reliably deliver is documentation that gives your bank, the FBI, and your attorney something concrete to work with.
Is it too late if I already sent money? No. A romance scam investigation started today is a better case than one started next week. The single most important step is to stop sending immediately and preserve everything, including messages you are tempted to delete out of embarrassment.
Will you tell me I was foolish? No. These operations are built by organized groups with scripts, stolen photograph libraries, and years of practice. Being targeted successfully by professionals says nothing about your intelligence, and we have sat across from doctors, executives, and attorneys in this same chair.
Do you handle cases outside Houston? Yes. We handle a romance scam investigation the same way whether the client is in Texas City or Connecticut, because none of the work depends on physical proximity. We have offices in Houston, Dallas, Austin, San Antonio, Miami, and Atlanta. Online fraud is not geographically bound and neither is our work on it.
Will my family have to find out? Only if you decide to tell them. Our work is confidential, and how you use the report afterward is entirely your call.