AI Crypto Scams and Gen Z: How Artificial Intelligence Is Powering the New Wave of Investment Fraud (2026)

AI-powered crypto scams stole an estimated $20 billion from Americans in 2025, per FBI data. Gen Z and older victims alike are being targeted with script-driven manipulation. Here is what victims can do now.

By DefendMe Editorial, Intelligence Team · 2026-05-24 · Hot News

You received a message out of nowhere, probably on WhatsApp or a similar app, from someone who quickly became warm, personal, and insistent. They talked about crypto profits, introduced you to a platform, and showed you balances that looked real. Then the withdrawals stopped working, and the money was gone. This is not a coincidence and it is not your fault. The FBI confirmed that Americans lost an estimated $20 billion to cyber theft in 2025, with more than half of those funds in cryptocurrency, and IRS Criminal Investigation agents have documented exactly how these schemes are engineered to deceive even careful, experienced people.

How It Works

These schemes, widely known in law enforcement as pig butchering fraud, follow a precise playbook that has been industrialized using artificial intelligence. The first contact typically arrives via WhatsApp, Instagram, or a similar messaging platform, often disguised as a wrong number or a friendly investment tip. The person on the other end, frequently operating under a fabricated identity, builds a relationship over days or weeks before any money is mentioned.

IRS Criminal Investigation special agents documented the case of one American victim who received her first message around Christmas 2024 via WhatsApp. Over fewer than three months, scammers coached her to open two crypto wallets, seeded those wallets with small deposits to simulate returns, then persuaded her to transfer funds to 14 separate wallets controlled by the scheme. She ultimately sent close to $300,000 before withdrawals were blocked and the manipulation turned threatening.

According to IRS Criminal Investigation Special Agent in Charge Harry Chavis, the operators behind these schemes use tools available on the dark web to acquire victim lists compiled from prior data breaches and hacks, then deploy AI-generated scripts tailored to each individual target. The AI does not just write generic messages. It crafts personalized, emotionally calibrated dialogue designed to mirror the victim's own language and life circumstances, a capability that makes the fraud extremely difficult to detect in real time.

Once funds are received, the money is laundered through a layered wallet structure. In the case documented by IRS investigators, funds from the victim's 14 wallets were consolidated into five new wallets, then moved through a cryptocurrency exchange acting as an off-ramp. The victim's approximately $300,000 was pooled with other victims' funds. Investigators tracked more than $5 million flowing through that final wallet structure before the trail went cold.

Platforms used in these schemes are typically built to display fabricated profits, making victims believe they are earning money and encouraging further deposits. When victims attempt to withdraw, operators invent technical obstacles or demand additional fees, a tactic that extends the extraction period and extracts even more money before the victim recognizes what is happening.

Red Flags. What Victims Reported

Unsolicited contact via WhatsApp, Telegram, or Instagram offering crypto investment coaching with no prior relationship
Operator builds personal rapport and asks detailed questions about your finances, family, and life situation before mentioning investments
Platform shows impressive profits immediately after a small initial deposit, but withdrawals are blocked or generate new fee demands
You are coached to open new crypto wallets and transfer funds to addresses controlled by a third party you cannot verify
Customer service team is introduced only after problems arise, and always asks for more money to resolve the issue
Urgency and emotional pressure escalate sharply the moment you express doubt or ask to withdraw
The person you are communicating with cannot be verified through any independently searchable identity (no LinkedIn, no verifiable employer, no video call that is clearly live)
Messages are personalized to your specific circumstances in a way that feels uncanny, consistent with AI-generated targeting scripts
The platform has no verifiable regulatory registration with the SEC, FCA, ASIC, or equivalent authority
Threats or guilt-tripping language appears once you raise concerns, replacing the earlier warmth

Investigation Findings

IRS Criminal Investigation's New York Field Office mapped the money flow in at least one documented case and shared its findings publicly with CBS News. Special Agent in Charge Harry Chavis confirmed that investigators traced the victim's funds through 14 receiving wallets, five consolidation wallets, and then to a cryptocurrency exchange used as a cash-out point. More than $5 million moved through the final wallet structure, pooled from multiple victims. As of the date of the CBS News report, investigators had not identified the perpetrators, who Chavis said could be operating from anywhere in the world.

Chavis also confirmed that criminals are actively using dark web marketplaces to purchase victim targeting data, including lists of prior fraud victims and personal information scraped from data breaches. These lists are then fed into AI tools that generate individualized manipulation scripts. This represents a structural escalation in fraud capability: the marginal cost of targeting each additional victim has dropped sharply, while the persuasiveness of the contact has increased.

The FBI's published figures for 2025 place total US cyber theft losses at an estimated $20 billion, with more than half of that sum involving cryptocurrency. These figures, cited by CBS News in the context of the IRS investigation, represent the broadest available official baseline for the scale of the problem. DefendMe analysts note that victim reporting rates for crypto fraud remain significantly below 100 percent, meaning actual losses are likely higher than the documented figure.

Criminal Context and Enforcement Landscape

The IRS Criminal Investigation division has formally established an online tipline for victims of AI-assisted crypto fraud schemes, a step that reflects the agency's recognition of the scale and sophistication of the current wave. Special Agent in Charge Harry Chavis stated publicly that victims should not be ashamed, describing these operations as highly sophisticated scams capable of deceiving anyone. The agency is actively working to identify perpetrators and connect additional victims across multiple cases.

Pig butchering fraud, the broader category that encompasses these AI-assisted investment scams, has been the subject of enforcement actions and public warnings by the FBI, the Department of Justice, and financial regulators in multiple jurisdictions. These operations are frequently linked to organized criminal enterprises operating out of Southeast Asia, though investigators including Chavis have acknowledged that operators can be located anywhere in the world and attribution remains extremely difficult once funds have been layered through multiple wallets and exchanges.

Victims in the United States can report to the FBI's Internet Crime Complaint Center (IC3) at ic3.gov, the IRS Criminal Investigation tipline, and the Federal Trade Commission. Early reporting improves the probability of identifying wallet clusters, mapping victim networks, and supporting any future law enforcement action. Recovery through official channels alone is not guaranteed, but documented reports contribute directly to the evidentiary record that investigators build over time.

What Victims Should Do Now

Stop all deposits immediately. Do not send any additional funds for any reason, including fees described as necessary to unlock withdrawals or resolve errors.
Do not contact the platform or the person who recruited you. Further contact gives operators more time to move funds and may compromise any future investigation.
Preserve all evidence. Screenshot every message, every transaction confirmation, every wallet address, and every balance shown on the platform. Save copies in at least two separate locations.
Record every wallet address you sent funds to. Write down the exact amounts, dates, and any transaction IDs you have. This information is essential for crypto tracing.
Report to authorities. File a complaint with the FBI Internet Crime Complaint Center at ic3.gov, the IRS Criminal Investigation tipline, and the Federal Trade Commission at reportfraud.ftc.gov.
Do not pay any recovery fee. Anyone who contacts you offering to recover your lost crypto for an upfront payment is almost certainly running a secondary scam targeting the same victims.
Use a specialist crypto tracing tool to map where your funds traveled on-chain. Blockchain records are permanent and may support both law enforcement reports and civil proceedings.

Source: https://www.cbsnews.com/news/ai-crypto-fraud-irs-investigators/