The funnel before the deposit

In the files we look at, almost every investment-platform or crypto-fraud matter shares one feature: by the time the client recognises the pattern, the platform itself has already stopped showing it. The dashboard still loads. Customer service still replies. Balances still grow. What the client is now seeing is the polished, frictionless version of an operation that was structured, from the first contact, to look exactly that way.

The harder question, before money moves, is what the same funnel looked like at the front end — and whether anything visible at that stage would have given it away. Most of the time, in retrospect, several signals were present. They were also subtle, embedded in tone and structure rather than in obviously broken claims, and easy to miss for a client who had no prior reason to look for them. This is what those signals look like.

The shape of an investment funnel

The recognisable thing about a fraudulent funnel is not that its claims are extreme. The most successful ones make claims that sit just above the upper end of what an ordinary client might believe a real fund could deliver — a steady eight or ten per cent monthly return, framed as the result of a proprietary algorithm or a senior trader's discretion. The numbers are not so high that a sceptical reader would dismiss them outright; they are high enough that a client willing to entertain the possibility starts running the compounding calculations in their head. That mental arithmetic — the moment a client begins to picture what their balance would be in a year — is part of the engineering.

Once the prospect is past that mental threshold, the rest of the funnel is conventional sales work, with one structural difference: the deliverable is digital. There is nothing to inspect physically, no office to visit, no signed contract that names a regulated counterparty. Everything happens through the platform's own systems and a single contact person who works for it. This single-counterparty structure is itself one of the more reliable signals. Real investment relationships have multiple parties — a registered dealer, a custodian, a regulated bank — and the client interacts with several of them over time. A funnel does not need that, because there is no real custody chain on the other end.

Pressure as a structural element, not a tactic

Time pressure inside a fraudulent funnel is not a one-off line. It is structural. The whole funnel is built on the assumption that the prospect should spend less time deliberating than they normally would on a comparable financial decision. Allocations are limited. Deposit deadlines are tight. The trader is "available now but only for the next hour." Tax windows close. Compliance reviews are scheduled. Each artificial deadline narrows the window in which the prospect can call a friend, ask their existing bank, or run the offer past anyone neutral.

The point of the pressure is not necessarily to extract a faster decision. It is to extract a decision made without external review. A client who decides to deposit after consulting two outside parties is a client who probably will not deposit. The funnel does not survive that consultation, and its operators know it.

Identity, regulation, and the part that stays opaque

A registered investment firm in Canada operates under a stack of disclosures that are individually unremarkable but cumulatively distinctive. The legal entity has a name and a province of registration. The dealer or adviser is registered with provincial securities regulators and is searchable on the National Registration Search database. The firm publishes its principal address, complaint procedures, and the names of the individuals authorised to give advice. None of that is glamorous, and none of it appears in marketing copy because, for a real firm, it is assumed background.

A funnel's relationship to that background is one of polite avoidance. The platform mentions compliance, sometimes elaborately. It rarely names the entity that is supposed to be compliant. There is a privacy policy and a terms-of-service document that read fluently but do not specify the jurisdiction in which a dispute would actually be heard. There may be a corporate footer with a city name and a generic suite number. There is unlikely to be a way to verify any of this in a public registry, because the entity either does not exist there or exists in a form that does not match the marketing.

We treat the registry check as foundational, not as a final step. A platform that cannot be located in the jurisdiction it claims to operate from is a platform that is not, in any meaningful sense, operating from it.

"Account managers" and the friendliness problem

Many of the matters we look at involve a single contact person whose role inside the funnel is essentially relationship management. The relationship is real, in that the conversation is ongoing and emotionally textured: the contact remembers the client's birthday, asks about family, expresses sympathy when a deposit doesn't go through. The financial framework around the relationship is constructed.

This is the part of the pattern that is hardest to describe to a client after the fact, because it relies on dismissing what felt like a genuine human relationship. We try to be careful with this — the relationship was, in some emotional sense, real. The point we make at intake is that the role inside the operation was not. The contact was a salesperson whose performance was measured in deposits, working from a script that included the warmth.

A useful diagnostic, before deposit, is the asymmetry of the conversation. A real adviser will at some point say things the client does not want to hear: that the proposed allocation is too aggressive, that fees will eat returns, that the timeline is unrealistic. A funnel's contact will not. Every conversation, regardless of the client's question, lands at "let's increase the allocation."

Where the funnel turns into something else

Once a deposit has been made, the funnel's character changes. The polished pre-deposit experience continues for as long as it serves the operation — often weeks, sometimes months — and ends when the client first attempts to take money out. That moment is outside the scope of this piece. We have written separately about the withdrawal phase, because by the time it begins, the diagnostic question has already been answered: the platform has shown what it is. The earlier window, when the platform is still presenting itself as ordinary and the deposit has not yet cleared, is the one this piece is about.

The reason we keep these two pieces separate is practical. A client who reaches us pre-deposit is in a position to act on what they are about to learn. A client who reaches us mid-fee-stack is in a different position, with a different set of options, and the conversation is shaped accordingly. The same funnel produces both kinds of file, and the time elapsed between contact and deposit is one of the more important variables in early assessment.

What we tell clients at the front of the call

Not every prospect we hear from has lost money. A meaningful share have called us pre-deposit, after running a search for the platform name and finding it discussed in the context of fraud advisories. The conversation we have with those clients is short and structured. We confirm what we can, in the time available, about the entity behind the platform. We name the registry sources we have checked. We are direct about what is verifiable and what is not.

Where the picture is conclusively concerning, we say so and end the call. Where it is mixed — a registered entity that has, for example, expanded into an unregulated product line — we say that too, and refer the client back to their existing adviser or to the appropriate regulator. We do not engage with the platform on the client's behalf at the pre-deposit stage; the file is not yet a file.

This is the part of the practice that doesn't generate intake. It also, in our view, does the most for the client. The most useful conversation in a fraud matter is often the one that takes place before the deposit clears — and the client who initiates it has, by definition, recognised something. The signals were present. They are usually present.

The cost of recognising them late is the subject of the rest of this section. The lower-cost option is to recognise them early, and most of what we have published here is in service of that.