What Is Romance Baiting? Definition & Examples

Romance baiting is a fraud scheme in which attackers build an apparent emotional relationship to lower a victim’s guard before steering them into financial loss. The scam usually begins on dating apps, social media, or messaging platforms and often ends with investment fraud, payment requests, or stolen personal information.

What romance baiting is really doing

Romance baiting is not just “dating app fraud.” It is a trust-building scam that uses emotional manipulation to create a false sense of intimacy, making the victim more likely to ignore warning signs and comply with requests that lead to loss.

The attacker’s first objective is usually access to attention and credibility, not immediate payment. That early relationship setup is what makes later requests, such as urgent transfers, fake investment opportunities, or help with “temporary” problems, feel believable.

Common romance baiting tactics and channels

Romance baiting often starts in places where identity can be presented casually and cheaply, such as dating apps, social platforms, or direct messaging. The profile may be partially fake, borrowed, or heavily curated, and the conversation is often moved off-platform quickly to reduce oversight.

These scams tend to rely on familiar social-engineering patterns: rapid rapport, mirror-image interests, emotional escalation, and a reason to keep the relationship private. The scammer may also introduce long-distance barriers, crisis stories, or repeated excuses that make in-person verification difficult.

Because the channel is conversational rather than technical, the scam can blend into ordinary social interaction until the request becomes financial. That makes romance baiting especially effective when the victim is already invested in the relationship narrative.

How romance baiting turns trust into loss

Once trust is established, the scam typically shifts toward monetisation. Common end states include wire transfers, gift cards, crypto transfers, fake investment platforms, payment requests for travel or emergencies, and harvesting of personal information that can support later fraud.

In many cases the romance story is only the delivery vehicle for a broader fraud path. The emotional bond lowers skepticism, but the underlying goal is still to extract money, credentials, or sensitive personal data that can be reused for additional abuse.

That progression is what makes romance baiting more than a one-off scam. A single successful relationship can produce repeated losses, secondary impersonation, or new fraud attempts against the same victim or their contacts.

Warning signs and why the scam works

Romance baiting succeeds because it exploits predictable human responses: trust, urgency, loneliness, reciprocity, and the reluctance to challenge someone who appears caring. The scammer often controls the pace, creating enough familiarity to disarm the target while avoiding scrutiny.

Warning signs often include refusing live verification, moving the conversation off a trusted platform too quickly, isolating the victim from friends or family, and introducing money-related requests after a short period of unusually intense contact. The pattern is usually less about a single red flag than about a sequence of pressure points.

Fraudsters also benefit from the victim’s desire to preserve the relationship. That makes the scam resilient, because the emotional cost of doubt can feel higher than the apparent risk of continuing.

Risk and Threat Considerations

Romance baiting creates both direct financial exposure and broader personal-data risk. The same manipulation that drives a payment can also lead victims to reveal information that supports account takeover, identity fraud, or follow-on scams.

Failure mechanism: The scammer gradually increases trust, then introduces urgency, secrecy, or emotional leverage to override normal verification behaviour and obtain money or sensitive information.

Impact: Victims can suffer financial loss, compromised personal data, reputational harm, and repeated targeting, especially when the attacker reuses the relationship to extract more value over time.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

MITRE ATT&CK addresses the attack and risk surface, while CIS Controls v8, NIST CSF 2.0 and NIST SP 800-53 Rev 5 set the governance and control requirements practitioners need to meet.

Framework	Control / Reference	Relevance
MITRE ATT&CK	T1566 — Phishing	Romance baiting is a social-engineering deception that manipulates trust to obtain money or data.
Recommendation — Hunt for trust-building deception patterns that precede fraudulent requests or credential/data theft.
CIS Controls v8	CIS-14 — Security Awareness and Skills Training	This scam exploits user trust and social-engineering susceptibility, which awareness controls are meant to reduce.
Recommendation — Train users to verify emotional and financial requests through independent channels.
NIST CSF 2.0	PR.AT-01 — Identity Management, Authentication, and Access Control Awareness	The scam depends on victim judgment and verification failure at the human trust boundary.
Recommendation — Provide awareness guidance that reinforces verification before money, data, or account access is shared.
NIST SP 800-53 Rev 5	AT-2 — Awareness Training	Romance baiting is a human-targeted fraud pattern that awareness training is designed to mitigate.
	SI-4 — System Monitoring	Monitoring can help detect scam campaigns, suspicious account behaviour, and abuse patterns tied to fraud.
Recommendation — Teach personnel to treat unsolicited emotional rapport and money requests as verification triggers. Monitor for repeated contact patterns and suspicious requests associated with social-engineering abuse.

Romance Baiting