foster-romance-scam — Bumble-to-payment grooming
Natalie Foster matched James Cole on Bumble; chat moved to WhatsApp and Telegram with fake military contractor persona. Venmo and Cash App payment trail ($11k) plus A1111-parameter profile PNG. Fully synthetic.
what this proves
- all eight romance-scam primary engines produce deterministic, fixture-locked output — verified by
npm run check:flagship(280/280 fleet · 8 for this scenario). - every output is generated 100% locally in your browser — backups and chat exports never upload.
- bumble match metadata, whatsapp and telegram grooming timeline, venmo and cash app payment trail, and a1111 profile png signals surface without sending evidence to a server.
primary engines locked to this fixture
- ios-dating-app-artifact-forensic-extractor
- ios-whatsapp-artifact-forensic-extractor
- android-whatsapp-database-forensic-analyzer
- ios-telegram-artifact-forensic-extractor
- android-telegram-database-forensic-extractor
- ios-cash-app-artifact-forensic-extractor
- ios-venmo-artifact-forensic-extractor
- ai-generated-image-provenance-analyzer
build the case binder
runs all eight primary engines on the synthetic evidence zip and opens a self-contained html binder. uses the default binder renderer for romance scam — no upload.
runs all 8 primary engines locally on the synthetic evidence zip · opens a self-contained html binder · no upload
download the synthetic evidence
MIT-licensed, fully synthetic. includes bumble connections sqlite, whatsapp ChatStorage and msgstore.db, telegram ios and android dbs, cash app and venmo sqlite, military profile png with a1111 parameters, and case summary.
built deterministically from scripts/fixtures/build-foster-romance-scam.mjs. seed: foster-romance-scam:v1.
methodology
romance scams are phone-first — anchor the dating match, extract whatsapp and telegram before chat sides go quiet, pair cash app with venmo for the send pattern, then run the profile png through provenance last. read the full romance scam guide →
after the playbook
run each primary locally — or export findings from the binder — then drop every csv/json into fatcousin-multi-tool-super-timeline-correlator. one timestamp-sorted timeline across bumble match, whatsapp and telegram grooming, and venmo with cash app sends — still zero upload.