romance scam — quick-start

checklist

1. stop all further money transfers — any new 'emergency' request, 'customs fee', or 'release tax' is the scam continuing.
2. screenshot the dating or social media profile — photo, name, bio, and profile URL — before it is deleted.
3. export the full message history from the app or platform if possible (email, WhatsApp export, screenshots with timestamps).
4. record every payment made: date, amount, method (wire, Zelle, gift card, crypto), and the recipient account or address.
5. photograph gift card receipts or codes sent, or record the crypto wallet address that received funds.
6. pull the dating profile photo through a reverse image search (Google Lens, TinEye) — most scammers use stolen images.
7. check the phone number used against known scam databases and WHOIS if messaging was via SMS.
8. file at ic3.gov — include the platform, amounts, and all payment reference numbers.
9. contact your bank about the wire transfers — note the initiation dates for recall window purposes.
10. begin the primary tool path below — romance scam timeline builder and photo forensics analyzer.

primary tools

1. 01ios dating app artifact forensic extractor (Tinder, Bumble, Hinge)drop iOS dating app database files (Tinder, Bumble, or Hinge) · auto-detect app · parse match records, messages, and profile metadata · surface match timestamps, screenshot alerts, and own location from account plist · detect confirmed real-world meetings (Hinge We Met) · runs locally
2. 02iOS WhatsApp artifact forensic extractordrop iOS WhatsApp ChatStorage.sqlite and Contacts.sqlite · parse all chats, messages, groups, and media references · reconstruct conversation timelines with delivery status · surface location shares, contact cards, and deleted message placeholders · runs locally
3. 03android whatsapp database forensic analyzerdrop an Android WhatsApp msgstore.db · parse all messages, chats, groups, and media metadata · reconstruct conversation timelines · surface message delivery status, forwarding metadata, location shares, and contact cards · detect deleted message gaps · runs locally
4. 04ios telegram artifact forensic extractordrop cache4.db or account db · parse chats messages channels · forwarding edits tombstones · disappearing timers · mid gap analysis · runs locally
5. 05android telegram database forensic extractordrop Android Telegram database files · parse messages, chats, channels, and contacts · extract forwarding metadata, edit timestamps, and media references · surface disappearing message timer settings · detect deleted message ROWID gaps · reconstruct Telegram communication timeline · runs locally
6. 06ios cash app artifact forensic extractordrop iOS Cash App database files from the app container · parse transaction records, payment notes, and account artifacts · surface payment amounts, counterparty Cashtags, and timestamps · detect suspicious payment patterns and structured transactions · runs locally
7. 07ios venmo artifact forensic extractordrop iOS Venmo database files from the app container · parse payment records and transaction notes · surface audience settings (public/friends/private) · surface social feed likes and comments on transactions · reconstruct Venmo financial and social activity timeline · runs locally
8. 08ai generated image provenance analyzerpng tEXt chunk inventory · sd metadata · stripped metadata flag · provenance csv · runs locally

go deeper