Romance Scams and Dating App Fraud: How Small Businesses Protect Their Staff

Why a 'personal' scam is a business problem

Romance scams look like a private matter: someone meets a match on a dating app, the conversation moves fast, and weeks later money changes hands. But scammers do not care where the money comes from. An employee under emotional pressure who has access to company payments, payroll or customer data is a far more valuable target than an ordinary victim.

The same playbook also feeds classic business fraud. The skills a scammer uses to build trust over weeks are exactly the skills behind CEO fraud and fake supplier invoices. A team that can spot one is better at spotting the other.

How dating app scams usually unfold

Most cases follow a recognisable script. The match is attractive, attentive and quickly suggests moving the chat off the dating app to WhatsApp, Telegram or another private channel, where the platform's safety tools no longer apply.

Then comes a reason they cannot meet: working abroad, on an oil rig, in the military, travelling for a deal. Eventually a crisis appears that only money can solve, or an 'investment opportunity' they have personally profited from.

• Very fast declarations of feelings
• Pressure to leave the dating app for a private messenger
• Repeated excuses for not meeting or video calling
• Requests for gift cards, crypto, wire transfers or 'temporary' loans
• Investment tips, often crypto trading platforms you have never heard of
• Requests to receive and forward money (this can make the victim a money mule)

Where company accounts get dragged in

The direct risk is money: an employee who has drained their savings may be tempted to borrow from the business, or be pushed to. The quieter risk is access. Scammers ask victims to install 'trading apps', screen-sharing tools or browser extensions that give them a foothold on whatever device the victim uses, which is often a work laptop.

There is also the money mule angle. Victims are sometimes asked to receive funds and pass them on. If that happens through a business account, the company can end up tangled in a fraud investigation.

A simple policy that actually helps

You do not need to police anyone's love life. You need clear lines on work devices and money, plus a culture where people can ask for help without shame.

Keep it short enough that people remember it, and repeat it in onboarding and your regular security reminders.

• Personal dating and social apps stay off company laptops
• No remote-access or screen-sharing tools installed without IT approval
• Any request to move money is verified by a second person through a known channel
• Staff never use business accounts to receive or forward money for personal reasons
• Anyone can report a suspicious contact confidentially, with no blame

Training that works without being awkward

Frame romance scams as one example of social engineering, alongside phishing and fake invoices. People engage more with real stories than with slides, so walk through a typical scam conversation and ask the team to spot the moment it turns.

Short, regular reminders beat a single annual session. Security awareness platforms can automate this with simulated phishing and short lessons, which helps a small business that has no dedicated security staff.

What to do if an employee has been targeted

Start with empathy. Victims often feel embarrassed, and that embarrassment is what keeps scams going. Thank them for coming forward, then move quickly on the practical side.

Check whether any work device or account was involved, reset passwords, review recent payments, and remove any software the scammer asked them to install. Point them to their bank and to your country's fraud reporting service, and keep a record of messages, usernames and payment details.

The bottom line

Dating apps are where many people meet partners today, and most matches are real. The goal is not fear, it is awareness: knowing the script, keeping work devices clean, and making it easy to say 'something feels off' before money or credentials leave the building.