Added to an “investment group”? Other members’ profits may be part of the script
Free lessons, a mentor and profit screenshots are designed to build trust. Learn why an unknown WhatsApp or Telegram group is not an investment reference.
- AUTHOR
- Karol Rapacz / CEO of Breachroad · OSCP · PNPT
- PUBLISHED
- 14 September 2026
- READING TIME
- 8 min read
- TOPIC
- Human Security
You open WhatsApp or Telegram and find a new group. An “expert” posts short market lessons every day, members share screenshots of impressive returns and beginners are offered free coaching. Nobody immediately demands a large payment. First, the group needs to feel like a community worth joining.
Unknown people in that chat are not independent witnesses. An administrator can control several accounts, remove awkward questions and display only stories that support the sale. A busy conversation does not turn a closed group into reliable financial evidence.
The scam grows slowly
The first proposal may be small. You register on a recommended site or app, deposit a modest amount and see a profit. You might even receive a small withdrawal. That does not prove the investment exists. It can be used to lower your guard before a much larger transfer.
Then comes a “premium opportunity”, a bonus for acting quickly or pressure not to fall behind the group. When you try to withdraw, the system demands tax, a verification fee, an account upgrade or another deposit. A legitimate investment does not restore access to your money by asking you to send more to an unfamiliar account.
The most important screen is therefore not the profit chart. It is the record of real transfers leaving your bank.
Check the offer without debating the group
Do not use the link, phone number or certificate supplied by the “mentor”. Find the organisation independently and check whether it is authorised to offer the product in your country. Use the regulator’s own register and warning list, not a badge or link shown in the chat.
Verify the full legal name, jurisdiction, address and the person who supposedly represents the firm. A polished logo, an app listed in an official store and a document called a “certificate” do not replace regulatory authorisation. Testimonials inside the same group are not verification either.
If the pitch relies on guaranteed returns, a secret strategy, no risk or an offer that ends today, you do not need to prove it is a scam. You only need to withhold your money.
If you have already transferred money
Do not pay another “withdrawal release fee”. Contact your bank immediately and provide the destination accounts, dates, amounts and how the payments were approved. Preserve the chat history, profile names, website address, receipts and payment instructions. Capture the evidence before alerting an administrator who can delete the group.
Report the website and fraud through the relevant national cybercrime or police channel. If you installed an app at the group’s request or shared your screen, tell your bank and whoever is helping with the response. Do not hide it for fear of judgement; complete information makes it easier to protect the account.
Treat later offers to “recover” the investment with equal caution. Knowledge of the first loss can be used to target you again.
One privacy setting can reduce unsolicited invitations
Messaging apps let you restrict who may add you to groups. The wording varies, but the option is normally under privacy settings for groups or invitations. It cannot assess an investment for you, but it prevents strangers from placing you without permission inside a ready-made theatre of social proof.
At work, similar groups may tempt staff with financial education, employee investment schemes or a side income. People need to know where to report these invitations and that a private financial loss is not a reason to conceal a related security incident.
What the source confirms and what Breachroad recommends
On 4 June 2026, the Singapore Police Force described investment scams built around chat groups offering free education. It recorded at least 48 cases and at least S$3.6 million in losses since May. In the reported pattern, an advert led to a WhatsApp group, fake mentors and members displayed supposed gains, and victims paid through fraudulent sites or apps. These figures concern Singapore and do not measure the problem in other countries.
Breachroad’s conclusion is that social proof inside a channel controlled by the seller is not independent evidence. Verification must move outside the group, to an official regulator, your own bank and contact details you found yourself. A slower version of the same trust-building mechanism appears in romance investment scams. Organisations can prepare staff to recognise pressure and unusual payments through cybersecurity awareness training.


