CTM360, a cybersecurity analytics company, has released a report highlighting a sharp global increase in online investment scams that promise unusually high returns but are, in reality, fraudulent schemes.
Surge in Scam Activity
According to the report, researchers identified more than 4,200 scam websites promoting fake High-Yield Investment Programs (HYIPs) over the past year.
The problem escalated toward the end of the year, with over 485 scam incidents recorded in December 2025 alone, averaging roughly 15 new scam detections per day.
What These Scams Do
These schemes attract victims with so-called “guaranteed” returns, such as 40% profit in just 72 hours—claims that are unrealistic for any legitimate investment.
Most of these platforms operate like Ponzi schemes, where early investors receive temporary payouts funded by deposits from new victims, creating a false sense of credibility.
Eventually, withdrawals are frozen, and the platforms vanish, taking user funds with them.
Common Scam Types
CTM360 identified two primary categories of HYIP scams:
- Cryptocurrency trading-based HYIPs, which exploit growing interest in digital assets
- Forex or stock trading-based HYIPs, designed to closely resemble legitimate trading platforms
Both types rely on polished website designs, fake performance data, and fabricated testimonials to appear trustworthy.
How Scammers Promote These Schemes
Scammers heavily rely on:
- Paid social media advertising, including Meta/Facebook ads
- Messaging apps such as Telegram and WhatsApp
- Fake social media profiles that promote investment and profit opportunities in multiple languages
Fake Credibility Tactics
To build trust, scam websites often display:
- Forged licenses or regulatory seals
- Fabricated transaction histories
- Fake customer testimonials
In many cases, the same visuals and templates are reused across multiple scam sites.
Referral Incentives and Scam Growth
Many HYIP scams use a referral-based model, encouraging victims to recruit others by offering:
- Referral commissions
- Bonus rewards
This strategy allows scams to spread organically through private networks, beyond paid advertisements.
Payment and Withdrawal Tactics
Victims are typically asked to deposit funds using cryptocurrency, credit or debit cards, or local payment gateways.
When users attempt to withdraw funds, scammers often request KYC documents for “verification”, then proceed to delay or block withdrawals indefinitely.
Predictable Scam Lifecycle
CTM360 notes that these scams tend to follow a consistent pattern:
- Launch a fake platform with bold, flashy claims
- Promote it aggressively through ads and social channels
- Build trust using fake performance metrics
- Encourage deposits and referrals
- Shut down the platform and disappear with the funds
Broader Context: How These Scams Are Expanding
Additional CTM360 research shows that scammers are increasingly using fake news websites—a tactic known as Baiting News Sites (BNS)—to redirect victims to fraudulent investment platforms.
More than 17,000 such fake news sites have been detected worldwide. These sites closely imitate legitimate news outlets and frequently promote crypto-related investment scams, making it even harder for users to tell scams apart from real opportunities.
What This Means for Individuals
Cybersecurity experts stress that:
- No legitimate investment can guarantee high short-term returns with zero risk
- Offers promising large profits while pressuring users to deposit quickly or recruit others are major warning signs
- Investors should always verify platforms independently, check regulatory registrations, and be cautious of opportunities promoted primarily through social media ads
