Romance Scammer Stole $10M by Weaponizing Trust

CyberScoop · Medium sophistication
Last updated July 30, 2026

U.S. prosecutors said Derrick Van Yeboah ran long-running romance scams by posing as fake romantic partners online and persuading mostly older, vulnerable victims to send money. In one example, he claimed he needed funds for his mother’s funeral and to recover “imaginary gold and diamonds” from storage in Italy, leading a victim to send $123,000.

How the attack worked

Prosecutors described a long-running scheme in which a Ghanaian national impersonated romantic partners online and interacted with victims for close to nine years, from February 2015 to October 2024. Rather than relying on a single fast-moving lure, the operation built relationships over time, establishing trust before introducing financial requests. Once that trust was in place, the scammer introduced fabricated emergencies designed to feel urgent and personal, such as needing a loan for a mother's funeral expenses or fees to recover gold and diamonds held in overseas storage. In one documented case, this pretext led a victim to send $123,000.

Why it succeeded

The scheme worked because it exploited an emotional relationship rather than a technical vulnerability. Victims believed they were helping someone they cared about, not responding to a stranger's request. The overseas valuables story added a sense of legitimacy and complexity that discouraged questioning, while the funeral request appealed directly to empathy. Some victims went further than sending money themselves: they were persuaded to create companies that were then used to unwittingly launder funds taken from other victims, turning trusting individuals into unintentional participants in the fraud.

What to watch for

Defenders and awareness programs should highlight these patterns:

  • A person known only through an online or dating platform asks for money, especially with urgency
  • Requests tied to emotionally charged events like funerals or medical crises
  • Elaborate stories involving overseas storage, fees, or valuables such as gold and diamonds
  • Being asked to create a company, open an account, or move money on someone else's behalf
  • Pressure to treat the relationship or request as private and time-sensitive

Building resistance

Organizations can reduce harm from this pattern by training employees, especially those who may be more socially isolated or active on dating and social platforms, to recognize that any online relationship requesting money is a serious warning sign. People should be encouraged to pause and verify through trusted, independent channels before sending funds or agreeing to financial favors for someone they have not met in person. Awareness efforts should also make clear that creating a company or moving money for an online contact can turn a victim into an unwitting money mule. Finally, because romance scams can cause both financial and emotional harm, including loss of retirement savings and distress upon discovering the relationship was fraudulent, support resources and early reporting channels matter as much as prevention messaging.

Key findings

  • A Ghanaian national was sentenced to 85 months for stealing more than $10M from romance-scam victims.
  • Prosecutors said he impersonated romantic partners and interacted with victims online for about nine years (Feb 2015 to Oct 2024).
  • Victims were manipulated into sending money and, in some cases, creating companies to unknowingly launder funds from other victims.
  • A specific lure described in court records included a request for a loan for funeral expenses and money to remove “imaginary gold and diamonds” from storage in Italy.

Who’s being targeted

  • Commonly targeted roles: All employees, Executives, Finance, HR (employee wellbeing/EAP partners), Customer support or member services (if applicable).
  • Affected industries: Individuals/Consumers (especially older adults), Financial services and money transfer ecosystems.
  • Attack channels: website.
  • Impersonated: A romantic partner (online persona) claiming a family emergency, A romantic partner (online persona) directing financial steps.

Red flags to watch for

  • A person you only know online asks for money urgently
  • A story involving overseas storage/fees for valuables like gold or diamonds
  • Pressure to treat the request as private and time-sensitive
  • Someone you met online asks you to create a company or open accounts for them
  • Requests to move money on someone else’s behalf
  • The rationale is vague (“to move money safely”) and doesn’t fit normal business needs
Try Mirage

Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.

Get a demo

Frequently asked questions

How did the romance scammer convince victims to send money?

He posed as a romantic partner online for years, then fabricated emergencies like funeral expenses and fees to recover valuables held overseas to pressure victims into sending funds.

Did victims only lose money, or were they used in other ways?

Some victims were also manipulated into creating companies that were then used to unwittingly launder funds from other victims.

How long did this scam operation run?

Prosecutors said the scammer impersonated romantic partners and interacted with victims online from February 2015 to October 2024, about nine years.

What red flags should people watch for in online relationships?

Urgent money requests, stories involving overseas storage fees for valuables like gold or diamonds, and pressure to keep the relationship or request private and time-sensitive are common warning signs.

Read the video transcript

Someone just got 85 months in prison for stealing over $10 million by pretending to be people’s online boyfriend or girlfriend. For nine years he posed as romantic partners online, then dropped messages like, “I hate to ask, but I need a loan for my mother’s funeral… and to get gold and diamonds out of storage in Italy.” One victim sent $123,000. Here’s the twist: some victims were even convinced to create companies to 'help move money safely', they were actually laundering cash for other victims without realizing it. Aha moment: the second an online relationship asks for money or to move money, treat it as a scam until proven otherwise, pause, don’t send, and report it to Security or HR.

Similar attacks