SCAM
SIMULATOR
Twelve apps. Twelve documented fraud schemes. Every conversation is drawn from FBI IC3 case files, FTC enforcement actions, and DOJ prosecutions. Built by a former federal prosecutor who spent two decades inside these cases.
HOW IT WORKS
Tap any app on the phone to start a simulation. Every app runs a different scam scenario. Make choices as the victim would. At key moments, the tactic behind each manipulation is revealed — what the scammer is doing, why it works, and what the FBI says about it.
A text appears to come from your bank alerting you to suspicious activity. A "fraud specialist" calls back, harvests your CVV and one-time password, and drains your account in under 90 seconds. The IRS contacts taxpayers by mail — never by threatening phone call demanding gift cards.
A text claims your USPS package couldn't be delivered and requests a $1.10 redelivery fee at a fake URL. The real goal is your full card number and CVV. USPS never texts payment links.
A caller claims to be an IRS agent with a badge number, warns of a federal arrest warrant, and demands immediate gift card payment. The IRS contacts taxpayers exclusively by mail first and never accepts gift cards.
A text claims an unpaid toll of $3.85 will result in a $50 fine. The link leads to a fake payment portal. Toll agencies never text payment links — always go directly to your state's official toll site.
You're told you've won $50,000 but must pay a $250 "federal processing fee" first. Fees escalate with each payment. You cannot win a sweepstakes you didn't enter.
An email from "paypa1-alerts.com" warns your account is suspended. Clicking the link leads to a lookalike login page that harvests your password. The scammer relays your credentials to real PayPal in real time, bypassing 2FA.
A fake DocuSign email routes to "docusign-secure.net" and requests your email password, then your Microsoft password, then your SSN — each step building a complete identity theft profile.
You've won $847,500 from a lottery you didn't enter. A $250 processing fee is required, then $1,100 more. Fees escalate indefinitely. The prize does not exist.
A message from "jessica.wellness" displays fake crypto gains and offers to share her method. After building rapport, she introduces an invite-only trading platform with a $500 minimum. The platform is fake; deposits cannot be withdrawn.
A "wrong number" message from Maria leads to friendly conversation, then an introduction to her uncle's private crypto trading group. 47 fake members post fabricated gains. The entry platform (CryptoEdge-Pro) is a fake dashboard that shows rising balances but blocks withdrawals.
A LinkedIn recruiter offers an $85K remote role, skips the interview, sends a real-looking offer letter, then requests a $45 background check fee, a $299 equipment deposit, and finally your SSN and bank routing number for "direct deposit." The company does not exist.
After matching and building emotional connection over days, "Ashley" mentions her asset management work and offers to share a crypto arbitrage opportunity. She introduces QuickTrade Pro — a fake platform with a rigged dashboard showing real-time profits that can never be withdrawn.
A stranger claims a Cash App "processing glitch" multiplies payments 10x. Send $20, get $200. After the first payment, the ask escalates to $50, then $100 sent to a new account. No payment platform has a money multiplication feature. The first payment is the entire scam.
An out-of-town buyer sends a Zelle screenshot for more than the asking price and asks you to refund the difference. The original payment is fake or will reverse. Sending the "refund" means sending your own real money. Never accept overpayment; always meet buyers in person for cash.
A link in a text leads to a pixel-perfect fake Chase login page at "chase-secure-verify.com." After entering your password, a 6-digit code is requested — which the scammer uses in real time on the real Chase site. Wire transfers initiate within 4 minutes. Chase's real site is chase.com only.
A FaceTime call uses an AI-cloned voice of your son saying he's been arrested and needs $3,200 bail by tonight. An "attorney" takes over the call. The instruction not to tell anyone is the key tell. Hang up and call your family member directly on their known number. Establish a family code word.
A caller spoofing Verizon's real number claims someone is trying to steal your number and needs your SSN last 4, billing zip, and account PIN to stop it. A verification code is requested to "block" the transfer — but reading it back completes the transfer. Once scammers have your number, they reset your email and bank passwords using SMS codes in under 8 minutes. Set a carrier PIN that is NOT your SSN and switch to authenticator app-based 2FA.
KNOW THE PATTERNS. PROTECT THE PEOPLE YOU LOVE.
Share this simulator with family members, especially those most targeted by these scams — parents, grandparents, anyone recently on a job search or dating app.
FREQUENTLY ASKED QUESTIONS
Is this simulator free?
Yes. The Fraud Codex simulator is completely free, requires no account, and collects no personal data.
Are these real scams?
Every scenario is drawn directly from FBI IC3 complaint data, FTC enforcement actions, DOJ press releases, or documented case filings. Nothing is hypothetical. The dollar figures cited are from official government reports.
Who built this?
The Fraud Codex was built by a former federal prosecutor with nearly two decades at the U.S. Attorney's Office for the Southern District of Florida, where she led cybercrime, digital assets, and IP enforcement units.
What scams does the simulator cover?
Bank impersonation via SMS (smishing), USPS package delivery scams, IRS tax lien threats, toll road smishing, fake prize and lottery scams, PayPal phishing, DocuSign credential attacks, pig butchering on Instagram and WhatsApp, LinkedIn job scams, Tinder romance fraud, Cash App money flip fraud, Facebook Marketplace overpayment, fake Chase bank login with MFA relay attack, AI voice clone grandparent scam, and SIM swap carrier fraud.
How do I report a scam?
Report fraud to the FTC at ReportFraud.ftc.gov. Report internet crimes to the FBI at IC3.gov. If you've lost money, also contact your bank immediately to attempt reversal.
What is pig butchering?
Pig butchering (also called sha zhu pan) is a long-con investment scam originating from organized crime syndicates in Southeast Asia. Scammers build emotional relationships with victims over weeks or months on dating apps or messaging platforms, then introduce a fake cryptocurrency trading platform showing fabricated profits. When victims try to withdraw, they are asked to pay escalating fees. The FBI reported $3.3B in crypto romance scam losses in 2023.
What is a SIM swap attack?
A SIM swap occurs when a scammer convinces your cell carrier to transfer your phone number to a SIM card the scammer controls. Once they have your number, they receive all SMS messages including two-factor authentication codes, allowing them to reset passwords for your email, bank, and other accounts. The FBI reported $68M in SIM swap losses in 2023. To protect yourself, set a carrier account PIN and switch to authenticator app-based 2FA.