Search papers, labs, and topics across Lattice.
This study conducts a comprehensive analysis of online scam scenarios by creating a hierarchical taxonomy that categorizes 18 distinct scam scenarios into 6 high-level tactics based on their embedded psychological techniques (PTs). By leveraging a dataset of over 102,000 real-world scam reports, the authors reveal significant associations between specific PTs and scam scenarios, highlighting how scammers strategically organize their operations to maximize victim engagement and financial gain. The research culminates in a novel conversation-aware detection system that enables financial institutions to identify and respond to scams in real-time, enhancing protective measures against these pervasive threats.
Scammers exploit a systematic taxonomy of 18 scenarios, revealing how psychological techniques are strategically deployed to maximize their impact.
Online scams have become a pervasive global threat, causing substantial financial, psychological, and operational harm. Scammers embed psychological techniques (PTs) within reusable operational schemes to scale scam campaigns with minimal adaptation. However, existing studies often analyze PTs as isolated features, overlooking the recurring scam scenarios in which they are systematically deployed. To address this gap, we first conduct a large-scale empirical study to jointly characterize scam scenarios and their associated PTs. Specifically, we develop a data-driven pipeline to derive a hierarchical taxonomy of scam scenarios, consisting of 18 fine-grained scenarios grouped into 6 high-level tactics based on their PT profiles. Furthermore, to transfer this scenario-level knowledge to practical defense, we design a conversation-aware scam scenario detection approach for financial-institution customer interactions, enabling timely warning and intervention. Our study on 102,054 real-world scam incident reports, spanning 2024-02-01 to 2025-10-31, reveals that PT usage is significantly associated with scam scenarios. We further show that scammers organize scenarios around different operational goals, such as broad victim exposure, high victim conversion, and high-value extraction, and reuse infrastructure, including IP addresses, domains, email addresses, and phone numbers, to launch coordinated campaigns at scale. Evaluation on
