The One Who Wrote to You Every Morning
Marina is forty-two. She works as an accountant and lives alone in a small town. Her story is made up, but it is built from details that come up again and again.
It started with a mistake. A message arrived on her phone: "Anna, will you be at the meeting tomorrow?" Marina replied that her name wasn't Anna. The sender apologised, politely and a little sheepishly, introduced himself as Dmitry, and made a joke about how absent-minded he was. Somehow, the conversation kept going.
A week later they were writing to each other every day. Dmitry wished her good morning, sent photos of the sea from his work trip, and asked how her report had gone. He remembered her cat's name and that Wednesdays were always hard for her. And he was never in a hurry. That was what won her over most of all.
A month of trust, then one request
About a month in, Dmitry mentioned in passing that he traded a bit of crypto. His uncle worked as an analyst and sometimes tipped him off about good moments to buy. Marina didn't ask for details. It was Dmitry who suggested she start with a small amount, and he promised to guide her.
She bought some USDT and signed up on a platform through his link. The site looked solid, with charts, a personal account page and a support chat. The next day her balance had gone up. A week later it had gone up again. Marina even withdrew a small amount, and the money arrived. Later, that first withdrawal was what she remembered as the most convincing part.
From there, the amounts only grew. Dmitry was so genuinely happy about her success that stopping felt awkward. Marina transferred her savings, then took out a loan. The numbers on her account page climbed, smooth and steady.
When she tried to withdraw everything, support told her about a "withdrawal tax." It had to be paid separately, again in USDT, to an address they provided. Dmitry was sympathetic and told her to pay it: "That's how it works for everyone. I paid it too." Once she paid, a "account verification fee" appeared. Then Dmitry stopped replying.
This kind of scheme has a brutal name: "pig butchering." The victim is "fattened up" for weeks with attention, care and small wins, and then everything is taken at once. The scammer spends all that time making sure that the request for money sounds like part of a friendship, not like a stranger asking for cash.
A small detail that's easy to miss
There were plenty of warning signs in Marina's story. A message sent to the wrong person. Someone who never once agreed to a video call. A platform you couldn't find anything about except its own website. But each of these is easy to explain away once someone matters to you.
There was also a simpler detail, one with no feelings attached: the wallet address.
Every time she topped up her "account," Marina copied a long string from her account page, something like TXk4…9qPm, and sent USDT to it. To her it was just a technical detail, like a contract number. It never occurred to her that an address has a history, and that you can look at it before you send anything.
Addresses used in schemes like this are often already known. Other people have sent money to them, and they have been flagged as linked to fraud. As of 7 October 2026, our database held more than 27,000 such addresses. An unfamiliar wallet isn't necessarily dangerous. But if the "platform's" address is in the database, that tells you more than anything Dmitry could say.
What would have changed if Marina had checked the address before her first top-up? Possibly nothing: a new wallet might still have had a clean record. Or possibly everything. She might have seen a warning before the loan and the "tax," while the amount was still small and her feelings weren't yet clouding her judgement. Checking an address doesn't mean doubting the person. It simply shows you the facts about the wallet, and a wallet doesn't care who has been talking to you, or how kindly.
What you can do today
If someone is asking you to send USDT, even a very small amount, copy the recipient's address before your next transfer and check it at guardpay.online/check. It takes a couple of minutes. You don't have to accuse anyone or end the conversation. Just look at what is known about that wallet.
If you have already sent money, the blockchain shows which addresses it moved to next. That does not tell you who is behind them, and only an exchange or a court can return the funds. But the chain of transfers will help when you report it to the police or to the exchange.
If you recognised yourself in Marina, there is nothing to be ashamed of. These schemes are designed for people who know how to trust and who respond to kindness. That isn't a weakness. What matters is that your trust in a person doesn't extend to the string of characters they ask you to copy.