These are patterns of behaviour, not personality types or diagnoses of people. Scenarios are hypothetical learning examples, not real incidents. Research and source-review limits are preserved from the dated Hebrew original.
What happens
Fraud planned as a project: well-organised documents, polished answers and references prepared in advance.
Warning sign
Documents, licences or recommendations look credible but cannot be verified independently, or the other party obstructs such a check.
Safer action
Verify licensing, registration and addresses independently. Speak to references separately and ask a question the script did not anticipate.
Hypothetical illustration: the person who never rushes
They do not pressure you. In the first meeting they reassure you: "No problem, think about it." Their documents are well organised, their answers polished, and they know exactly which form is needed at each stage and why. When someone hesitates, they suggest speaking to others who worked with them, and have names ready. Only after signing does it emerge that the names, forms and patience were part of the same machine.
The Professional may seem like the most trustworthy person in the room because appearing credible is part of the method.
How the pattern works
The fraud is built as a project: prior knowledge of the target, prepared answers to objections, and a setting made of websites, documents or references. Trust serves the financial request. These are things to examine, not conditions every scam must meet.
From an investigator's perspective
The key distinction is planned versus opportunistic: advance purchases, target selection, repeated sequences and reused infrastructure, rather than a one-off opportunity [2]. Infrastructure such as domains, references and accounts can be the strongest evidence because it was built before the first meeting with the victim.
Possible explanations for the behaviour
This is a possible interpretation, not a diagnosis of a person. Where there is no evidence of thought or intent, these remain hypotheses.
The fraud diamond adds capability to pressure, opportunity and rationalisation: a position enabling the fraud, knowledge of the system and influence over others [7]. This is a conceptual occupational-fraud model, not a test for identifying offenders. Neutralisation techniques offer a way to examine justifications [8], not knowledge of what a particular person tells themselves without evidence.
What research shows
- Prior criminal connections: in the Police Foundation report's 25 serious UK fraud investigations, at least ten included offenders with prior links to serious crime. They generally planned and coordinated and received most illicit proceeds [2]. This is not an estimate of "professionals" in the population.
- A clean record is not proof of trustworthiness: in the Utica study, 517 cases and 933 defendants, 71% of offenders with available arrest data had no arrest history [3]. This describes recorded history only, not how carefully the current offence was planned.
- An internal discrepancy: the paragraph and Figure 15 give 922 defendants with arrest data, 655 without a history. Table 19 gives 859, with 602 without a history. This is about 71% in the paragraph and 70% in the table [3]. Both sets of figures are shown here rather than choosing one without a basis.
- Persuasion can be analysed: Stajano and Wilson propose seven principles, including apparent authority and time pressure. This is an analytical framework, not a ranking of scammers' talent [6].
What the research cannot tell us
There is no basis for saying most scammers are professionals: the samples contain detected offenders only. Conversely, no arrest history does not prove a one-time offender and certainly does not establish trustworthiness. No study here lets us recognise a professional by appearance, clothing or politeness.
What to do
- Polished professionalism is not evidence. Verify the licence, registration and address in independent sources.
- References? Get their details and speak separately. Ask something the script did not anticipate.
- Efficiency and well-organised paperwork are not, by themselves, signs of fraud. If a document or recommendation cannot be independently verified, or someone obstructs checking, stop and clarify before proceeding.