Advance-Fee, Ponzi and Pyramid Schemes
Advance-fee, Ponzi, and pyramid schemes are three of the most common consumer frauds studied by Certified Fraud Examiners (CFEs). Although they differ in structure, each relies on deception, false promises, and the victim's willingness to part with money in anticipation of a larger future benefit. Advance-Fee Schemes: In an advance-fee fraud, the victim is persuaded to pay money up front in exchange for something of greater value—such as a loan, prize, inheritance, lucrative contract, or job—that never materializes. Classic examples include the '419' or 'Nigerian letter' scam, fake lottery winnings requiring 'processing fees,' and bogus loan brokers charging application fees. The fraudster disappears once the fee is paid, or continues inventing new fees (taxes, legal costs, bribes) as long as the victim keeps paying. Red flags include unsolicited offers, pressure to act quickly, requests for wire transfers or gift cards, and promises that seem too good to be true. Ponzi Schemes: Named after Charles Ponzi, these are investment frauds in which returns paid to earlier investors come not from legitimate profits but from the capital of newer investors. The operator typically promises unusually high, consistent returns with little risk and controls all the funds. The scheme collapses when new investment slows or many investors try to withdraw at once. Bernard Madoff's fraud is the best-known modern example. CFEs look for unregistered investments, secretive strategies, difficulty receiving payments, and returns that do not fluctuate with the market. Pyramid Schemes: Pyramid schemes recruit participants who pay to join and are then compensated primarily for enrolling others rather than for selling genuine products or services. Because each level requires exponentially more recruits, the structure is mathematically unsustainable and the majority at the bottom lose money. They are often disguised as multi-level marketing; the key distinction is whether income derives mainly from recruitment fees rather than retail sales. Understanding these schemes helps CFEs detect, investigate, and prevent consumer fraud.
Advance-Fee, Ponzi and Pyramid Schemes: A Complete CFE Exam Guide
Advance-fee, Ponzi and pyramid schemes sit at the heart of the Consumer Fraud chapter within the Fraud Schemes section of the CFE Exam. They are among the oldest, most durable and most financially damaging frauds in existence. Ponzi schemes alone have cost investors tens of billions of dollars (Bernard Madoff's collapse in 2008 involved roughly $65 billion in fictitious account balances), and advance-fee scams such as the '419' letter continue to victimise consumers worldwide every day.
For the exam, this topic is important for three reasons:
1. The ACFE tests these schemes frequently because they are classic, well-defined and easy to build scenario questions around.
2. The three schemes are commonly confused with one another, and examiners deliberately exploit that confusion, especially Ponzi versus pyramid.
3. The topic connects to other exam areas: investment fraud, securities regulation, multi-level marketing (MLM), money laundering and the psychology of victimisation.
Fraud examiners must be able to recognise the structural features of each scheme, explain why each one inevitably collapses, identify red flags, and distinguish illegal schemes from legitimate business models such as lawful MLM companies.
Part 1: Advance-Fee Schemes
What it is
An advance-fee scheme is a fraud in which the victim is persuaded to pay money up front in anticipation of receiving something of significantly greater value later (a loan, a prize, an inheritance, a contract, a job, a share of hidden funds). The promised benefit never materialises. The 'fee' is the fraud; the promised payoff is the bait.
How it works
1. The hook: the victim is contacted (letter, email, phone, social media, text) with an attractive offer that appears to require little effort.
2. The justification: the fraudster explains that a small payment is needed first, framed as a processing fee, tax, legal fee, transfer charge, insurance premium, customs duty, bribe to an official, or 'good faith' deposit.
3. Escalation: once the victim pays, new 'unexpected' obstacles arise requiring further fees. Fraudsters exploit the sunk-cost fallacy: having already paid, victims keep paying to protect their earlier investment.
4. Disappearance: when the victim stops paying or becomes suspicious, the fraudster vanishes, often reselling the victim's details to other scammers (leading to 'recovery room' or reload scams).
Common variations the exam expects you to know
- Nigerian letter / 419 fraud: named after Section 419 of the Nigerian Criminal Code. The victim is asked to help transfer a large sum of money (unclaimed inheritance, over-invoiced contract, deposed official's fortune) out of a country in exchange for a percentage. Fees for bank charges, bribes and legal documents are demanded.
- Advance-fee loans: the victim, often with poor credit, is 'guaranteed' a loan or credit card provided a fee is paid first. Legitimate lenders do not guarantee approval or demand fees before approval.
- Lottery and prize scams: the victim has 'won' a lottery or sweepstakes they never entered and must pay taxes or processing fees to release the winnings.
- Inheritance scams: a 'lawyer' or 'bank official' reports that a distant relative has died, leaving money that requires fees to release.
- Work-from-home and job offer scams: fees for training kits, background checks, equipment or certification.
- Recovery scams (also called reloading): a prior victim is contacted by someone claiming to be a law enforcement officer, lawyer or recovery agency who can recover lost funds for an up-front fee.
- Romance scams often evolve into advance-fee demands (travel costs, medical bills, customs fees on a gift).
- Business opportunity and government grant scams: fees to access 'free' government money or exclusive franchises.
Red flags of advance-fee fraud
- Unsolicited contact offering a large benefit.
- Requirement to pay before receiving anything.
- Urgency and secrecy ('tell no one', 'act today').
- Payment via untraceable methods: wire transfer, prepaid cards, gift cards, cryptocurrency, money service businesses.
- Official-looking but flawed documents, spelling errors, free webmail addresses.
- Fees that keep multiplying.
Part 2: Ponzi Schemes
What it is
A Ponzi scheme is an investment fraud in which returns paid to existing investors are funded not by any genuine profit but by the capital contributed by new investors. The scheme is named after Charles Ponzi, who in 1919-1920 promised Boston investors a 50 percent return in 45 days (or 100 percent in 90 days) supposedly by arbitraging international postal reply coupons. He collected approximately $15 million from about 40,000 investors before the scheme collapsed in August 1920.
How it works
1. The promoter offers an investment with returns that are unusually high, unusually consistent, or both, often described as exclusive, proprietary or low-risk.
2. Early investors receive the promised returns, which are simply paid out of their own money or money from newer investors. This creates credibility and word-of-mouth promotion.
3. Satisfied investors reinvest (so little cash actually leaves the scheme) and recruit friends and family, though recruiting is not required of them.
4. The promoter maintains the illusion through fabricated account statements, fictitious trading records and a plausible but vague investment story.
5. The scheme requires an ever-growing inflow of new money. It collapses when new investment slows, when a large number of investors try to redeem simultaneously (often during a market downturn), or when regulators or whistleblowers intervene.
Key characteristics
- A central operator controls all funds and all communications.
- There is usually no real underlying business, or the business is trivial compared to the money raised.
- Investors are generally passive; they do not need to recruit others to earn returns.
- The promoter typically knows and interacts with all investors (at least in the early stages).
- Returns are often 'too consistent', e.g. steady monthly gains regardless of market conditions (Madoff's hallmark).
- Investments are frequently unregistered, sold by unlicensed individuals, and accompanied by secretive or complex strategies.
- Paperwork is irregular; investors have difficulty obtaining documentation or withdrawing funds; they are pressured to 'roll over' rather than cash out.
- Affinity fraud is common: the promoter targets a religious, ethnic, professional or community group to exploit trust.
Why it must collapse
Because no (or insufficient) genuine profit exists, total liabilities (promised returns) always exceed total assets. The gap widens with every payment to investors. Mathematically, the scheme can only survive as long as new deposits exceed withdrawals plus promoter skimming. Eventually that condition fails.
Part 3: Pyramid Schemes
What it is
A pyramid scheme is a fraud in which participants pay money (an entry fee, a 'training' charge, or a required product purchase) for the right to recruit others, and compensation is derived primarily from the recruitment of new participants rather than from the sale of products or services to genuine end-users.
How it works
1. The founder recruits a first tier of participants, each of whom pays to join.
2. Each participant is told that if they recruit a set number of people (e.g. six), and those people each recruit six more, commissions or bonuses will flow upward and they will earn far more than they paid.
3. Money paid by new recruits is passed up the chain to those above them, with the founder taking the largest cut.
4. The structure demands geometric growth. With six recruits per person, level 1 is 6 people, level 2 is 36, level 3 is 216, level 9 exceeds 10 million, and by level 13 the required participants exceed the population of the Earth. Saturation guarantees that the vast majority of participants (those in the bottom tiers, typically 90 percent or more) lose money.
Types
- Naked pyramid (no product): pure money transfer; e.g. 'gifting clubs', 'airplane games', chain letters that ask recipients to send money to names on a list. These are illegal everywhere.
- Product-based pyramid: a product exists but it is a disguise. Revenue comes from distributors buying inventory to qualify for bonuses (inventory loading), not from retail sales to the public. Products are often overpriced, of little value, or 'sold' only to recruits.
Pyramid schemes versus legitimate multi-level marketing (MLM)
This is one of the most heavily tested distinctions. Legitimate MLM companies (direct-selling firms) also use multi-tier compensation, but their revenue is driven by retail sales of real products to actual consumers. Factors that indicate an illegal pyramid include:
- Compensation is tied primarily to recruitment rather than to product sales to end-users (the Koscot test, from the 1975 US FTC case In re Koscot Interplanetary, asks whether participants pay for the right to recruit and receive rewards unrelated to retail sales).
- Large up-front entry fees or required purchases of inventory, training or marketing materials.
- Inventory loading: participants must buy large quantities of product to qualify for commissions.
- No meaningful retail sales to non-participants; most product is consumed within the network.
- No reasonable buy-back policy for unsold inventory (legitimate companies often repurchase at 90 percent of cost).
- Headhunting fees paid merely for signing up recruits.
- Legitimate MLMs often follow the '70 percent rule' (distributors must sell or consume at least 70 percent of prior inventory before reordering) and the '10 customer rule' (sales to a minimum number of retail customers).
Part 4: Ponzi versus Pyramid - The Critical Comparison
Both schemes depend on new money to pay earlier participants and both collapse when recruitment stalls. The exam, however, expects you to separate them cleanly:
Source of payouts: Ponzi - the central promoter pays investors from new investors' deposits. Pyramid - payments move up through the tiers from the recruits each participant brought in.
Role of participants: Ponzi - passive investors; they need not recruit. Pyramid - participants must actively recruit to earn anything.
Structure: Ponzi - a hub and spoke; one operator, many investors, usually one or very few levels. Pyramid - hierarchical, multi-level, with participants at every level acting as recruiters.
Operator's knowledge: Ponzi - the promoter typically knows all investors. Pyramid - the founder has no idea who sits in the lower tiers.
The pitch: Ponzi - an 'investment' with guaranteed or exceptional returns. Pyramid - a 'business opportunity', 'program' or 'club' where income depends on bringing in others.
Victim awareness: Ponzi - investors are generally unaware of the mechanics and believe a real investment exists. Pyramid - participants often understand that their income comes from recruits, and many are therefore simultaneously victims and (unwitting or witting) perpetrators.
Duration: Ponzi schemes can last for decades because reinvestment reduces cash outflow and the operator controls the pace. Pyramids saturate and collapse faster because of exponential recruitment requirements.
Part 5: Red Flags and Investigation
Investment red flags (Ponzi)
- Returns well above market with little or no risk; steady positive returns in all market conditions.
- Unregistered investments, unlicensed sellers, or offshore structures.
- Secretive, complex or 'proprietary' strategies the promoter will not explain.
- Missing, late or inconsistent statements; use of an obscure or captive auditor.
- Difficulty receiving payments; pressure to roll over.
- Commingling of client funds in the promoter's own accounts; promoter acts as custodian, adviser and broker simultaneously.
Recruitment red flags (pyramid)
- Emphasis on recruiting rather than selling.
- Promises of passive income from downlines.
- Required purchases to 'qualify'.
- Products priced above market or without independent demand.
- High-pressure meetings, emotional testimonials, and discouragement of questions.
Investigative approach
- Trace the flow of funds: do payouts to participants correlate with inflows from new participants rather than with actual revenue or trading?
- Verify the existence of claimed assets, trades, counterparties and bank balances with independent third parties.
- Compare claimed returns to the returns of comparable legitimate investments.
- Analyse the compensation plan: what percentage of total revenue comes from external retail customers?
- Interview early and late participants; patterns of 'reinvestment' and withdrawal restrictions are telling.
- Check registration with securities regulators and licensing of individuals.
Part 6: Exam Tips - Answering Questions on Advance-Fee, Ponzi and Pyramid Schemes
1. Anchor on the defining feature of each scheme. Ask yourself: Did the victim pay up front for a promised future benefit that never comes? That is advance-fee. Are 'returns' being paid from new investors' money through a central operator while investors sit passively? That is Ponzi. Does income depend on recruiting others into a multi-level structure? That is pyramid. Most questions are solved by identifying which of these three mechanisms is described.
2. Watch for the Ponzi/pyramid trap. If the scenario says investors do NOT have to recruit, the answer is Ponzi, not pyramid. If participants earn commissions for bringing in new members, it is a pyramid, even if a product is mentioned. Remember: Ponzi = central promoter, passive investors; Pyramid = participants recruit, money flows up tiers.
3. Know the historical facts. Charles Ponzi, 1920, Boston, international postal reply coupons, 50 percent in 45 days. The 419 scam takes its name from the Nigerian Criminal Code section on fraud. These facts appear as direct recall items.
4. For MLM versus pyramid questions, focus on where the money comes from. The decisive factor is whether compensation derives primarily from retail sales to end-users or from recruitment and inventory loading. The presence of a product does NOT make a scheme legal. Buy-back policies, the 70 percent rule and retail customer rules are indicators of legitimacy.
5. Recognise 'true or false' style statements. Typical correct statements: 'Ponzi schemes do not require investors to recruit'; 'In a pyramid scheme most participants lose money'; 'Both Ponzi and pyramid schemes rely on new participants to pay earlier ones'; 'An advance-fee scheme requires the victim to pay before receiving the promised benefit'. Typical false statements: 'A pyramid scheme is legal if it offers a product'; 'Ponzi scheme promoters invest the money in high-risk ventures to generate returns'; 'Advance-fee frauds always involve foreign nationals'.
6. Understand why schemes collapse. Questions may ask what triggers collapse. For Ponzi: inflow of new money falls below redemptions, or a wave of withdrawals (often during an economic downturn or after bad publicity). For pyramid: market saturation because of required geometric growth. Do not confuse these with 'the promoter being caught', which is a consequence rather than the structural cause.
7. Identify red flags in scenario questions. When asked which fact is MOST indicative of fraud, select the structural indicator (consistent above-market returns regardless of market conditions; compensation tied to recruitment; required up-front fee for a guaranteed loan) over cosmetic details (the promoter is charismatic, the office is small).
8. Remember the victim psychology. The ACFE emphasises affinity fraud (targeting a trusted community), the sunk-cost fallacy in escalating advance fees, social proof from early investors who were actually paid, and secrecy or urgency as manipulation tools. Questions about why victims continue to pay or fail to report often hinge on these concepts.
9. Use elimination. If an answer choice describes recruitment commissions, eliminate it as a description of a Ponzi scheme. If an answer describes a passive investment with returns funded by new deposits, eliminate it as a pyramid. If no future payoff is promised in exchange for a prior payment, it is not an advance-fee scheme.
10. Read for the words 'primarily' and 'required'. Legal MLM compensation is primarily from retail sales; illegal pyramids primarily from recruitment. Pyramid participants are required to pay to join or to buy inventory; legitimate distributors are not forced to load inventory. These qualifiers often decide the correct answer.
Quick Review Summary
- Advance-fee: pay now, receive (nothing) later; 419 letters, loan fees, prize scams, recovery scams; red flags are up-front payment, urgency, untraceable payment methods, escalating fees.
- Ponzi: fake investment; returns paid from new investors' money by a central operator; investors are passive; collapses when new money dries up or redemptions spike; Charles Ponzi 1920; Madoff.
- Pyramid: pay to join, earn by recruiting; money flows up tiers; geometric growth guarantees collapse through saturation; may be naked or product-based; distinguished from legal MLM by whether rewards come primarily from recruitment versus retail sales (Koscot test, inventory loading, buy-back policies).
- Shared trait: all three depend on a continual supply of new victims and are built on promises that cannot be fulfilled; the fraud examiner's task is to follow the money and test whether any genuine economic activity supports the payouts.
CFE - Advance-Fee, Ponzi and Pyramid Schemes Example Questions
Test your knowledge of Advance-Fee, Ponzi and Pyramid Schemes
Question 1
A fraud examiner is engaged after investors in a private fund complain that they cannot withdraw their principal. The fund reported steady monthly returns regardless of market conditions. The manager attributes the gains to a proprietary trading strategy. No investor was ever asked to bring in other participants. Which finding would MOST strongly indicate that the fund is operating as a Ponzi scheme?
Question 2
Which of the following BEST distinguishes a pyramid scheme from a Ponzi scheme?
Question 3
Which of the following BEST describes the defining feature of an advance-fee fraud scheme?