Ponzi scheme
Enable an AI agent to recognise evidence of a Ponzi scheme, assess its dependence on incoming investor funds and distinguish justified protective actions from conclusions that require further investigation.
Research draft, second pass
A second pass drafted this model: the structure a model of this thing needs, and what is known about it in the world. The line under this one says how the second half was obtained - researched against sources, or recalled without web access, in which case nothing here was read anywhere and every claim is a lead to verify. Unreviewed either way.
Researched by: Codex + Grok
Purpose and description
Enable an AI agent to recognise evidence of a Ponzi scheme, assess its dependence on incoming investor funds and distinguish justified protective actions from conclusions that require further investigation.
A Ponzi scheme is an investment fraud in which an operator pays purported returns to earlier participants from newly contributed capital rather than from profits of a genuine underlying activity, thereby concealing insolvency until inflows can no longer meet payout and redemption claims.
It can be Compare investment promises with independently evidenced sources of payouts.; Trace contributions and withdrawals while recording uncertainty in attribution.; Assess payment capacity under reduced or stopped investor inflows.; Identify missing evidence and competing explanations before assigning a classification.; Record changes in solicitation, withdrawals and intervention status.; Prepare evidence-linked alerts or referrals and identify protective actions available to an authorised actor..
Distinguishing features
Determine whether purported investment returns are funded by incoming investor contributions rather than the investment activity represented to investors; poor performance or losses alone do not establish this mechanism.
Compare disclosed funding arrangements with actual payment sources: openly disclosed borrowing, capital distributions or pooled cash management are not sufficient by themselves to establish a Ponzi scheme.
Test whether the promised returns and withdrawals require continued investor inflows after accounting for independently verified assets, operating income and liabilities; temporary illiquidity alone is insufficient.
Distinguish investment-return payments from rewards primarily earned through recruitment, while allowing evidence that an arrangement combines Ponzi and pyramid mechanisms.
Separate unsupported account gains from realised external investment income: an account statement or a successful withdrawal does not independently verify the claimed source of returns.
Scope
+ Investment promises and representations about how returns are generated
+ Tracing investor contributions into purported returns, withdrawals and other uses
+ Dependence on continued subscriptions or retained investor balances
+ Operator control, concealment and investor-facing account representations
+ Evidence supporting or challenging the Ponzi classification
+ Scheme operating state and constraints on protective intervention
- The full legal and organisational model of participating people and entities
- General investment valuation, portfolio construction and market risk
- Pyramid compensation structures without an investment-return funding mechanism
- Detailed criminal proceedings, liability findings and sentencing
- Insolvency administration, creditor priority and recovery distribution
- Bank account, payment network and transaction infrastructure specifications
Characteristics
- Classification confidence
- unassessed | suspected | supported by traced evidence | formally determined | inconclusive | contradicted Prevents warning signs, investigative conclusions and formal determinations from being treated as equivalent.
- Represented return mechanism
- trading | lending | operating business | asset appreciation | mixed | other stated mechanism | unspecified Defines the claim against which actual funding and investment activity must be checked.
- Investor-funded return share
- Percentage of purported return payments attributable to investor contributions over a stated period, with attribution method and uncertainty Measures the suspected substitution of investor principal for represented investment earnings.
- Verified external income coverage
- Ratio of verified net income from represented investment activity to purported returns paid over the same period; unknown where evidence is insufficient Tests whether the represented activity can explain payments without relying on new subscriptions.
- Withdrawal funding gap
- Currency amount by date and scenario, calculated from obligations due and verified funds available without new investor contributions Shows immediate dependence on continued inflows while keeping assumptions about asset availability explicit.
- Representation-to-evidence mismatch
- not assessed | materially consistent | materially inconsistent | conflicting evidence | unverifiable Separates an unusual funding pattern from evidence that investors were misled about it.
- Control over funds and records
- Actors linked to powers to receive, transfer, approve, value, report or independently verify investor funds Identifies who can operate the mechanism and whether purported checks are independent.
- Withdrawal fulfilment
- paid as agreed | selectively paid | delayed | restricted | suspended | unknown, with observation period Captures payment stress without treating continued payouts as proof of legitimacy.
- Operating phase
- soliciting | receiving funds and paying | under stress | payments stopped | under intervention | closed | unknown; phases may overlap Connects evidence about current activity to the urgency and availability of protective actions.
Also called
Where this came from
wikidata · CC0 1.0
Drafted structure
Bundle to layer to finding to question, as the second pass will find it: 6 bundles · 11 layers · 18 findings · 30 questions.
Promised investment and investor belief Records what investors were told their money would do and what their reported returns meant.
A Ponzi assessment must establish the represented investment mechanism and compare it with actual conduct.
Return and principal promises
Captures the economic commitments made to investors at identifiable times.
Represented source of returns
Establishes the activity claimed to generate returns, including qualifications and changes in the claim.
- What activity was said to generate returns, and what return rate, payment schedule and principal protections were represented? definition
- Which dated contracts, presentations or communications establish those representations for each affected investor group? provenance
Meaning of account balances
Distinguishes what investors understood they owned from what statements and balances actually represented.
Reported gains and disclosures
Examines whether account gains and payments were described as earned income, asset appreciation or a return of contributed capital.
- Were reported gains and payouts identified as investment profits, unrealised valuations, capital distributions or something else? definition
- What was disclosed about using subscriptions or other investors' funds for payments, and how did actual practice compare? boundary
Actual payout funding Establishes where paid returns and withdrawals came from and whether represented investments explain them.
The source of payouts is central to distinguishing a Ponzi mechanism from other losses, frauds or liquidity problems.
Contribution-to-payout tracing
Connects incoming investor funds to outgoing payments without assuming that timing alone proves attribution.
Investor money used as returns
Records evidence that contributions funded payments represented as investment returns.
- Which account records connect investor contributions to purported return payments, including transfers through intermediaries? provenance
- What amount or range of purported returns is attributable to contributions during the assessed period, and how does the tracing method handle commingled funds? measurement
Verification of investment activity
Tests the existence, ownership and earnings of assets or operations offered as the source of returns.
Independently supported earnings
Separates verified investment income and accessible assets from operator assertions and fabricated or unsupported balances.
- What independent custody, counterparty or operating records substantiate the claimed assets and net earnings? provenance
- How much of the purported return payments can verified investment earnings explain over a comparable period? measurement
Inflow dependence and payment stress Assesses how subscriptions, reinvestment and withdrawal behaviour sustain or destabilise payments.
Current payouts can conceal a funding deficit; the model must assess dependence on future investor behaviour.
Funding without new investors
Evaluates obligations against verified resources under explicit inflow assumptions.
No-new-money payment capacity
Records whether obligations can be met without further contributions, accounting for timing and access restrictions.
- If new contributions stopped, what obligations would fall due and what verified funds would be available on those dates? measurement
- Could a shortfall be explained by ordinary asset illiquidity or maturity mismatch, and what evidence distinguishes that explanation from misrepresented funding? boundary
Withdrawal and retention behaviour
Tracks actual payment performance and practices that defer cash outflows.
Withdrawal friction and selective payment
Examines delays, selective payouts and incentives to retain balances as observations requiring explanation.
- How do requested and completed withdrawals compare by date, amount and investor group, including unpaid requests? measurement
- What evidence links reinvestment incentives, changed withdrawal conditions or selective payments to available cash and investor inflows? provenance
Control and concealment Records who controls investor funds, creates performance claims and can verify or challenge those claims.
Understanding control and evidence independence helps explain how the suspected mechanism operates and where claims can be tested.
Fund and record control
Maps effective authority over custody, transfers and investor reporting.
Concentrated or conflicted control
Identifies overlapping powers and dependencies without assuming that concentration alone proves fraud.
- Who can move investor money, approve withdrawals and alter reported balances, including through related entities? definition
- Which records demonstrate whether custodians, administrators and performance verifiers are independent of those controlling the funds? provenance
Manufactured investment credibility
Examines representations used to make unsupported investment performance appear verified.
Credibility claims against evidence
Checks statements, endorsements and verification claims against their actual evidential support.
- Which performance statements, custody claims or audit claims conflict with records obtained from their purported originators? provenance
- Are successful withdrawals or participant endorsements being treated as proof of investment earnings, and what independent evidence supports that inference? boundary
Classification and protective action Connects the supported mechanism and current operating state to bounded decisions by identified actors.
An agent must express what is established, preserve competing explanations and act within its authority.
Classification boundaries
Separates warning signs, traced mechanisms and formal findings while checking neighbouring explanations.
Supported Ponzi assessment
States the classification, its evidence and unresolved alternatives for a specified period.
- What evidence supports or contradicts the combination of investor-funded purported returns and misrepresentation about their source or sustainability? boundary
- Does the evidence instead or additionally support disclosed capital distributions, an unsuccessful investment, misappropriation or recruitment-based pyramid compensation? boundary
- Who made any formal determination, on what date, and which arrangement, period and actors does it cover? provenance
Operating state and response
Records ongoing exposure and the authority needed for evidence preservation, alerts or restrictions.
Authorised protective next step
Connects current solicitation and payment activity to a proportionate, evidence-linked response.
- Is the arrangement still soliciting contributions, accepting funds or processing withdrawals, and how recently was each activity verified? measurement
- Which actor has authority to preserve records, pause activity under its control or refer evidence, and what evidence threshold governs each action? action
- What unresolved evidence would materially change the proposed action, and how can an authorised actor obtain it? action
Evidence and external alignment What the world already says about this thing, gathered so the model can be checked against it.
A model that cannot be lined up against existing standards, identifiers and practice cannot be adopted by anyone who already uses them.
Reported evidence
Findings from the breadth pass, kept separate from the structural claims.
Kinds and varieties
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Classic discretionary-account or pooled-fund Ponzi (operator reports fabricated trading or advisory profits)
- Affinity Ponzi (sold inside a religious, ethnic, professional, or immigrant community)
- High-yield investment program / unregistered promissory-note Ponzi
- Cryptocurrency, token, staking, or 'trading-bot' Ponzi
- Real-estate development, guaranteed-rent, or construction-deposit Ponzi
- Prime-bank, secret 'roll program', or high-yield-note Ponzi
- Insurance, annuity, pension, or benefit-fund Ponzi
- Postal-reply-coupon / arbitrage-story Ponzi (the 1920 Charles Ponzi pattern)
- Which of these kinds and varieties hold for the sense of Ponzi scheme this model covers, and on what evidence? provenance
Identifiers and schemes
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Wikidata - Q154920 - Item 'Ponzi scheme'.
- Library of Congress Subject Headings - Ponzi schemes - Authorized subject heading used in library and legal bibliography.
- Which of these identifiers and schemes hold for the sense of Ponzi scheme this model covers, and on what evidence? provenance
Standards and regulation
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- United States: Securities Act of 1933 and Securities Exchange Act of 1934 antifraud provisions, especially Exchange Act §10(b) and SEC Rule 10b-5 (U.S. Securities and Exchange Commission)
- United States: Investment Advisers Act of 1940, where the operator acts as an adviser (SEC)
- United States: 18 U.S.C. §§ 1341, 1343, 1348 (mail, wire, and securities/commodities fraud) (U.S. Department of Justice)
- United States: Commodity Exchange Act antifraud provisions where the story is futures, forex, or commodities (CFTC)
- United Kingdom: Financial Services and Markets Act 2000 - unauthorized investment business and collective-investment restrictions (Financial Conduct Authority)
- European Union: Market Abuse Regulation (EU) No 596/2014 and national criminal-fraud statutes implementing securities-market abuse rules
- FATF Recommendations: fraud as a money-laundering predicate; customer-due-diligence and suspicious-transaction reporting on the cash-flow pattern (Financial Action Task Force)
- Australia: Corporations Act 2001 misleading-and-deceptive and unlicensed-financial-services provisions (ASIC)
- Which of these standards and regulation hold for the sense of Ponzi scheme this model covers, and on what evidence? provenance
Real-world use
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Sold as a private fund, managed account, promissory note, 'guaranteed' trading program, or crypto staking pool that reports steady profits.
- Solicited through affinity networks (congregations, diaspora groups, workplace clubs) and, more recently, social-media and chat-group HYIPs.
- Detected in practice by inconsistent custody, missing independent audit, returns that do not vary with markets, and delayed or gated redemptions.
- After collapse, handled as criminal fraud plus civil receivership or (in U.S. broker-dealer cases) SIPA liquidation, with clawbacks from net winners.
- Used in securities-law teaching and forensic accounting as the canonical example of paying old money with new money.
- Which of these real-world use hold for the sense of Ponzi scheme this model covers, and on what evidence? provenance
Typical measurements
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Promised or reported periodic return - about 1-4 per month, or 8-50 per year, often with implausibly low variance - percent
- Operating duration before collapse - weeks to a few years for retail HYIPs; up to about 10-20 years for concealed advisory schemes - year
- Investor principal outstanding at break - 10^4-10^7 for small local schemes; 10^8-10^10 for large cases (Madoff-scale principal on the order of 10^10) - USD
- Number of participating investors - tens to tens of thousands - person
- New-inflow coverage of payouts and redemptions - must stay ≥ 1 to continue; collapse when the ratio falls below 1 for a sustained period - dimensionless ratio
- Which of these typical measurements hold for the sense of Ponzi scheme this model covers, and on what evidence? provenance
Failure modes and hazards
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Liquidity break: redemptions and promised payouts exceed new subscriptions, after which the operator stalls withdrawals, fabricates excuses, or absconds.
- Exogenous shock (market crash, bank run, auditor or whistleblower) that forces verification of assets that do not exist.
- Near-total loss of remaining principal for net losers; secondary harm from clawbacks against investors who withdrew earlier.
- Community-level harm in affinity cases (churches, immigrant networks), including cascading personal bankruptcies.
- Contagion of distrust onto legitimate custodians, funds, and payment rails that were used as window dressing.
- Overlay crimes: money laundering of inflow, false regulatory filings, identity misuse, and occasional violence or suicide around collapse.
- Which of these failure modes and hazards hold for the sense of Ponzi scheme this model covers, and on what evidence? provenance
Regional variation
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- English legal and regulatory usage keeps 'Ponzi scheme' (fake returns from new capital) distinct from 'pyramid scheme' (pay-for-recruiting); many other languages use one snowball/pyramid term for both.
- German practice often labels both as Schneeballsystem; French uses chaîne de Ponzi beside pyramide de Ponzi / vente pyramidale.
- Chinese regulatory language distinguishes 庞氏骗局 (Ponzi) from 传销 (illegal pyramid/MLM).
- Post-socialist 1990s cases (e.g. Albanian 'pyramid firms', Russian MMM) were economically Ponzi vehicles commonly named pyramids in local political speech.
- South Asian cases are often framed as collective-investment or chit-fund frauds under domestic company and prize-chit statutes rather than the Ponzi label.
- In some Islamic-finance markets the same cash-flow fraud is packaged as mudarabah, wakala, or 'halal fixed return' products.
- Which of these regional variation hold for the sense of Ponzi scheme this model covers, and on what evidence? provenance
Neighbouring kinds and how to tell them apart
Reported by the breadth pass; each item needs checking against its source before it becomes normative.
- Pyramid scheme - A pyramid's compensation depends on recruiting a downline; a Ponzi pays 'investment returns' from later capital and does not require recruiting as the product, even if word-of-mouth is how victims arrive.
- Legitimate pooled investment fund - Real, segregated assets, independent custody, an audit trail, and returns that move with the claimed strategy rather than a smooth operator-set yield funded by subscriptions.
- Multilevel marketing with a genuine product - Retail sales of a real good or service to end users can support compensation; if revenue is overwhelmingly from recruiting fees or inventory loading, it is a pyramid, not a Ponzi, unless investors are being paid fake yield from later deposits.
- Fractional-reserve banking / maturity transformation - A licensed bank discloses that deposits fund loans, holds a regulated balance sheet, and has prudential and resolution backstops; a Ponzi conceals that 'profits' are other people's principal.
- Asset-price bubble - A bubble is market overvaluation of a traded asset; a Ponzi is operator-controlled fake performance in which cash paid out is new investor money, not a mark-to-market gain.
- Pump-and-dump market manipulation - Pump-and-dump inflates a security's market price so insiders can sell; it does not systematically pay earlier participants a stated yield from later subscriptions.
- Advance-fee (including 419) fraud - The victim pays an upfront fee for a promised later transfer that never arrives; there is no circulating return stream funded by successive investors.
- Failed but genuine high-risk business - Operating cash flow and assets exist independently of new investor money, even if they later go to zero; a Ponzi never had sufficient real earnings to support the reported returns.
- Which of these neighbouring kinds and how to tell them apart hold for the sense of Ponzi scheme this model covers, and on what evidence? provenance
Sources
- Ponzi Scheme - Regulator definition, red flags (unusually consistent returns, unregistered products, secrecy), and the distinction from legitimate pooled investment.
- Ponzi Schemes - Criminal-investigation framing: use of new investor money to pay earlier investors; typical solicitation channels.
- Ponzi's Scheme: The True Story of a Financial Legend - Historical origin (Charles Ponzi, 1920, postal-reply-coupon story), cash-flow mechanics, and collapse pattern.
- The Ponzi Scheme Puzzle: A History and Analysis of Con Artists and Victims - Typology of operators and victims, affinity targeting, and why reported returns stay smooth until the break.
- SEC Charges Bernard L. Madoff for Multi-Billion Dollar Ponzi Scheme (Litigation Release / complaint, 11 December 2008) - Canonical large-scale example: fabricated advisory returns, no real trading sufficient to support reported profits, collapse on redemption pressure.
What the second pass must settle
- Which authoritative definitions and jurisdiction-specific standards should govern the distinction between a descriptive Ponzi assessment and a formal legal determination?
- What tracing methods are defensible when contributions, genuine earnings, borrowing and operator funds are commingled?
- How should the model delimit periods when an initially legitimate investment operation develops a Ponzi funding mechanism?
- How should hybrid Ponzi and pyramid arrangements link to neighbouring models without duplicating the same arrangement?
- What minimum evidence and uncertainty reporting should be required before classification supports different protective actions?