The library

The same moves, in real operations.

Different industries. Different decades. Different surface aesthetics. The same ten moves running underneath.

Bernie Madoff

Ponzi scheme · 1990s–2008 · $64.8 billion in fictitious account balances

Former NASDAQ chairman, dean of New York Jewish finance, member of every prestigious board. Defrauded sophisticated institutional investors, family offices, charities, and his own friends for at least two decades. Nine of the ten primitives, deployed for nearly twenty years, on the population least likely to be fooled. Harry Markopolos saw it in 1999 and could not get the SEC to listen until December 2008.

Authority engineering Social proof Scarcity Reciprocity Identity Emotional hijacking Information control Cognitive overload Intermittent reinforcement

Theranos / Elizabeth Holmes

Medical-device fraud · 2003–2018 · $9 billion peak valuation, device did not work

Stanford-dropout aesthetic. Black turtleneck. Board including two former Secretaries of State, a Secretary of Defense, and a future one. Investors including the Walton family, Rupert Murdoch, the DeVos family. Walgreens partnership delivering tests to actual patients. None of it required the underlying technology to function. Holmes convicted of four counts of fraud in January 2022; serving 135 months at FPC Bryan.

Authority engineering Social proof Scarcity Information control Cognitive overload

NXIVM / Keith Raniere

Cult / sex trafficking · late 1990s–2018

Marketed as "Executive Success" self-improvement. Inner sorority DOS demanded collateral disclosures, calorie restriction, and branding of members with Raniere's initials. The technique that recruited was love bombing at industrial scale. The technique that locked in was identity capture and coercive control. Raniere convicted June 2019 of racketeering, sex trafficking, and forced labor. Sentenced to 120 years.

Love bombing Authority engineering Identity Information control Reciprocity Intermittent reinforcement

Heaven's Gate

UFO cult · 1970s–1997 · 39 deaths

One of the most thoroughly closed information environments ever documented. Members had no outside contact, no outside media, identical clothing, assigned check-partners, renamed identities. March 26, 1997, thirty-nine members died by suicide in the belief they would board a spaceship trailing Hale-Bopp. The closure preceded the violence by twenty years.

Information control Identity Authority engineering Love bombing Cognitive overload

Cambridge Analytica

Political microtargeting · 2013–2018 · 87 million Facebook profiles harvested

Subsidiary of SCL Group, a firm with two decades of psychological-operations work for governments and militaries. Used Facebook data scraped via a personality quiz to build psychographic profiles for the 2016 Trump campaign and the Brexit referendum. Filed for insolvency May 2018. The methodology — large-scale behavioral targeting via platform algorithms — has since become the operating norm of political campaigning across the spectrum.

Information control Emotional hijacking Identity Social proof Scarcity

The Tinder Swindler / Simon Leviev

Romance fraud · 2017–2019 · ~$10 million in victim losses

Shimon Hayut, posing as the son of diamond magnate Lev Leviev, defrauded women across Europe through Tinder. The arc: rapid intense romance, invented crisis with "enemies," urgent financial requests, escalating loans the victim took out in her own name. The lifestyle each victim financed was used as evidence to entice the next.

Love bombing Authority engineering Emotional hijacking Scarcity Reciprocity

LuLaRoe

MLM / pyramid scheme · 2012–present · ~80,000 consultants at peak

Women's apparel multi-level marketing. Consultants required several thousand dollars in initial inventory, several thousand more in ongoing orders. Randomly-assigned patterns meant unsellable inventory. The "Lula Rich" identity kept many consultants in long after the math had stopped working — leaving meant losing the identity. Washington State sued in 2019 as an illegal pyramid scheme; settlement in 2021.

Identity Love bombing Social proof Scarcity Intermittent reinforcement

GameStop short-squeeze / r/wallstreetbets

Meme-stock event · January 2021

Coordinated retail buying drove GameStop from ~$12 to $347 in three weeks. After the squeeze ended, many participants stayed in for years through subsequent declines. The community adopted "apes" / "diamond hands" / "I like the stock" as identity markers. Selling came to feel like betrayal of the group. Aggregate retail-investor losses in the billions.

Social proof Identity Information control Intermittent reinforcement

FTX / Sam Bankman-Fried

Crypto exchange collapse · 2019–2022 · $8 billion+ customer losses

Used customer deposits to fund speculative trading at sister hedge fund Alameda. Collapsed November 2022 after a leaked Alameda balance sheet triggered a liquidity crisis. SBF convicted on seven counts of fraud and conspiracy November 2023; sentenced to 25 years. A Madoff-style information-control playbook run again on a new asset class with low public understanding.

Authority engineering Social proof Identity Information control Reciprocity Cognitive overload

Uber 2022 MFA-fatigue breach

Cybersecurity · September 15, 2022

An 18-year-old member of the Lapsus$ group ran a sustained multi-factor authentication push-notification attack against an Uber contractor, then sent a WhatsApp message impersonating Uber IT telling him to approve the prompt. Got administrator access to Uber's privileged-access management. The technical defenses held; the human substrate did not. Canonical case for MFA fatigue.

Scarcity Authority engineering Cognitive overload

Pig-butchering rings

Romance + investment fraud · 2020–present · tens of billions of dollars annually

Long-running romance-and-investment scams operated mostly out of trafficked-labor compounds in Southeast Asia. The pattern: wrong-number text → friendship → romance → "investment opportunity" → fake platform showing fabricated gains → larger and larger deposits → withdrawal denied. AI tools since 2023 have scaled the relationship-building phase that was previously the operation's labor bottleneck.

Love bombing Reciprocity Authority engineering Scarcity Identity Information control Intermittent reinforcement

Frances Haugen / Facebook Files

Whistleblower disclosure · 2021

Former Facebook integrity-team product manager disclosed thousands of pages of internal Meta documents showing what the company knew about the harms its products were causing — to teenage girls' mental health, to political polarization, to coordinated violence in multiple countries — and what it had chosen to do about that knowledge. The documents expose, in the company's own internal language, the platform-side deployment of nearly every primitive in this book at scale.

Emotional hijacking Information control Identity Social proof Intermittent reinforcement

The framework is what's durable.

The cases above span scams, frauds, cults, breaches, and disclosures across more than half a century. The specific platforms, industries, and surface aesthetics differ. The underlying techniques are the same.

The framework is the durable thing. The cases are the practice ground on which the framework gets sharper.

See the defenses →