Long Island Retiree Lost $300K in AI Crypto Scam, Now on Medicaid

What happened

Kyle Holder is 73 years old. She worked as an occupational therapist on Long Island for decades until an injury ended that career. Like a lot of retirees with savings to manage, she became curious about whether she could grow her nest egg from home. She had time. She had a little financial knowledge. She thought she was careful.

The first message arrived on WhatsApp around Christmas 2024. The person on the other end introduced herself as Niamh, a friendly, relatable woman who seemed to understand Holder's situation. They talked. They became, Holder thought, friends.

Five months later, Holder's $300,000 retirement was gone. She had been hospitalized after realizing the savings had vanished. Social workers arranged for her to move into an assisted living facility on Long Island, paid for by Medicaid, where she now shares a single room with a roommate.

“There's nothing left,” Holder told CBS News.

This case file examines how the scam worked, why the aftermath is as important as the theft, and what families can do to protect elderly loved ones from AI-powered crypto fraud. The federal-investigator side of the same case is covered in our companion piece on the IRS warning on AI-powered crypto scams.

The first message: Christmas 2024 on WhatsApp

The scam began the way most pig-butchering operations begin: with a friendly, unsolicited message on a messaging app.

Holder received a WhatsApp message from someone calling herself Niamh around Christmas 2024. According to reporting by CBS News and a follow-up piece in Yahoo Finance, Niamh presented herself as a single parent, someone with whom Holder, herself a single parent, could relate.

“She said she's a single parent, and I thought I'm a single parent,” Holder recalled. “She was always asking about me.”

The relationship developed over weeks. Niamh asked about Holder's day. She asked about Holder's family. She asked about Holder's health. She seemed genuinely interested. This is not an accident. It is the trust-building phase of the pig-butchering playbook, now often scripted by AI language models trained on thousands of successful romance-scam conversations. (For the broader pattern, see our guide on signs of a romance scam.)

Early in their communication, Niamh sent Holder a message that, in retrospect, was a clear warning sign. CBS News quoted one of Niamh's WhatsApp messages to Holder:

“Honey, how did you sleep last night? Any plans for the day?... By the way, honey, have your funds arrived in your Citibank account?”

The shift from personal warmth to financial inquiry is the signature of the scam. But by the time that message arrived, Holder already trusted Niamh.

The investment hook: “coaching” and the first gains

Once trust was established, Niamh offered to coach Holder on cryptocurrency investing. The opportunity, Niamh explained, had made her wealthy. She offered to show Holder how to do the same.

A second scammer, playing the role of a member of the “customer service team” for the investment platform, walked Holder through the technical steps. Holder opened two cryptocurrency wallets online. She transferred a small sum to a crypto account tied to the scammer.

Then came the hook.

A few thousand dollars appeared in Holder's crypto wallet. The platform showed gains. Holder thought she had found a legitimate investment opportunity. She thought the platform worked. She thought Niamh had been telling the truth.

This “first deposit produces gains” trick is the single most reliable signal of a pig-butchering scam. Legitimate investment platforms do not seed your wallet with profit after a small initial transfer. That is a closing move designed to make you wire ten times more, or, in Holder's case, her entire retirement.

The money flow: 14 wallets, 5 wallets, one exchange

Convinced the platform was legitimate, Holder transferred more from her crypto wallets. Over the following months, she sent nearly $300,000 to 14 different wallets that the scammers controlled.

The IRS Criminal Investigation New York Field Office eventually mapped the flow of funds. Special agents traced the money from those 14 wallets into five additional wallets, a standard laundering technique designed to break the transaction trail and make tracing difficult.

From those five wallets, the funds were off-ramped at a regulated cryptocurrency exchange. Off-ramping means converting cryptocurrency into traditional currency that can be withdrawn to a bank account. By the time Holder realized what had happened, her money had been consolidated with other victims' funds, converted to cash, and distributed.

“From these five wallets, it makes its way to an exchange, which is the off-ramp. While [Holder] may have contributed a couple hundred thousand dollars to this scam, they were able to ultimately see millions of dollars accumulating in this final wallet.”

Chavis's team has been trying to identify other victims of the same scam network. They have not been able to identify the perpetrators. “They could be anywhere in the world,” Chavis said.

The realization: “Please assure me this is not a scam”

Two months into communicating with Niamh, and not seeing any money flowing back into her crypto wallets, Holder became worried.

According to CBS News, Holder sent Niamh a message that captures the desperation of a victim who knows something is wrong but cannot yet accept it:

“Please assure me this is not a scam. I'm getting worried.”

Niamh's response was not reassurance. It was blame.

According to messages reviewed by CBS News, Niamh told Holder she had sent money to the wrong crypto wallet. “Oh my goodness, honey, how could you make such a little mistake? This is very bad. Contact [customer service] to consult on how to solve this problem.”

Two months into their communication, after Holder had sent nearly all of her savings, Niamh sent a final, devastating message: “You have made a fatal mistake.”

The cruelty is deliberate. The scammer's final message is designed to make the victim blame themselves, reducing the likelihood that they will report the crime to authorities. It is a closing technique as carefully scripted as the opening messages.

The aftermath: hospitalization, Medicaid, assisted living

The financial loss was $300,000. The human loss was much larger.

Holder was hospitalized after realizing her savings were gone. The stress, the shame, and the sudden understanding that she had no financial future combined to produce a medical emergency. She did not specify the nature of the hospitalization in her interviews with CBS News and Yahoo Finance, but the fact of it, a 73-year-old woman hospitalized after losing everything, is itself a measure of the harm.

After her release, social workers assessed her situation. Without savings to pay for independent living, Holder qualified for Medicaid-covered assisted living. She now lives in a facility on Long Island, sharing a single room with a roommate.

“There's nothing left,” she told CBS News. The quote became the headline of the CBS segment and has since been republished by Yahoo Finance, AOL, Bitcoin.com News, and other outlets.

Holder now sits on a park bench near the facility and tells her story to anyone who will listen. She does this not because she enjoys reliving the experience, but because she hopes it will prevent someone else from making the same mistake.

Why it matters

The Holder case is not a traditional pig-butchering scam. It is an AI-powered pig-butchering scam. According to IRS investigators quoted in the CBS News report, scammers are now using what they call “dark AI” tools, purpose-built language models marketed on underground forums, to automate targeting and write the scripts that convince victims to invest.

What “dark AI” tools are

The term “dark AI” refers to large language models that are either jailbroken versions of commercial AI models, legitimate models like ChatGPT or Gemini that have been “uncensored” to remove guardrails against generating harmful content, or purpose-built malicious models trained specifically on hacking forums, scam scripts, phishing templates, and malware code.

These models are advertised as hacking assistants or dual-use penetration testing tools, but they are clearly marketed for criminal purposes. Subscription costs range from $30 to $200 per month, a trivial expense compared to the potential returns.

How dark AI supercharged Holder's scam

In the Holder case, IRS investigators believe AI was used in at least three ways.

Targeting. Lists of prior victims, scraped data from past breaches, and leak databases from hacked exchanges feed into AI-powered matching systems. Holder may have been identified as a potential target because her personal information appeared in a prior data breach.

Scripting. The messages Niamh sent, from the friendly “how did you sleep?” openers to the blame-shifting “you made a fatal mistake” closer, were likely generated or refined by AI language models trained on romance-scam playbooks. (Our guide on how to tell if a text message is a scam catalogues the linguistic tells that survive even AI rewriting.)

Customer service automation. The second scammer, playing the role of “customer service,” may have been an AI chatbot or a human operator using AI-generated scripts. The consistency of the responses across multiple victims suggests automation.

The scale: one operator, dozens of Niamhs

What makes dark AI so dangerous is not the quality of the output, though that is improving rapidly, but the scale.

A single human scammer, working without AI, could manage perhaps five to ten active relationships at a time. With AI handling the bulk of conversation generation, a single operator can now run dozens of Niamhs in parallel. Each victim receives personalized, grammatically correct, emotionally calibrated messages. Each victim believes they are in a unique relationship. Each victim is, in fact, talking to the same operator using AI to multiply their reach.

“These are highly sophisticated scams and anyone can be a victim.”

The IRS Criminal Investigation division has recently set up an online tipline for crypto fraud cases in response to the surge.

The broader numbers: $300,000 is a single thread

Kyle Holder lost $300,000. That is a catastrophic loss for one person. In the context of national fraud statistics, it is a single thread in a very large tapestry.

According to the FBI's 2025 Internet Crime Report:

• Americans lost an estimated $20 billion to cyber theft in 2025, the highest figure in the report's 25-year history.
• Of that, $11.4 billion was specifically attributable to crypto investment fraud, the category that includes pig-butchering scams.
• The FBI documented $893 million in AI-enabled fraud losses, a category that did not exist in the report until this year. (Our full coverage of that report is here: FBI IC3 2025.)

According to the FTC:

• Americans lost a record $15.9 billion to consumer fraud in 2025, up 28% from $12.5 billion in 2024.
• That represents a 430% increase since 2020, when losses totaled approximately $3 billion.
• The average loss per fraud complaint in 2025 was approximately $20,700, though pig-butchering victims often lose far more, as Holder's case demonstrates.

Kyle Holder's $300,000 is a rounding error in these statistics. But statistics do not live in assisted living facilities. Statistics do not share a single room with a roommate. Statistics do not sit on a park bench and tell their story to strangers, hoping to save someone else.

Why the aftermath matters: the hidden harm of fraud

Most fraud coverage focuses on the theft itself: the fake messages, the cloned voices, the phony investment dashboards. That is where the drama is. That is what gets clicks.

But the Holder case demands attention to what comes after.

Holder is in assisted living because there is nothing left to fund a different outcome. She worked for decades as an occupational therapist, a career spent helping others recover from injury and illness. She saved for retirement. She did everything right. And then, over a few months, a stranger on WhatsApp took it all.

The shame is part of the harm. Fraud victims often do not report crimes because they are embarrassed. They blame themselves. “How could I have been so stupid?” they ask. The scammers count on this. The final “you made a fatal mistake” message is designed to reinforce the shame, to make the victim less likely to call the police or the FBI or the IRS.

Holder overcame that shame. She spoke to CBS News on camera. She let them use her name and her face. She did this knowing that some people would judge her, would call her foolish, would wonder how anyone could fall for such a thing. She did it because she wanted to warn others. The same dynamic plays out in our coverage of the Brooklyn retiree who lost $1.6 million in a parallel pig-butchering case.

How to protect yourself

The AuthentiLens editorial team has distilled the Kyle Holder case and the broader pig-butchering epidemic into six concrete protections.

1. Treat any cold WhatsApp, Telegram, or Signal message offering investment “coaching” as a scam by default.

Pig-butchering operations now use these apps at industrial scale. The opening is friendly, generic, and disarming: “Hi, how are you?” “Is this Michael?” “Sorry, wrong number, but you seem nice.” The correct response is to block and delete. Do not engage. Do not correct them. A reply tells the targeting system you are a live account.

2. Never invest in a cryptocurrency platform recommended by someone you have only met online.

Not a “coach.” Not a “wrong number” texter. Not a contact from a Facebook investing group. Not a match on a dating app. Holder's loss did not require sophistication on the scammer's side. It required Holder trusting an investing path she had never independently verified existed.

3. The “first deposit produces gains” trick is the single most reliable signal of pig butchering.

Legitimate platforms do not seed your wallet with profit after a small initial transfer. That is a closing move designed to make you wire ten times more, or, in Holder's case, your entire retirement. If you make a small test deposit and suddenly see “gains,” you are looking at a fake dashboard.

4. Do not rely on the platform dashboard as proof your money is real.

The numbers on the screen are whatever the operator wants them to be. Scam cryptocurrency platforms display whatever balance the operator chooses. The only real test is an actual withdrawal back to a bank account in your name. And “taxes owed before withdrawal” is a definitive scam tell, ironically, often delivered by scammers impersonating the IRS.

5. Have the conversation with elderly parents this week.

Especially parents who manage their own retirement accounts and use WhatsApp or Facebook Messenger. The Kyle Holder story is playing out in thousands of households right now. Sit down with them this week. Show them this article. Walk them through the warning signs. Agree on a family rule: no financial decision over a certain amount without a second phone call to a trusted family member. Our guide on how to protect elderly parents from scams walks through the “pause and verify” protocol step by step.

6. Scan it with AuthentiLens.

You are not expected to become a pig-butchering detection expert. That is what AuthentiLens is for. When you receive an unfamiliar message, investment pitch, or “coach” profile, paste it into AuthentiLens. Our detection engine flags pig-butchering language patterns, AI-generation signals, and the urgency cues operators use to close the deal, in seconds, before you reply or send a single dollar.

What to do if you have been scammed

If you or someone you love has lost money to a crypto scam, the most important thing you can do is report it, quickly.

• File a complaint with the FBI's IC3 at ic3.gov. The sooner the complaint is filed, the better chance investigators have of freezing funds before they are off-ramped.
• Report to the IRS Criminal Investigation crypto tipline. The division launched this resource specifically for cases like Holder's. Visit irs.gov and search for “crypto fraud tipline.”
• Contact your bank and any cryptocurrency exchanges you used. They may be able to freeze accounts or provide information to law enforcement.
• Tell your family. Shame is the scammer's greatest ally. The silence is what they count on. You did nothing wrong. You were targeted by professionals using the most advanced tools available.

Kyle Holder now sits on a park bench near her assisted living facility and tells her story to anyone who will listen. “There's nothing left,” she says. She says it so that someone else will not have to.

AuthentiLens is a verification tool that helps you detect AI-generated content, deepfake media, and impersonation scams. Upload a suspicious message, image, or profile, and we will tell you what is real and what is not.