The Confidence Game

Charter brokerage has always run on a peculiar combination of speed and trust. A trip is quoted in minutes, confirmed in hours, and paid for in full before an aircraft moves. Contracts are frequently a PDF and a WhatsApp thread. Counterparties are often known by reputation rather than by any verifiable record. For decades that informality was a competitive advantage: the business moved faster than the paperwork.

Fraud has adapted to exactly that. The crude attempts — a stolen photograph of a Global 6000, a fabricated air operator certificate, a demand for a wire within the hour — still circulate, but they mostly fail. What works now is patient, well-researched and socially fluent. It arrives speaking the language of the industry, quoting the right ICAO codes, and asking questions that only somebody familiar with the trade would ask.

What follows are five patterns, ordered by how much they tend to cost the party who absorbs the loss rather than by how often they are attempted. The details differ in every case; the sequence rarely does.

This is the most expensive pattern in the market, and the one least likely to be reported, because the victim is a professional who was outmanoeuvred at his own game.

It begins with an introduction rather than an enquiry. A sub-broker — sometimes an unfamiliar name, sometimes a plausible acquaintance-of-an-acquaintance — brings what appears to be a genuine principal: a family office, a touring artist, a corporate group with a multi-leg itinerary. The trip is well specified. The dates are firm. The requirements are credible enough that the aircraft search is real work.

The first tell is the commission. Where a market rate sits in the mid single digits, this intermediary wants twelve, eighteen, occasionally twenty-five per cent — and he explains it fluently. He controls the relationship. He has protected this client from three other brokers. He is bringing four more trips this quarter and wants the first one to establish the terms. The number is high, but it is presented as the price of access to a pipeline, not as the price of a single flight.

What follows is a deliberate campaign to build trust faster than diligence can run. He answers instantly, at any hour. He sends voice notes rather than emails, because a voice is harder to doubt than a domain name. He volunteers small pieces of verifiable truth — a correct tail number, an accurate handling agent at a secondary airport, a genuine detail about a recent EBACE — so that the unverifiable claims inherit their credibility. He mentions mutual contacts in a way that discourages checking. He performs generosity: a discount he did not have to give, an introduction he did not have to make. And he escalates commitment in small steps, so that each concession feels like a continuation of the last rather than a decision in its own right.

Then comes the structural request, usually framed as a formality: his share is to be paid before the flight, and paid in crypto. The justifications are rehearsed and, in isolation, almost reasonable. His banking is between institutions. His principal insists on discretion. A transfer would tie up funds for days over a weekend. The sum requested is his commission — a fraction of the trip value — and against a booking that is about to earn the broker a good margin, it does not feel like the risk. It is presented as good faith, not as a payment.

The cancellation arrives once that transfer is confirmed and irreversible. The reason is always human and always unfalsifiable: the principal is unwell, a visa was refused, a family matter has intervened, the tour dates moved. It comes with apology, with disappointment, and immediately with the demand — the full trip amount must be returned to the client, in full, at once, because the client is a person of standing and cannot be seen to be out of pocket.

And the broker, wanting to protect a relationship that still looks valuable, refunds it. The operator returns what the contract obliges and keeps what it does not. The intermediary is briefly apologetic, then slow, then unreachable. The number he called from no longer connects. The company he named has no filings. The mutual contact does not remember him. The loss sits exactly where the commission went: paid forward, in a form that cannot be reversed, against an obligation that was never going to be performed.

The defence against this pattern is structural rather than intuitive, because intuition is precisely what the intermediary spends a fortnight cultivating. No commission is released before the trip is flown. Nothing settles in cryptocurrency, ever, at any size, for any stated reason. And any refund obligation is matched against what has actually been recovered from the chain rather than paid out on the strength of an apology.

The test that costs nothing is to insist on speaking to the principal directly, once, on a number the broker sources independently. A genuine intermediary protects the relationship and grumbles. A fraudulent one produces a reason why that particular call is impossible — and the reason will be excellent.

The oldest pattern in the book still works because verification is tedious and quoting is urgent. A broker under time pressure receives an unusually competitive price on a hard-to-source aircraft — a heavy jet at short notice, a specific type into a slot-restricted airport, a repositioning that solves an awkward leg.

The documentation looks correct. An air operator certificate arrives as a PDF, along with an insurance certificate naming a real underwriter, and photographs of an aircraft that genuinely exists and can be found in public tracking data. What does not exist is any relationship between the person sending those documents and the aircraft in them. The certificate has been altered from a genuine original. The insurance document was produced in a graphics editor. The tail number belongs to an operator two countries away who has never heard of the sender.

The deposit is requested to hold the aircraft. Afterwards the story degrades in stages: a maintenance finding, a crew duty issue, a slot problem, then silence. The email domain — usually registered weeks earlier, and differing from a legitimate operator by a single character — stops resolving.

This one is defeated by process. Certificates are verified against the issuing civil aviation authority's own register, not against the document supplied. Insurance is confirmed by contacting the broker or underwriter named on the certificate using details obtained independently. Payment goes to a bank account in the exact legal name of the certificate holder, and any mismatch between the operating entity and the payee is treated as disqualifying rather than as an administrative quirk.

This is the pattern that empties the largest single accounts, and it does not require the attacker to know anything about aviation.

Somewhere in the chain — the broker, the operator, the handling agent, a client's assistant — one mailbox is compromised, or one domain is impersonated closely enough to pass a distracted glance. The attacker then does nothing at all for days or weeks. He reads. He learns the tone of the correspondence, the names, the typical values, the point in the cycle at which money moves.

He intervenes exactly once, shortly before a scheduled payment, with new banking details and a plausible reason: a compliance review has frozen the usual account, the entity has restructured, the correspondent bank has changed. The message continues an existing thread, matches the house style, and arrives when the payment is expected. Nothing about it feels like an intrusion.

The countermeasure is unglamorous and close to absolute. Bank details are never accepted or changed over email, under any circumstances. A change is confirmed by voice call to a number already on file — never a number contained in the message requesting the change — and payments above an internal threshold require two authorising individuals. Any single-person wire is a single point of failure.

Here the aircraft flies, the service is delivered, and the loss arrives up to two months later.

The booking is last-minute, priced without argument, and paid by card. The cardholder is not among the passengers, and the explanation is entirely ordinary: an employer is paying, a partner is paying, an assistant is booking on behalf of a principal. Verification calls are avoided with warmth rather than hostility. The trip operates without incident.

The chargeback follows once the cardholder — whose details were stolen — disputes the transaction. In a card-not-present transaction where the payer never signed anything and never boarded, the merchant is in a structurally weak position. The operator has burned fuel, paid crew and handling, and returns the money.

The controls are commercial rather than technical: bank transfer for new counterparties on short-notice bookings; card payments accepted only when the cardholder is a passenger or is verified with documentation; and a charter agreement signed by the person whose card is used. Willingness to accept a price without negotiation, combined with reluctance to complete verification, is a stronger signal in this trade than most brokers allow themselves to believe.

Empty legs are the natural habitat of this pattern because the offer is inherently opportunistic, the price is inherently improbable, and buyers are conditioned to move fast or lose it.

In its simplest form the leg is fabricated. Listings are seeded across marketplaces and social channels, priced attractively enough to compel immediate deposits, and the routing is chosen so that a modest deposit against a large notional saving looks like an obvious decision. The deposits accumulate and the flights are cancelled shortly before departure, with refunds perpetually in process.

In its more sophisticated form the leg is real but sold repeatedly. The same repositioning is confirmed to several brokers at once, each believing they hold it. One of them flies. The others are cancelled in the final hours, and their deposits are absorbed into a refund queue that moves at the pace of the operator's convenience.

The discipline required is simple and frequently skipped: confirm the leg exists by reference to the originating trip, contract with the certificate holder rather than with a listing, and treat any deposit paid before a signed agreement with a verified operator as an unsecured loan to a stranger.

None of these patterns is defeated by better instincts. They are defeated by rules that apply on the days when the deal looks excellent, which are precisely the days the rules feel expensive.

Four hold up in practice. Funds for a trip sit with a third party or an escrow arrangement until the flight is performed, so that no participant can be made whole ahead of the obligation being met. Commissions are paid after operation, not before, regardless of how the request is framed. Every counterparty is verified against a primary source — the regulator's register, the underwriter, the bank — rather than against the documents that counterparty supplied. And payment instructions are confirmed out of band, by voice, on details held before the request arrived.

The industry's trust-based culture is not the vulnerability. Trust extended without any structure behind it is. The operators and brokers that have avoided these losses are rarely the most suspicious ones; they are the ones for whom refusing to move money outside a process is not a judgement about the person asking.