Is Ashley Madison legit? Fake profiles on affair sites

Is Ashley Madison legit? It is a real site with real members, but the FTC found it ran tens of thousands of fake "engager" profiles of women until August 2014 to get men to pay. Other affair and flirt sites still use paid operators, disclosed only in their terms.

Married-dating sites have a built-in imbalance. Far more men sign up than women, and the men are the ones who pay. A site that runs short of women has two choices: market harder to women, or give the men someone to talk to anyway. Regulators have caught operators taking the second route more than once, and some sites now write it into their terms.

This guide goes through what the record actually shows: the FTC's case against Ashley Madison, what the leaked code revealed, the "Virtual Cupid" case that came before it, the paid-moderator industry behind many credit-based sites, and the Match.com lawsuit over ads triggered by scam accounts. Then it covers how to tell a bot or an operator from a person before you spend money, and what to do if you already have.

Are Ashley Madison profiles fake? What the FTC found

Many were. In 2014 alone staff created 28,417 fake profiles, all but three of them women, from the photos of inactive real members.

The FTC's 2016 complaint against the site's operators is the most detailed public account of how an affair site used fake profiles. Its main allegations:

• The gender gap was huge. Since 2002, 18,981,464 people in the US had created profiles: 15,790,849 male and 3,190,615 female.
• Staff created "engager profiles". Until August 2014 the company used fake profiles created by its staff to engage or attract customers. In 2014 there were 28,417 of them, and all but 3 were female.
• They were built from real people. The engagers used profile information and photos taken from existing members who had not been active for a year or more.
• They targeted men who hadn't paid. Engagers sent winks, automated replies and stock messages to members without credits in their accounts. Users had no way to tell them from real members, and in many instances until April 2013 they were induced to upgrade to full memberships to reply.
• The sales pitch. New members were welcomed with the claim that there were "thousands of women in [the consumer's] city" looking for a discreet affair.

The FTC's settlement announcement says the fake profiles lured 19 million Americans until August 2014. The operators settled the FTC and state charges, which also covered the 2015 data breach, for $1.6 million paid under an $8.75 million judgment, without the case going to trial. The company now trades as ruby Life; see our Ashley Madison review for what it costs and how it works today.

What the leaked code showed

The 2015 breach also leaked source code, and Gizmodo's Annalee Newitz went through it. Her August 31, 2015 analysis counted 70,572 "host" accounts, the bots the code called engagers or "Angels": 70,529 female and 43 male. About 20 million of the 31 million men in the data had received bot mail and about 11 million had been chatted up by an automated engager, which opened with lines such as "hi" and "u busy?". The bots worked in 31 languages across about 50 countries, and one code change was titled "Stopped engaging gaymen." Bots were also part of a $250 "guaranteed affair" package.

One honest caveat: in the same piece Newitz corrected an earlier estimate. She had written that only about 12,000 women were active, and conceded that the partial dump couldn't show how many real women used the site. Both things can be true: real women were on Ashley Madison, and the men paying to talk to them were being messaged by software.

Is Ashley Madison legit today?

The FTC complaint says the engager profiles ran until August 2014, and we found no later regulator finding of fake profiles there, either way. Its current pricing and breach record are in our review.

Do other affair sites use fake profiles?

Some dating and flirt sites do, and the FTC has caught more than one. The difference now is that many disclose it in the small print instead of hiding it.

JDI Dating and the "Virtual Cupids" (2014)

The FTC's first case against an online dating service came a year before the Ashley Madison hack. According to the FTC's October 2014 announcement, England-based JDI Dating and its owner ran 18 dating websites, including cupidswand.com, flirtcrowd.com and findmelove.com. Free members got messages that were almost always from computer-generated profiles the company called "Virtual Cupids", and the only hint was a small "v" inside a "C" on the profile page. The FTC's business blog called that logo "darn near microscopic", and the complaint also accused JDI of re-billing subscribers for further periods without their consent.

JDI agreed to pay $616,165 in redress. Notice what the order did not do: it didn't ban the fake profiles. It required the company to tell potential members clearly that they would receive "communications from virtual profiles who are not real people." That is the template the whole credit-based chat industry now follows: disclose it somewhere, and carry on.

Match.com and ads triggered by scam accounts (2019)

In 2019 the FTC sued Match Group over a different pattern. Match didn't create the fakes. The FTC alleged that it sent non-paying users "You caught his eye" emails urging them to subscribe, even when the interest came from accounts Match had already flagged as likely fraudulent. The complaint said 25 to 30 percent of people registering each day were using the site to attempt scams, that in some months from 2013 to 2016 more than half of the instant messages and favorites users received came from accounts Match had identified as fraudulent, and that 499,691 subscriptions were bought within 24 hours of such an ad between June 2016 and May 2018. Its $14 million settlement in August 2025 covered its guarantee, billing-dispute and cancellation practices; the FTC's announcement does not list the fake-ad allegation among the practices resolved. The lesson for anyone on a paid site: a notification that someone is interested is a sales email, not proof of a person.

What are "virtual" or "entertainment" profiles?

Profiles the site runs itself, typed by paid chat operators. If a site's terms mention them, you are paying to chat, not to meet anyone.

After JDI, a lot of operators stopped hiding fake profiles and started disclosing them in the small print instead. Many small, credit-based "flirt" and "discreet meeting" sites run on paid chat operators who play invented women.

WIRED's 2023 investigation "This Is Catfishing on an Industrial Scale" described the work from the inside. Freelancers hired as "customer support" or moderators run fake profiles the trade calls "virtuals", switch between them every couple of minutes, and are pushed to send about 30 messages an hour. Users buy coins at roughly €2 a message, while workers earn about 7 cents a message, and they are told to stretch conversations out and keep users from moving to another app. The sites' terms, WIRED found, typically say they "may use system profiles at our discretion to communicate with users to enhance our users' entertainment experience."

Germany's consumer organisation, the Verbraucherzentrale, has been fighting this for years. Its guidance says many portals use paid moderators to run fictitious profiles, that the giveaway words in the terms include "Animateure", "Controller", "Moderator" and "moderierter Dienst", and that a German court (the Berlin regional court, in a case brought by the federation of consumer organisations) held that a note hidden in the terms isn't enough: the fake profiles must be disclosed clearly before you register. One clause it quotes translates as "all statements and all personal details given by the fictitious profiles are inventions of the moderators."

In the UK, the Competition and Markets Authority's 2018 consumer-law guidance for dating sites says providers shouldn't make customers accept that they may be talking to profiles "generated by you, or on your behalf" unless those profiles are identified as such. We found no equivalent US rule written for dating sites; there, the FTC Act's ban on deception does the work case by case.

How to find the clause

Before you buy credits anywhere, open the terms and search the page for: virtual, fictitious, entertainment, moderator, operator, system profile, animator and no physical meeting. If any of them describe profiles the company runs, you are paying for a chat service, not a dating site. Some people are happy with that. Most people who joined to meet someone are not.

What the sites we review say

Victoria Milan's help page on fake profiles says it runs "both automated and man-driven anti-scammer methods", admits that some profiles slip through, and asks members to report them. Its moderation policy says moderators review every photo and profile text before it goes live (up to 24 hours) and reject profiles that include contact details. Photo verification is described in its terms as "entirely voluntary", so a missing badge tells you nothing either way. We found no regulator action over fake profiles on Victoria Milan; that is not proof there are none.

For open relationships, the mainstream apps are a cleaner bet on this one point, because they push face verification: Feeld and OkCupid offer photo verification and selfie prompts respectively, which make a fake harder to run (they confirm a face, not intentions). Our AdultFriendFinder review covers a site where we found no comparable published verification.

How to spot a fake profile on an affair site

Three different things can be on the other end of a too-good message, and the signs overlap.

An automated bot

• Messages arrive within minutes of signing up, before your profile has a photo, and especially before you have paid.
• Openers are short and generic ("hi", "u busy?") and replies don't follow what you actually wrote.
• Several "women" contact you at once, all near you, all keen, and all go quiet unless you upgrade.

A paid operator

• Conversations are warm and attentive but never arrive anywhere. Every plan to meet or swap numbers is postponed, while the chat continues message by paid message.
• She remembers details from your profile but is vague about her own life, town and job.
• The site charges per message or per coin, and its terms mention moderators, entertainment or virtual profiles.

A romance or extortion scammer

Scammers are real people, which is what makes them dangerous. The FTC's romance-scam guidance lists the signs: they can't meet in person, they move fast and push you off the platform, they ask for money, and they tell you how to pay (wire transfers, gift cards, payment apps or cryptocurrency). On affair sites there is an extra twist: once you have shared photos or your real name, the threat can become "pay or I tell your wife." The FBI's 2025 Internet Crime Report counted 23,159 confidence and romance fraud complaints with $929.3 million in reported losses, and 89,129 extortion complaints.

Test before you pay, and what to do after

1. Use the free tier to watch. Note who contacts you and how fast. A flood of eager women on day one is a sign of the business model, not your profile.
2. Read the terms first. Search them for the words above, and for auto-renewal and refund rules. Victoria Milan's, for example, say all purchases are final and non-refundable.
3. Buy the shortest plan and switch off auto-renew the same day. JDI Dating's customers were billed again without consent, and the FTC took action over it.
4. Ask for a short video call early. A real person interested in meeting will usually agree within a few messages. Operators and scammers find reasons not to.
5. Never send money, gift cards, crypto or anything that identifies you to someone you haven't met.
6. Report and document. Report the profile on the site, then report deceptive practices to the FTC at ReportFraud.ftc.gov and money lost to a scammer to the FBI at ic3.gov. If you paid by card for a service that turned out to be operators, ask your card issuer about a dispute and keep screenshots of the chats and the terms as they stood.

If a site leaves you suspicious, privacy matters even more: read our guide to affair-site privacy, billing and breaches before you hand over anything real. And if what you actually want is a partner who knows, our guide to ethical non-monogamy vs affairs covers apps where the other people are, verifiably, people. For the legal side of an affair, see infidelity and the law.