Pig Butchering: The Crypto Investment Scam Taking Billions
Romance, manufactured trust, and fake trading platforms. Inside the organized crime operation behind the fastest-growing fraud category in the United States.
What It Is
Pig butchering—the term is a direct translation of the Chinese phrase sha zhu pan—is a long-con investment fraud in which victims are groomed over weeks or months before being introduced to a fake cryptocurrency trading platform. By the time the scam is complete, the victim has transferred their savings, often their retirement accounts and borrowed funds, to an account they can never access again.
The name refers to the practice of fattening a pig before slaughter. The "fattening" is the relationship-building phase. The "slaughter" is the moment the scammer vanishes with all deposited funds. It is not an opportunistic crime. It is an industrial one, run by organized crime syndicates operating out of compound facilities in Southeast Asia, staffed in many cases by trafficked workers forced to run scripts under threat of violence.
How Victims Are Targeted
Contact is almost always initiated by the scammer, not the victim. Three primary vectors account for the majority of documented cases.
-
01
Wrong-Number Texts
The scammer sends a text that appears to be intended for someone else—"Hey, are we still on for dinner Thursday?"—then apologizes for the wrong number and strikes up a conversation. This opener is engineered to feel low-stakes and accidental. Once the victim responds, contact shifts to WhatsApp or Telegram, where conversations are harder to trace and easier to delete.
-
02
Dating Apps and Social Media
Profiles built with AI-generated photos and fabricated professional histories are used to initiate contact on Hinge, Bumble, Tinder, Instagram, and LinkedIn. The LinkedIn vector specifically targets the investment-fraud use case: a fabricated profile of a successful financial professional or overseas entrepreneur provides plausible cover for later discussions about trading.
-
03
Reconnection Messages
Scammers sometimes pose as former classmates, distant acquaintances, or lost contacts who "found you on Facebook." The pre-existing social context reduces the victim's guard more quickly than a cold approach.
The Grooming Arc
After initial contact, the relationship-building phase typically runs two to eight weeks. The scammer invests significant time: daily messages, expressions of affection or close friendship, personal disclosures, interest in the victim's life and family. The goal is to establish genuine emotional attachment before any mention of money.
The investment topic is introduced casually, often as an aside. The scammer mentions they have been making money on a cryptocurrency platform recommended by a family member, or that they recently made a significant return on a short-term trade. They are not immediately pushing the victim to invest—that would be too obvious. They share a screenshot of a gain. They mention it again a week later. They offer to "show you how it works, no pressure."
The victim is then directed to a fake trading platform that has been built to mimic a legitimate cryptocurrency exchange. The interface shows real-time price data (often scraped from genuine markets), a personal portfolio dashboard, and fabricated profit history. Early on, small deposits are encouraged, and small withdrawals are permitted to build confidence. This is deliberate: the victim is being conditioned to trust the platform before the real money is solicited.
When victims attempt to withdraw large balances from the fake platform, they are told a "capital gains tax" or "withdrawal fee" must be paid before funds can be released. The fee is typically 15 to 30 percent of the stated balance. Even victims who suspect fraud at this stage often pay the fee, because their "balance" appears real and they believe paying will recover it. The fee is simply an additional theft. No withdrawal ever occurs.
Why the Money Is Unrecoverable
All funds transferred to the fake platform are sent directly to cryptocurrency wallets controlled by the fraud operation. Cryptocurrency transactions are irreversible by design. Once transferred, the funds are typically moved through a series of wallets using mixing services that obfuscate the transaction trail, then converted to cash through overseas exchanges operating outside US regulatory reach.
Law enforcement can, in some cases, trace and freeze cryptocurrency wallets if they act quickly enough after a report is filed. Speed of reporting is the single most important factor in the small number of cases where partial recovery has occurred. The FBI's IC3 and the Secret Service's Cyber Fraud Task Forces have both succeeded in freezing assets in pig butchering cases where victims reported within 24 to 48 hours of the first suspicious transaction. Delays of days or weeks make recovery effectively impossible.
Red Flags
- Someone you have never met in person introduces a cryptocurrency investment opportunity
- The investment platform is one you have never heard of and cannot find through standard financial regulatory searches
- Your contact is reluctant to video call, claims their camera is broken, or video calls appear scripted or low-quality
- Profits appear unusually consistent and high—5 to 10 percent weekly returns are not realistic
- You are encouraged to invest more as your "balance" grows
- Withdrawing funds requires paying a tax, fee, or "verification deposit" first
- The platform's customer support is unresponsive or provides only generic replies
- Your contact discourages you from telling family or friends about the investment
- Stop all transfers immediately. Do not pay any "tax" or "fee" to unlock a withdrawal—this is an additional theft, not a legitimate requirement.
- File a report with the FBI Internet Crime Complaint Center at ic3.gov. Time is a factor in any potential recovery; report the same day.
- Report to the FTC at reportfraud.ftc.gov and to your state attorney general's consumer protection office.
- Contact your bank immediately if any wire transfers or ACH payments are involved. Banks can sometimes reverse wire transfers within 24 to 48 hours of initiation if fraud is reported promptly.
- If you used a US cryptocurrency exchange (Coinbase, Kraken, Gemini), contact their fraud team and reference your transaction IDs. Compliant exchanges cooperate with law enforcement holds.
- Do not engage with anyone who contacts you offering to recover your lost funds for a fee. Recovery scammers specifically target pig butchering victims and are a distinct secondary fraud operation.
- Speak to someone you trust. Pig butchering victims experience significant shame; this is by design. The fraud is sophisticated and victims are not at fault for being targeted.