What is a pig butchering scam?
A pig butchering scam is a long-duration investment scam in which scammers build trust with victims over weeks or months — typically through unsolicited messages on social media, dating apps, WhatsApp, or text message — before introducing a fraudulent cryptocurrency investment opportunity and ultimately stealing the victim’s funds. The name comes from the Chinese phrase shā zhū pán (杀猪盘), meaning “pig butchering plate”: the victim is deliberately cultivated — fattened — with apparent friendship or romance before being led to a fake trading platform and financially devastated. Pig butchering is not a one-person crime. It is an organized criminal industry, primarily run from scam compounds in Southeast Asia, that generates tens of billions of dollars in losses every year and has become the single largest category of cryptocurrency scams by total value.
Why is it called “pig butchering”?
The term comes directly from Chinese criminal slang. Shā zhū pán describes a systematic process: find the pig (identify a target), fatten the pig (build trust and emotional connection over weeks or months), then slaughter (steal the victim’s money and disappear). Scammers use this term internally to describe their operation — and their victims.
The name has been adopted by the FBI, FTC, California’s Department of Financial Protection and Innovation (DFPI), and regulators worldwide because it accurately captures what makes this fraud different from other investment scams and romance scams: victims are not opportunistically robbed. They are deliberately cultivated for maximum financial extraction before the scammer vanishes.
How does a pig butchering scam work?
Pig butchering follows a predictable four-phase playbook. Understanding each phase is the most effective protection against it.
| Phase | Name | What Happens |
|---|---|---|
| 1 | First Contact — Finding the Pig | Scammer sends an unsolicited message: a wrong number text, a LinkedIn connection, a dating app match, or a social media DM. No pitch. No pressure. Just a friendly opening. |
| 2 | Grooming — Fattening the Pig | Daily messages, emotional check-ins, apparent intimacy. A romantic or professional relationship develops over weeks or months. Investment is mentioned casually, as personal success — not a pitch. |
| 3 | The Investment Pitch | The scammer shares a cryptocurrency trading platform they “personally use.” Small deposits appear to generate impressive returns on a fake dashboard. The victim is invited to invest more. |
| 4 | The Slaughter | When the victim tries to withdraw funds, the platform demands taxes, fees, or compliance deposits. Every payment leads to another demand. Eventually the scammer stops responding and the platform disappears. |
Phase 1 — First Contact
Pig butchering scams begin with one of three opening moves: a wrong number text that opens into conversation when the victim responds; a connection request from an attractive profile on LinkedIn, Instagram, or Facebook; or a dating app match. The opening message is never a pitch. There is no urgency, no investment talk, no request for money. The only goal in Phase 1 is to open a communication channel and establish a reason to keep talking.
Common opening lines: “Sorry, I think I sent this to the wrong number!” or a connection request with a note about the victim’s professional background. The persona is designed to seem plausible — usually an attractive, successful professional who happens to be looking for conversation.
Phase 2 — Grooming
Once contact is made, the scammer builds a relationship. Daily messages. Emotional check-ins. Shared personal details. Apparent vulnerability. In many cases, the development of what feels like a genuine romantic relationship or close friendship. The emotional manipulation is calculated and methodical — designed to make the potential victim feel uniquely understood and connected before a single investment is ever mentioned.
The scammer’s identity is almost always entirely fabricated — a high-income professional (investor, doctor, engineer, business owner) with a compelling life story. Video calls are refused with plausible excuses, or conducted using deepfake technology. Investment is introduced carefully: a casual mention of “how well my trading has been going” or a reference to a mentor who taught them. The goal is to make the victim curious enough to ask — not for the scammer to push.
This phase can last weeks to months. The longer the relationship, the more the victim trusts the person — and the more they will ultimately invest.
Phase 3 — The Investment Pitch
Once trust is established, the scammer introduces a specific cryptocurrency trading platform — usually presented as something they use personally and have had great success with. The victim is directed to download an app or visit a website. The platform looks real: professional design, live-looking market data, a convincing customer service team (who are part of the scam operation). Small initial deposits appear to generate strong, consistent returns on the dashboard — these returns are entirely fabricated. What looks like a legitimate investment opportunity is a fraudulent investment platform engineered to look credible. Victims are often encouraged to recruit friends and family into the same crypto scam, extending the network’s reach.
Fraudulent apps regularly appear on Google Play and the Apple App Store before being removed — do not assume app store presence means a platform is legitimate.
Phase 4 — The Slaughter
Once the victim has deposited a significant amount — losses routinely reach tens of thousands to hundreds of thousands of dollars — the scammer encourages one final, larger investment. Then, when the victim tries to withdraw their balance, the platform demands payment of “taxes,” “fees,” “insurance,” or “compliance deposits” before funds can be released.
No payment unlocks the funds. Each payment leads to another demand. Eventually the scammer stops responding, the platform vanishes, and the money is gone. In sophisticated operations, the platform continues running while the same scammer runs the same cycle on multiple victims at the same time.
The scale of pig butchering: by the numbers
Pig butchering has grown from a regional fraud typology documented primarily in Southeast Asia into the single largest category of cryptocurrency investment fraud in the world by total value.
Chainalysis research has traced tens of billions of dollars in annual pig butchering proceeds flowing through cryptocurrency networks. That figure represents only the on-chain flows that blockchain analytics can attribute — total losses including cash and fiat wire transfers are almost certainly higher. The FBI’s IC3 received over 69,000 complaints about cryptocurrency investment fraud in 2023 alone. And those are only the cases that were reported: most victims don’t come forward, and many don’t realize they’ve been scammed until months after the fact.
Individual losses are often devastating. Victims routinely lose their life savings, retirement accounts, or home equity. Because the romantic relationship or friendship feels entirely real — the emotional manipulation has been thorough and sustained — many potential victims continue depositing even after the first withdrawal fee demand, hoping to recover what they’ve already lost. The grief of losing money and a relationship that never existed simultaneously is one of the most psychologically damaging aspects of this type of scam.
The human trafficking connection
Many pig butchering operations are not run by willing criminal participants. They are run by people who were trafficked.
Criminal organizations based primarily in Myanmar, Cambodia, Laos, and other parts of Southeast Asia recruit workers with fraudulent job advertisements — customer service roles, data entry positions, call center work — that promise legitimate employment. Once workers arrive, their passports are confiscated. They are confined in scam compounds and forced to conduct fraud under threat of violence. Workers who fail to meet daily scam quotas face beatings or are sold to other compounds. Those who attempt to escape face additional trafficking chains.
The U.S. State Department, the United Nations, and multiple international law enforcement agencies have documented the scale of forced labor in pig butchering compounds. Estimates run to hundreds of thousands of people trafficked into these operations across the region. Some of those workers have managed to send distress signals through the very messages they are forced to send — which is one reason many pig butchering contacts feel slightly off, overly scripted, or emotionally inconsistent.
This dimension transforms pig butchering from a financial crime into a human rights crisis. It is a primary driver of the international law enforcement coordination targeting pig butchering infrastructure — and it means that the person on the other end of a pig butchering message may themselves be a victim.
Red flags: How to identify a pig butchering scam
Warning signs during the relationship phase:
- Unsolicited contact from someone you don’t know — via text, dating app, LinkedIn, or WhatsApp — that pivots quickly to daily conversation
- Refusal to meet in person or video call, with ongoing excuses (bad camera, work restrictions, living abroad)
- Unusually fast emotional intimacy — declarations of connection or affection that feel too intense too quickly
- Profile photos that look professionally styled or return stock photo results in a reverse image search
- Claimed profession is high-income and internationally mobile (investor, doctor, engineer, business owner) with vague specifics when pressed
- They are always available to message — often at unusual hours — but never able to meet
Warning signs during the investment phase:
- Investment opportunity introduced casually — as sharing personal success rather than making a pitch
- Platform or app is not listed on major app stores, was recently launched, or has no independently verifiable track record
- Returns appear consistently high with no explanation for the gains — no legitimate trading platform guarantees returns
- Small early withdrawals succeed; larger withdrawals trigger demands for “fees,” “taxes,” or “compliance deposits”
- Pressure to deposit more before a withdrawal can be processed
- Pressure to recruit friends or family members to the same platform
- Platform customer service is responsive and helpful — until a withdrawal is requested
How to protect yourself from pig butchering scams
For Individuals:
- Be cautious of unsolicited contact — scammers operate on every major platform including WhatsApp, Telegram, Instagram, LinkedIn, Facebook, dating apps, and text message
- Do a reverse image search on profile photos before investing emotionally or financially in any online relationship
- Never make investment decisions based on the recommendation of someone you have not met in person, no matter how well you think you know them online
- Verify any trading platform independently before depositing funds — check FINRA BrokerCheck, the SEC’s EDGAR database, and your state securities regulator
- Be highly skeptical of any platform showing consistent high returns without risk — crypto trading does not work that way
- If a platform demands fees or taxes before releasing funds, stop all deposits immediately and contact law enforcement
- Talk to a trusted person in your life before making any significant investment introduced through an online relationship — a second opinion from someone who doesn’t know the scammer is one of the most effective safeguards
For Banks and Financial Institutions:
- Transaction monitoring programs should flag patterns consistent with pig butchering: large outbound transfers to new cryptocurrency exchanges, followed by additional transfers in quick succession, often accompanied by increased urgency in customer communication
- Customer education materials describing pig butchering mechanics are among the most effective prevention tools — many victims recognize the scam only after seeing a description of it
What to do if you’re a victim
If you believe you have been targeted or victimized by a pig butchering scam, act as quickly as possible. The sooner you act, the better the chance of limiting further losses and — in some cases — supporting fund recovery through law enforcement action.
- Stop all transfers immediately. Do not make any additional deposits, regardless of what the platform or scammer tells you about fees, penalties, or account lockouts.
- Do not pay withdrawal fees. Legitimate exchanges do not require payment to release funds. Any demand for a fee, tax, insurance, or “compliance deposit” before withdrawal is part of the scam.
- Preserve all evidence. Screenshot all communications — messages, profiles, the trading platform, transaction confirmations, and any emails or documents. Do not delete anything. This evidence will be needed for any law enforcement report.
- Report to the FBI IC3. File a complaint at ic3.gov. The Internet Crime Complaint Center is the primary federal reporting mechanism for cryptocurrency fraud and shares intelligence with the FBI, Secret Service, and partner agencies.
- Report to the FTC. File at reportfraud.ftc.gov. FTC complaints contribute to national fraud intelligence and support enforcement actions against fraud networks.
- Contact your bank or exchange. If funds were sent from a bank account, contact your bank immediately. If cryptocurrency was transferred through a regulated exchange, contact the exchange’s fraud team — they may be able to flag receiving addresses.
- Contact your state securities regulator. State agencies such as the DFPI (California) have active crypto fraud units and may be able to assist with investigation and recovery efforts.
- Consider professional help. Blockchain forensics firms can trace on-chain fund flows and, in some cases, support asset recovery. Law enforcement investigations have successfully recovered pig butchering proceeds by tracing cryptocurrency to the regulated exchanges where criminals attempted to convert funds to fiat. Recovery is difficult but not always impossible.
How Chainalysis investigates pig butchering at scale
Pig butchering operations move billions of dollars in cryptocurrency every year — and every transaction is recorded permanently on a public blockchain. Among all cryptocurrency scams, pig butchering leaves some of the most traceable on-chain footprints: victim deposits funnel into scam compound wallets, which consolidate and layer funds through a predictable infrastructure. Chainalysis researchers trace pig butchering proceeds from victim wallets through the layering infrastructure that scam networks use to obscure the origins of stolen funds — through cryptocurrency exchanges, mixers, cross-chain bridges, and over-the-counter brokers — to the fiat off-ramps where criminal proceeds are converted to cash. This research produces the threat intelligence that law enforcement agencies use to identify, target, and dismantle pig butchering networks globally.
- Chainalysis Reactor: The investigation platform used by the FBI, Secret Service, and international law enforcement to trace pig butchering proceeds on-chain, identify the exchange accounts where criminals attempt to cash out, and build prosecutable cases. Reactor traces fund flows across 400+ blockchain networks, following proceeds through even complex layering patterns to reach the regulated financial system chokepoint where enforcement action is possible.
- Chainalysis KYT (Know Your Transaction): Real-time transaction monitoring that enables cryptocurrency exchanges to detect patterns consistent with pig butchering: large inbound transfers from new wallets followed by rapid subsequent transfers, at velocities inconsistent with normal investment behavior. KYT generates alerts for compliance review and SAR filing, keeping exchanges from unwittingly processing scam proceeds.
- Chainalysis Data Solutions (DS): Pig butchering wallet cluster attribution and threat intelligence feeds, continuously updated as researchers identify new scam compound infrastructure. Exchanges and investigators use this data to stay current on active operations rather than reacting only after funds have moved.
Frequently asked questions about pig butchering scams
Q: What is a pig butchering scam?
A: A pig butchering scam is a type of investment fraud in which scammers build a fake romantic or friendship relationship with a victim over weeks or months — then introduce a fraudulent cryptocurrency trading platform and steal the victim’s deposits when they attempt to withdraw. The scam takes its name from the Chinese phrase shā zhū pán (“pig butchering plate”), referring to the process of fattening a victim before the financial slaughter. Pig butchering is currently the single largest category of cryptocurrency fraud by total reported losses.
Q: Why is it called “pig butchering”?
A: The name comes from Chinese criminal slang used internally by the scam networks that run these operations. “Shā zhū pán” — pig butchering plate — describes the three-phase process: find the pig (identify a target), fatten the pig (build trust over time), slaughter the pig (steal the funds). The FBI, FTC, and state regulators have adopted the term because it accurately captures the deliberate, systematic nature of the fraud.
Q: How do pig butchering scams typically start?
A: Most pig butchering scams begin with an unsolicited message — a “wrong number” text, a LinkedIn connection request, a dating app match, or a social media DM. The initial message is never a financial pitch. The scammer’s first goal is simply to establish a conversation and build a reason to keep messaging. The investment opportunity doesn’t appear until weeks or months into the relationship, once trust has been carefully built.
Q: What platforms do pig butchering scammers use?
A: Scammers operate on virtually every major platform: WhatsApp, Telegram, Instagram, Facebook, LinkedIn, Tinder, Hinge, Bumble, and standard SMS text messages. There is no single platform to avoid. The common thread is unsolicited contact followed by rapid emotional escalation — not the platform itself.
Q: Are pig butchering scammers working alone?
A: No. Pig butchering is run by large, organized criminal networks — not lone individuals. Many operations are staffed by victims of human trafficking who are forced to conduct scams under threat of violence in compounds in Southeast Asia, primarily Myanmar, Cambodia, and Laos. The person messaging you may be following a script, working in shifts, and themselves a prisoner. This is why the FBI, State Department, and United Nations treat pig butchering as both a financial crime and a human rights crisis requiring international law enforcement cooperation.
Q: How much money do people typically lose to pig butchering scams?
A: Individual losses vary widely but are often devastating — ranging from tens of thousands to hundreds of thousands of dollars, and in some cases over $1 million. Many victims liquidate savings accounts, retirement funds, or home equity. The FBI’s Internet Crime Complaint Center received over 69,000 complaints about cryptocurrency investment fraud in 2023 with reported losses exceeding $5.6 billion — and those figures represent only victims who reported. Most do not.
Q: Can I get my money back after a pig butchering scam?
A: Full recovery is rare, but partial recovery is possible in some cases — particularly when victims report quickly, before funds have been fully converted to cash. Blockchain forensics allows investigators to trace cryptocurrency from victim wallets through exchange accounts where criminals attempt to cash out. Law enforcement has seized pig butchering proceeds in documented cases where funds were traced to regulated exchanges before withdrawal. If you have been victimized, report to the FBI IC3 at ic3.gov as soon as possible and consult with a blockchain forensics professional about tracing options.
Pig butchering is the fastest-growing cryptocurrency fraud category — and one of the most systematically documented through blockchain analytics.
Chainalysis gives law enforcement agencies and compliance teams the intelligence to trace, disrupt, and investigate pig butchering networks at scale.
Explore Chainalysis Reactor for pig butchering investigations
Learn how Chainalysis KYT detects pig butchering transaction patterns