What Is a Pig Butchering Scam? How Crypto Romance Scams Work
- What Is a Pig Butchering Scam?
- How a Pig Butchering Scam Works, Step by Step
- Pig Butchering vs Other Crypto Scams
- Red Flags Checklist: How to Spot Pig Butchering
- How to Check Whether a Crypto Investment Platform Is Real
- Already Sent Money? What to Do Right Now
- How Self-Custody Helps You Avoid Pig Butchering Traps
- How Governments Are Fighting Pig Butchering
- Final Thoughts
A pig butchering scam is a long-con crypto investment fraud. A stranger builds trust over days or weeks, shows invented profits on a fake trading platform, then blocks withdrawals behind demands for "taxes" or "fees." In 2025, cryptocurrency investment fraud generated 61,559 FBI complaints and $7.228 billion in losses, the largest reported source of financial loss to Americans that year. This guide covers the stages, red flags, platform checks, and next steps if you have sent money.
What Is a Pig Butchering Scam?
A pig butchering scam has three parts: a fabricated relationship, a fake investment platform, and a withdrawal trap. The scammer may spend weeks or months making the relationship feel real before asking for money.
Why it's called "pig butchering"
The name translates the Chinese phrase "sha zhu pan." It describes criminals fattening victims with attention and the illusion of profit before taking everything. Interpol advocated the less stigmatizing term "romance baiting" in December 2024 because the original term can shame victims into silence.
Who runs these scams
The FBI describes operations run largely by organized criminal groups in Southeast Asia that use trafficked people as forced labor. On October 14, 2025, the DOJ indicted Prince Group chairman Chen Zhi over Cambodian scam compounds and filed a forfeiture complaint for approximately 127,271 BTC, valued at about $15 billion at the time.
How a Pig Butchering Scam Works, Step by Step
The FBI's sequence moves from first contact to a fake platform, blocked withdrawals, and sometimes a second fraud. Each stage has a tell.
Stage 1: The "wrong number" text or friendly first contact
The opener looks harmless: a wrong-number text, dating-app compliment, LinkedIn request, or Telegram introduction. It can arrive through SMS, WhatsApp, dating apps, Instagram, Facebook, LinkedIn, or Telegram. The scammer is not asking for money yet.
Red flag: An unsolicited stranger quickly pivots to personal questions or compliments.
Stage 2: Building trust and moving to WhatsApp or Telegram
Daily messages create a feeling of friendship or romance. The person shares lifestyle photos but avoids a credible live video call. Deepfakes or voice cloning can help impersonate a real person.
Red flag: No credible live video call, or video that seems inconsistent with the relationship.
Stage 3: The "mentor," insider tip or investment group
Once trust is established, an "uncle," analyst, or mentor appears. They offer a secret crypto or gold trading strategy with insider access.
Red flag: A contact you have never met introduces an exclusive group with guaranteed returns.
Stage 4: The fake crypto investment platform
The scammer sends you to a lookalike site or unofficial app. Its dashboard shows steady profits. A small withdrawal, such as $200 from a $500 deposit, may be allowed before larger deposits are requested.
Red flag: You found the platform through a chat, and it is absent from official app stores.
Stage 5: Bigger deposits, loans and pressure
Pressure rises after the first deposit. A "VIP tier," limited trade window, or midnight bonus pushes you to add more. The rising balance is invented.
Red flag: A contact offers a loan or rushes you into another deposit.
Stage 6: Withdrawal blocked: "taxes," "fees" and frozen accounts
When you try to withdraw, the platform asks for a tax, anti-money-laundering fee, or unlock charge. Paying creates another demand.
Red flag: Any upfront payment required to release your own funds.
Stage 7: The follow-up recovery scam
After the platform vanishes, fake lawyers, "IC3 agents," or recovery firms may promise help for an upfront fee. In 2025, recovery scams produced 10,516 complaints and $1.4 billion in reported losses.
Red flag: An unsolicited recovery offer after a loss is another scam.
Summary: The Seven Stages
| Stage | What the scammer does | What you see | Red flag |
|---|---|---|---|
| 1. First contact | Sends an unsolicited, friendly message | A "wrong number" or compliment | Stranger pivots fast to personal chat |
| 2. Trust-building | Daily messages, lifestyle photos, avoids live video | A warm new friendship or romance | No credible live video call |
| 3. Investment introduction | Introduces a mentor or exclusive group | A secret strategy with insider access | Guaranteed or "insider" returns |
| 4. Fake platform | Directs you to a specific site or app | Dashboard shows fast, steady profits | Platform not in official app stores |
| 5. Escalation | Offers loans, creates urgency | VIP tiers, closing windows, bonuses | Pressure to deposit more, fast |
| 6. Withdrawal blocked | Demands taxes or fees before release | Fees multiply; funds never arrive | Any fee required to withdraw your own money |
| 7. Recovery scam | Poses as a lawyer or recovery agent | Offer to get your money back | Unsolicited contact promising recovery |
Pig Butchering vs Other Crypto Scams
| Scam | How it starts | How the money is taken | Typical timeline |
|---|---|---|---|
| Pig butchering | Unsolicited personal message | Fake platform, blocked withdrawals, fees | Weeks to months |
| Classic romance scam | Dating app or social media | Gift cards, wire transfers, "emergency" requests | Weeks to months |
| Rug pull | Token launch hype | Developers drain liquidity and disappear | Days to weeks |
| Phishing / wallet drainer | Fake website or airdrop link | Victim connects wallet; assets drained | Minutes |
| Bitcoin ATM impersonation | Phone call from fake authority | Victim deposits cash at a Bitcoin ATM | Hours |
Pig butchering uses a long personal relationship and fake investment platform. A Ponzi scheme pays early investors with money from later ones, while pig butchering displays fake returns.
Red Flags Checklist: How to Spot Pig Butchering
If three or more apply, stop and verify before sending anything.
- You received an unsolicited message from a stranger, a "wrong number," flattering comment, or random connection request
- The conversation moved quickly to WhatsApp, Telegram, or another encrypted app
- The person avoids a credible live video call, or the video quality seems inconsistent
- Conversation frequently turns to wealth, investing, and financial success
- A "mentor," "uncle," or analyst appears with a secret strategy or insider access
- The investment platform cannot be found in the official App Store or Google Play, or its domain was registered recently
- Deposits are made only in USDT or other crypto, sent to an address provided in chat or via a crypto ATM
- Returns are guaranteed or unusually steady, with no losses
- A small withdrawal was allowed early on, but larger ones are now blocked
- You've been asked to pay a "tax," "unlock fee," or "anti-money-laundering" charge before withdrawing
- Your contact has asked you to keep the investment secret from family or your bank
- The platform or your contact has offered to lend you money to invest more
This is social engineering in practice. Each step can seem reasonable alone. The pattern matters.
How to Check Whether a Crypto Investment Platform Is Real
Search the exact domain or app name plus the word "scam." Do this before depositing anything.
Check the domain age. A WHOIS lookup shows when it was registered. A platform claiming years of history on a month-old domain is a warning sign.
Check the relevant regulator register. In the US, use FINRA BrokerCheck, the SEC Investment Adviser Public Disclosure database, or FinCEN's MSB Registrant Search.
Download apps only from official stores through the company's own website. Confirm that the developer name matches the company.
Never treat a chat-supplied deposit address as proof. Legitimate platforms do not ask you to send crypto to an address pasted into a conversation.
- Request a full withdrawal early. A tax or fee before processing means you should stop.
Already Sent Money? What to Do Right Now
Stay calm. This is not your fault. These are professional criminal operations.
Stop all payments immediately. Do not pay another fee, tax, or unlock charge.
Preserve everything. Save chats, the platform URL, wallet addresses, and transaction IDs.
Report to the FBI IC3 and the FTC. Include addresses, transaction IDs, website links, and screenshots. Outside the US, report to your national fraud authority.
Contact your exchange or payment provider. Act quickly, as funds can sometimes be traced or frozen before they move further.
Secure any compromised wallet. If you shared a seed phrase, installed an unfamiliar app, or approved an unknown contract, move carefully and follow your wallet provider's recovery steps.
Ignore recovery offers. An unsolicited promise to recover funds for a fee is a follow-up scam.
- Talk to someone you trust. Breaking the isolation helps.
How Self-Custody Helps You Avoid Pig Butchering Traps
No wallet can stop a payment you choose to authorize. A hardware wallet will sign a transfer to a scam address if you approve it. Self-custody keeps private keys on a device you control, rather than with an exchange. With Tangem's default seedless setup, there is no recovery phrase for a scammer to request. Keys are generated on-chip and never leave the secure element.
Each Tangem hardware-wallet transaction requires a physical tap of the card or ring. That creates a pause while you consciously approve the transfer. It is not a guarantee, but a remote scammer cannot bypass that step. The Tangem app's Address Book saves frequently used addresses for quick selection. It validates address format, not recipient identity. Get a Tangem wallet and set it up before you need it.
How Governments Are Fighting Pig Butchering
Enforcement accelerated in 2025.
- DOJ Scam Center Strike Force (November 12, 2025): reported $401,657,274.33 in cryptocurrency seized or forfeited in its first actions.
- Prince Group indictment (October 14, 2025): DOJ filed a forfeiture complaint for approximately 127,271 BTC, valued at about $15 billion at the time.
- Treasury/FinCEN rule on Huione Group (October 14, 2025): found at least $4 billion in illicit proceeds laundered from August 2021 through January 2025, including pig-butchering proceeds.
- FBI Operation Level Up (since January 2024): notified more than 8,000 victims and reported more than $500 million in savings. In 2025, it contacted 3,780 victims, 78% of whom did not know they were being scammed.
Recovery remains rare. Prevention is the most reliable protection.
Final Thoughts
Unsolicited contact, a crypto opportunity, and a platform chosen by that contact are enough to stop before sending money. That pattern describes a pig butchering scam, whether it starts with a wrong-number text or a LinkedIn message. Keep your crypto in a self-custody wallet you control. Get a Tangem wallet before you need it.
This article is for educational purposes only and is not financial or legal advice. If you think you've been scammed, report it to the FBI's IC3 (ic3.gov), the FTC (ReportFraud.ftc.gov) or your local authorities.
FAQ
-
A pig butchering scam is a long-con crypto investment fraud. A stranger builds trust, presents a fake platform with invented profits, and blocks withdrawals behind demands for taxes or fees. The FBI reported $7.228 billion in crypto investment-fraud losses in 2025.
-
The name translates the Chinese phrase "sha zhu pan." It refers to criminals fattening victims with attention and fake profits before taking everything. Interpol advocated "romance baiting" in December 2024 because the term can discourage reporting.
-
First contact often looks like a wrong-number text, dating-app compliment, or random connection request. The FBI notes that scammers use SMS, WhatsApp, dating apps, Instagram, Facebook, LinkedIn, and Telegram groups. They then move the conversation to an encrypted messaging app.
-
Recovery is possible but rare. Report to the FBI IC3 and FTC, then contact the exchange or payment provider you used. Do not pay an asset-recovery firm that contacts you after a loss. That is another scam.
-
Legitimate investment platforms do not require an upfront payment before releasing your funds. Tax and fee demands are a final attempt to extract more money. Paying produces another demand.
-
Search the exact domain plus "scam," check its registration date, and verify the company with a financial regulator. Download apps only from official stores through the company's website. Never deposit to an address sent in chat.
-
In the US, file a complaint with the FBI Internet Crime Complaint Center and the FTC. Include wallet addresses, transaction IDs, the platform URL, and chat screenshots. Contact your exchange or payment provider at the same time.