Pig Butchering Scam: 5 Stages of a $16.6B Fraud (2026)
A pig butchering scam is a romance-crypto con run from forced-labor compounds. Learn the five stages and the stage-one exit signs. Read before you invest.
Unrated
The number is $16.6 billion. That is what victims reported losing to internet crime in the United States in 2024, according to the FBI — a 33 percent jump in a single year, and sitting inside that number is the most polished con of the internet age.
A pig butchering scam is a romance con rebuilt as an assembly line. A stranger contacts you — a wrong-number text, a wrong-person WhatsApp, a charming comment under your photo. They are in no hurry. Over weeks or months they become your confidant, your flirtation, your quiet financial adviser. Then they show you an investment platform where your money appears to multiply. The money was gone the moment you deposited it. The dashboard is theater. When you finally try to withdraw, there are taxes to pay, then fees, then silence.
The name comes from the Chinese sha zhu pan — roughly, "killing-pig plate." The victim is the pig. The relationship is the fattening. The ending is the slaughter.
This guide is the full anatomy: who runs it, how each stage works, the verified loss figures, and the stage-one tells that let you walk away while walking away still costs nothing.
What exactly is a pig butchering scam?
On September 8, 2023, the U.S. Treasury's Financial Crimes Enforcement Network did something it rarely does for a single scheme: it issued a formal alert to every financial institution in the country. The alert describes a fraud in which criminals use fictitious identities and "the guise of potential relationships" to build what the victim believes is a trusted partnership — then steal everything in it.
The scammers' own slang is the most honest part of the operation. Victims are "pigs." The grooming is "fattening." The final theft is "butchering." FinCEN records all three terms without flinching.
Regulators file it under romance crypto scam, confidence fraud, virtual-currency investment scheme. The name is Chinese, and federal prosecutors say the organizations behind it are too: Chinese transnational criminal groups running the con at industrial scale out of Southeast Asia. In fiscal year 2025 alone, the U.S. Secret Service fielded calls from roughly 3,000 victims of cryptocurrency investment schemes.
That last fact comes from the Justice Department. So does what follows.
Who is actually typing on the other end?
Here is the part most coverage skips. The person grooming you may be a prisoner.
In August 2023, the UN Human Rights Office reported that credible sources indicate at least 120,000 people across Myanmar may be held in situations where they are forced to carry out online scams, with around 100,000 more in Cambodia and tens of thousands across Laos, the Philippines and Thailand — recruited on fake job ads for tech or sales work, stripped of their passports, guarded, and punished when they miss quota. The FBI had warned about exactly those job ads three months earlier.
Two sets of victims. The UN's phrase, not mine.
In November 2025, the Justice Department stood up its first Scam Center Strike Force and put the machinery on the record: compounds run by Chinese organized crime affiliates in Cambodia, Laos and Burma, workers held against their will and guarded by armed groups, an industry that — in DOJ's words, citing recent reporting — "defrauds Americans of nearly $10 billion per year." The strike force announced it had already seized and forfeited $401,657,274.33 in cryptocurrency, filed forfeiture proceedings on $80 million more, and watched Treasury sanction the Democratic Karen Benevolent Army, one of the militias guarding the compounds along the Thai border, the same day.
The five stages of a pig butchering scam
Every documented case runs the same pipeline. FinCEN's alert lays it out in cold compliance language; victims' reports fill in the color. Learn the sequence once and you will see it coming forever.
Stage one: the bump
"Hi, is this David? We met at the conference in Austin." A wrong-number text, a wrong-person LinkedIn note, a flirty reply to your Instagram story. FinCEN says the opener is almost always an "accident" — a wrong number, an old friend re-establishing contact. It is never an accident. Any reply at all, even "sorry, wrong number," confirms your number is live and your attention is being priced.
Stage two: the pen
The conversation migrates to WhatsApp or Telegram within days. Then come the good-morning texts, the remembered details, the photos of a life one notch more glamorous than yours. Weeks of it. The FBI describes this phase as building a friendship or romance before money is ever mentioned. Video calls never quite happen — the connection is always bad, the camera always broken.
Stage three: the feed
The investment arrives sideways. A screenshot of gains. An uncle who works in "liquidity mining." You are guided to buy crypto on a real, regulated exchange first — that part is genuine, and it buys trust — and then to move the coins to their platform: a glossy site with a Trustpilot page of planted five-star reviews and a name chosen to sit one keystroke away from legitimate. In November 2022, federal prosecutors seized seven domains spoofing the Singapore International Monetary Exchange; five victims lost more than $10 million through them in four months. The platform shows fabricated gains. Your first withdrawal succeeds. Small, and deliberately allowed — the industry learned long ago that one working withdrawal is the best marketing money can buy.
Stage four: the fattening
Now the escalation: limited-time pools, VIP tiers, matched deposits, a celebration of your "anniversary" as an investor. FinCEN's red-flag list for bank staff reads like a coroner describing cause of death — a customer with no crypto history suddenly wiring six figures to an exchange, a retiree cashing out a certificate of deposit before maturity, a homeowner drawing a home-equity line or second mortgage and converting the proceeds to virtual currency within days.
Stage five: the slaughter
Then you try to take out a serious sum. The account suddenly owes taxes. Then an anti-money-laundering review fee. Then a 20 percent "unfreezing deposit." Pay them all and new fees materialize; refuse, and the lover ghosts, the account freezes, the site goes dark. FinCEN calls this "the point of no return."
The money was never on the platform. It left with your first deposit.
Why intelligent people keep losing everything
Not greed. That explanation is too lazy for what the compounds have engineered. The machinery runs on isolation — the scammer quietly becomes your primary daily relationship — and on manufactured urgency, and on the sunk-cost gravity of a six-figure balance that exists only on a scammer's server, which you will pay real money to defend because admitting it is fake means admitting everything that came with it was fake too.
The FBI's own framing, from its Operation Level Up initiative: criminals instill "a false sense of urgency or isolation." In the operation's first year, agents identified and called more than 4,300 people mid-scam, saving an estimated $285 million — and more than three-quarters of the people they reached had no idea they were being defrauded.
Shame finishes the job. The UN notes that stigma keeps both the defrauded and the trafficked from coming forward, which is one reason every official figure in this article should be read as a floor, not a ceiling.
The numbers we can prove
The FBI's 2024 Internet Crime Report counted 859,532 complaints and $16.6 billion in reported losses. Complaints referencing cryptocurrency: roughly 149,000, with about $9.3 billion gone. Victims over 60 filed 147,127 complaints and lost $4.8 billion — the heaviest toll of any age group.
On the consumer side, the FTC's data tells the same story from a different window: $12.5 billion reported lost to fraud in 2024, up 25 percent, with investment scams the costliest category at $5.7 billion, and more money stolen through bank transfers and cryptocurrency than through every other payment method combined. For the romance half of the equation, the FTC's 2023 data book records about 64,000 romance-scam reports, $1.14 billion in losses, and a median loss of $2,000.
And the academic estimate that made prosecutors blink: University of Texas researchers John Griffin and Kevin Mei traced roughly $75.3 billion from pig-butchering-linked wallets into suspicious exchange deposit accounts between January 2020 and February 2024. Every figure in this piece was checked against a primary source — the process is documented in our methodology — and if we get one wrong, our corrections policy says exactly how we fix it.
How do you spot a pig butchering scam at stage one?
Stage one is where this scam is beatable, and it is beatable cheap. The tells:
- Any unsolicited message that warms up instead of going away. Wrong numbers apologize and disappear. Butchers stay.
- A rapid move to WhatsApp or Telegram, away from whatever platform carried the first contact.
- A romantic or friendly contact who never manages a live, verifiable video call.
- Any mention of investing, crypto, forex or "liquidity mining" from a person you have never met in the flesh. Full stop.
- A platform you cannot find in any regulator's register. Run a free WHOIS lookup on the domain — a "ten-year-old exchange" registered eleven weeks ago is not an exchange — and confirm the company with the SEC, FINRA or your state regulator before a dollar moves. Our walkthrough on checking whether a website is legit shows the exact checks.
- Any withdrawal that requires a new deposit first. That is not a withdrawal. That is the slaughter announcing itself.
Two or more of these, and you are not being courted — you are being fattened. Our broader field guide to spotting crypto scams covers the platform-side red flags in detail.
What if it already has its hooks in you?
Act like a compliance officer, not a victim. In order:
- Stop sending money today. No taxes, no fees, no "final verification deposit." You cannot pay your way out of a fabricated balance.
- Preserve everything — chat logs, phone numbers, wallet addresses, transaction hashes, the platform URL. Investigators work off exactly these artifacts.
- Call your bank and the exchange you bought crypto through; say you are the victim of an investment fraud and ask what can be frozen or recalled. Then file at IC3.gov. The FBI's Recovery Asset Team exists to flag fraudulent transfers fast enough for banks to freeze them. Hours matter. Not weeks.
- Report it to the FTC at reportfraud.ftc.gov as well; those reports feed the databases that get compound infrastructure shut down.
- Refuse anyone who contacts you promising to recover your funds for an upfront fee. That is the recovery scam — the same networks, selling your name as a qualified lead.
- Work through our first 48 hours protocol step by step, and if you want this desk to examine the platform that took your money, contact us.
One more thing, and I say it to every victim I interview: the shame you feel is the compound's last revenue stream. Talking — to your bank, to the FBI, to your family — is the one withdrawal they cannot block.
Frequently asked questions
What is a pig butchering scam, in one sentence?
A long-con fraud in which a stranger builds a romantic or friendly relationship online, then steers the victim into a fake cryptocurrency investment platform and steals every deposit while showing fabricated profits.
Why is it called "pig butchering," and what does sha zhu pan mean?
Sha zhu pan is Chinese for, loosely, "killing-pig plate" — the scammers' own term for the process: the victim is the pig, the weeks of grooming are the fattening, and the theft is the slaughter. FinCEN adopted the English translation in its September 2023 alert because the scammers themselves use it.
How do I know if the person messaging me is running this scam?
Run the stage-one test: unsolicited contact that lingers, a fast move to encrypted messaging, no verifiable video call, and — the decisive tell — any investment talk from someone you have never met. One tell might be coincidence. Three is a compound schedule.
I already sent money. Can I get any of it back?
Sometimes a portion, if you move in hours: report at IC3.gov immediately and alert your bank and exchange so the FBI's Recovery Asset Team process can attempt to freeze the transfers. Do not pay any "tax" or "fee" to unlock a withdrawal, and ignore recovery agents charging upfront — that is the follow-on scam. The odds are not good. They beat the alternative, which is silence.
Who is behind pig butchering scams?
According to the Justice Department, Chinese transnational criminal organizations operating from guarded compounds in Cambodia, Laos and Burma, staffed in large part by trafficking victims working under force — the UN estimated at least 120,000 people held in Myanmar alone and around 100,000 in Cambodia as of 2023. Washington's answer, as of November 2025, is a dedicated Scam Center Strike Force that has already seized more than $400 million in crypto.
Frequently asked questions
What is a pig butchering scam, in one sentence?
A long-con fraud in which a stranger builds a romantic or friendly relationship online, then steers the victim into a fake cryptocurrency investment platform and steals every deposit while showing fabricated profits.
Why is it called "pig butchering," and what does sha zhu pan mean?
Sha zhu pan is Chinese for, loosely, "killing-pig plate" — the scammers' own term for the process: the victim is the pig, the weeks of grooming are the fattening, and the theft is the slaughter. FinCEN adopted the English translation in its September 2023 alert because the scammers themselves use it.
How do I know if the person messaging me is running this scam?
Run the stage-one test: unsolicited contact that lingers, a fast move to encrypted messaging, no verifiable video call, and — the decisive tell — any investment talk from someone you have never met. One tell might be coincidence. Three is a compound schedule.
I already sent money. Can I get any of it back?
Sometimes a portion, if you move in hours: report at IC3.gov immediately and alert your bank and exchange so the FBI's Recovery Asset Team process can attempt to freeze the transfers. Do not pay any "tax" or "fee" to unlock a withdrawal, and ignore recovery agents charging upfront — that is the follow-on scam. The odds are not good. They beat the alternative, which is silence.
Who is behind pig butchering scams?
According to the Justice Department, Chinese transnational criminal organizations operating from guarded compounds in Cambodia, Laos and Burma, staffed in large part by trafficking victims working under force — the UN estimated at least 120,000 people held in Myanmar alone and around 100,000 in Cambodia as of 2023. Washington's answer, as of November 2025, is a dedicated Scam Center Strike Force that has already seized more than $400 million in crypto.
About the investigator
Marcus Hale
Fraud investigator · 20 years · former bank compliance
Marcus Hale spent two decades inside bank compliance departments, chasing suspicious transaction reports through correspondent accounts until the trail went cold at some offshore shell. He left to investigate the same money from the outside.
All investigations by Marcus →