Skip to content

Pig butchering scams: how the fake-friend crypto investment con works, and how to stop it

How "pig butchering" crypto scams work step by step, from a wrong-number text to fake profits and "withdrawal taxes", the warning signs, and where to report.

Figures checked against 5 official and primary sources on . See the sources · How we check

Key points

  • "Pig butchering" is a long con: a stranger builds a friendship or romance for weeks, then steers you into a fake crypto investment platform.
  • The platform shows big profits that don't exist. When you try to withdraw, you're asked for "taxes" or "fees", and then the scammer disappears.
  • Crypto investment fraud was the largest source of losses reported to the FBI in 2025: $7.2 billion.
  • Never send money to someone you've only met online, and never pay to withdraw your own money.
In this guide
  1. Where the name comes from
  2. How the scam works, step by step
  3. How big the problem is
  4. If the FBI contacts you: Operation Level Up
  5. Going after the scam compounds
  6. Warning signs
  7. How to protect yourself
  8. If it’s happening to you

It often starts with a text that looks like a mistake: “Hi, is this Anna? Are we still on for golf on Sunday?” You reply to say they’ve got the wrong number. They apologize, they’re friendly, and the conversation keeps going. Weeks later, your new friend mentions how well they’re doing with crypto, and offers to show you how.

That’s the opening of a pig butchering scam. US regulators call it one of the most damaging forms of crypto fraud, and it’s built to look like anything but a scam until it’s too late.

Where the name comes from

In September 2023, the US Treasury’s Financial Crimes Enforcement Network (FinCEN) issued an alert about the scam. The name comes from the practice of fattening a hog before slaughter: scammers call victims “pigs”, use fake identities and elaborate stories to “fatten” them into believing in a trusted relationship, then “butcher” them once their money has been taken.

FinCEN notes that these scams are largely run by criminal organizations based in Southeast Asia, and that many of the people sending the messages are themselves victims of human trafficking, forced to work in scam compounds.

How the scam works, step by step

FinCEN’s alert describes a clear sequence. Knowing it is the best protection, because each stage feels harmless on its own.

1. The first contact

The scammer reaches out by text message, social media, a dating site or a professional networking site, often pretending to have the wrong number or to be reconnecting with an old friend. Their profile usually shows wealth and an enviable lifestyle.

2. Building trust

There’s no request for money yet. The scammer talks to you regularly, sometimes for weeks or months, building a friendship or a romance. They may say they can’t meet in person because they work abroad or travel a lot.

3. The investment pitch

Once you trust them, they introduce a “lucrative” crypto opportunity and direct you to an investment website or app that looks legitimate but is controlled by the scammers. They may walk you through buying crypto on a real exchange, ask for remote access to your device “to help”, or tell you to use a crypto ATM. Then they tell you to send the crypto to the platform.

4. Fake profits

The platform shows extraordinary returns, all invented. To build confidence, you may even be allowed to withdraw a small amount. Then comes the push to invest more, sometimes with a deadline. FinCEN reports victims cashing in retirement accounts, taking out home equity loans or second mortgages, and bringing in friends and family.

5. The “taxes” to withdraw

When you try to take your money out, or your payments slow down, the pressure increases. You’re told there are losses to cover, or that you must pay “taxes” or “early withdrawal fees” before you can withdraw. Once you can’t or won’t pay any more, the scammer disappears, and so does everything you sent.

How big the problem is

In its 2025 report, the FBI’s Internet Crime Complaint Center (IC3) recorded 61,559 complaints of cryptocurrency investment fraud, with $7.228 billion in reported losses: the largest single source of losses reported by Americans that year. People aged 60 and over reported $2.76 billion of it. Pig butchering is one of the main forms of this fraud.

In Canada, the Canadian Anti-Fraud Centre highlights fake crypto investment platforms as a common method in investment fraud, which caused $351 million in reported losses in 2025.

Who loses the most

The IC3’s 2025 figures for crypto investment fraud show losses rising steeply with age:

Age Complaints Reported losses
Under 20 629 $12.6 million
20–29 4,627 $117.4 million
30–39 8,576 $412.6 million
40–49 10,750 $924.6 million
50–59 9,856 $1.38 billion
60 and over 13,685 $2.76 billion

The FBI also describes a variant using investment clubs on messaging apps, where supposed industry insiders offer trading guidance; it recorded about 1,600 such complaints in 2025, with $160 million in losses. See crypto scams targeting older adults.

If the FBI contacts you: Operation Level Up

Many victims don’t realize they’re being scammed until it’s too late. Since January 2024, the FBI, with the US Secret Service, has run Operation Level Up, which uses complaint data to identify victims of crypto investment fraud and warn them. According to the IC3’s 2025 report:

  • In 2025 it notified 3,780 victims, and 78% of them didn’t know they were being scammed.
  • It estimated savings to those victims of about $226 million in 2025.
  • Since its launch it has notified more than 8,000 victims, with $500 million in savings.

A warning like this is a gift: if someone tells you your investment platform is a scam, stop and check before sending anything more. But be careful, because scammers also impersonate the FBI and the IC3. A genuine law enforcement contact will never ask you for money. If in doubt, contact the FBI yourself through its official website.

Going after the scam compounds

The IC3 report also describes the Scam Center Strike Force, led by the US Attorney’s Office for the District of Columbia with the Justice Department, the FBI and the Secret Service. It targets the worst scam compounds in Southeast Asia, including leaders linked to Chinese organized crime operating in Cambodia, Laos and Burma, and works to seize the US-based internet services and social media accounts the scammers use. It partners with the State Department, Treasury’s OFAC and the Commerce Department.

Warning signs

Adapted from FinCEN’s red flags and the FTC’s advice, be suspicious if:

  • A stranger contacts you “by mistake” and keeps the conversation going.
  • Someone you’ve only met online talks about their trading success and offers to teach you.
  • You’re told to use a specific platform or app you hadn’t heard of, especially one with poor spelling, odd reviews or a web address that’s slightly off.
  • You’re asked to give remote access to your phone or computer, or to buy crypto at a crypto ATM and send it to an address they give you.
  • Profits look too good and too steady to be true.
  • There’s pressure to invest more or by a deadline.
  • You’re asked to pay taxes, fees or penalties before you can withdraw.
  • They ask you to keep it secret from family or your bank.

The FTC’s rule is simple: never send money or gifts to someone you haven’t met in person.

How to protect yourself

  1. Don’t move a new online friendship into money. However long you’ve been talking, a request to invest is the moment to stop.
  2. Check the platform independently. Look it up on your country’s official register, not through a link they send you. See how to check if an exchange is registered.
  3. Do a reverse image search of their photos, as the FTC suggests. Stolen pictures are common.
  4. Talk to someone you trust before sending anything. Scammers rely on isolation.
  5. Test a withdrawal before investing more, and treat any “fee to withdraw” as the end of the conversation.

For how fake apps and cloned sites work, see fake crypto apps and phishing.

If it’s happening to you

  • Stop sending money, including “taxes”, “fees” or “unlock” payments.
  • Save everything: messages, profile names, website addresses, wallet addresses and transaction IDs.
  • Contact your bank and the exchange you used to buy the crypto, straight away.
  • Report it:
    • US: the FBI’s IC3 at ic3.gov, and the FTC at ReportFraud.ftc.gov. Also report the profile to the app or site where you met.
    • UK (England, Wales and Northern Ireland): Report Fraud, the national service that replaced Action Fraud.
    • Canada: the Canadian Anti-Fraud Centre and your local police.
  • Beware of recovery scams. After a loss, victims are often contacted by people promising to get the money back for a fee. See crypto scams and where to report them.

Being scammed isn’t a sign of foolishness. These operations are run by organized groups, with scripts and months of patience. Reporting it helps protect the next person.

Frequently asked questions

Why is it called "pig butchering"?
The name translates a Chinese term, "sha zhu pan". As FinCEN explains, scammers call victims "pigs": they "fatten" them with a fake relationship and fake profits, then "butcher" them by taking everything they've invested.
The app shows my profits. Can I get my money out if I pay the withdrawal tax?
Almost certainly not. The balance on a fake platform is just a number the scammers control. FinCEN describes demands for "taxes" or "early withdrawal fees" as one of the final stages of the scam. Paying only increases the loss.
Is it a romance scam or an investment scam?
Often both. Some start as a romance, others as a friendship or a business contact, but the money is taken through a fake investment. The FTC warns that romance scammers may offer to help you get started in cryptocurrency investing.
Can the police get my crypto back?
Sometimes law enforcement seizes funds, but recovery is rare and slow. Report quickly anyway: it helps investigators and may help stop transfers. And be wary of anyone who contacts you offering to recover the money for a fee.

Sources

  1. FinCEN Alert on Prevalent Virtual Currency Investment Scam Commonly Known as "Pig Butchering" (FIN-2023-Alert005) — Financial Crimes Enforcement Network, U.S. Department of the Treasury
  2. What To Know About Romance Scams — Federal Trade Commission
  3. 2025 IC3 Annual Report (Internet Crime Report) — Federal Bureau of Investigation, Internet Crime Complaint Center
  4. Report Fraud: new service from City of London Police — GOV.UK
  5. Top 10 frauds in 2025 — Canadian Anti-Fraud Centre

First published . Spotted an error or an outdated figure? Tell us and we will check it against the source.