What is a pig butchering scam, and how do you spot one?

A pig butchering scam is a long con that ends in crypto. A stranger spends weeks becoming your friend or partner, then talks you into "investing" on a trading site they control. Your balance there keeps growing, but the real coins went to the scammers the moment you sent them, and you find out when you try to take your money out.

Where the name comes from and who is behind it

The name translates a Chinese phrase, sha zhu pan, roughly "pig-killing plate". Scammers call their victims pigs: first they fatten them up with attention and fake profits, then they take everything. Interpol has asked people to use plainer words such as "romance baiting", so that victims don't feel ashamed to come forward.

The person typing to you is rarely a lone fraudster. In 2023 the UN human rights office estimated that hundreds of thousands of people may be held in scam compounds in Southeast Asia, mostly in Myanmar and Cambodia, and made to run these chats from scripts. Your "new friend" can be several workers sharing one phone and one set of stolen photos.

The sums are large. In its report for 2025, the FBI counted about $7.2 billion in reported US losses to crypto investment fraud in a single year.

How a pig butchering scam works, stage by stage

The details change from victim to victim, but the stages repeat. A typical case runs like this:

1. A message that looks like an accident. A text meant "for someone else", a friendly hello on a dating app, a note on LinkedIn from a "fellow professional". All the scammer needs is one reply.
2. A move to a private chat. Within days they suggest WhatsApp, Telegram or another messenger, away from the app or carrier that might flag their account.
3. Weeks of friendship or romance. Good-morning messages, photos of a comfortable life, talk about family and food. Money doesn't come up yet. This is the fattening.
4. A casual tip. They mention an aunt, a mentor or an "insider" who trades crypto and earns steady gains. They don't push; they offer to show you how.
5. A small first win. You send a few hundred dollars in crypto to a trading site or app they recommend. The balance climbs, and when you ask to take a little out, it works.
6. The big deposit. With trust earned, they press you to add savings, borrow or sell assets before a "window" closes.
7. The wall. When you try to withdraw everything, the site wants a fee, a "tax" or a deposit to unfreeze the account. Each payment brings a new demand, until the site and the person go silent.

Stage five is the one that convinces careful people. The small withdrawal is real money, possibly taken from another victim's deposit, and it makes the site look like a working business.

Romance is the best-known version, which is why the scam is often filed under romance scams. Friendship or a business mentor works just as well: what makes it pig butchering is the long build-up and the investment at the end.

Why the balance on the trading site isn't your money

From inside the story, this is the hardest part to see. The site looks like an exchange, so it feels like your coins sit there in an account.

On a real exchange, a deposit lands in an account the exchange holds for you, and a licensed exchange answers to a regulator for it. On a pig butchering site, the deposit address it shows you is simply a wallet the scammers own. Once your USDT or bitcoin reaches that address, it belongs to them, and nobody can reverse the transfer.

Everything you see afterwards, the chart, the rising balance, the profit, is a page the scammers built. The numbers live in their database, and they can type in any figure they like. Nobody can withdraw it, because nothing stands behind it.

You can check where your coins actually went. Every crypto transfer has a public record with its own ID, showing the address the coins went to and where they moved next, and anyone can open it with a blockchain explorer that shows each transaction step by step.

The withdrawal fee is the clearest tell. A real exchange takes its fee out of the amount you withdraw and never asks you to send fresh money first. Taxes on crypto gains are settled with your tax office, not paid to the platform. A site that can't release your balance until you pay more doesn't have your balance.

Versions that skip the fake trading site

Some pig butchering scams never ask you to deposit anywhere. The coins stay in your own wallet until the last moment, which makes these versions feel safer than they are:

• "Liquidity mining". The scammer has you buy USDT, keep it in your own wallet and connect that wallet to a website to earn daily rewards. Connecting asks you to sign a permission that lets the site's program spend your tokens. Small rewards arrive for a while, and then the program takes the whole balance.
• "Let me set it up for you". The contact offers to configure your wallet and asks for its recovery phrase, or hands you a wallet they created themselves. Either way, they hold the keys and can empty it whenever they choose.

If you've already connected a wallet to a site like this, that permission stays active until you cancel it, even after you close the page. Cancelling it takes a few minutes and a small network fee, and here is how to check and revoke the token approvals your wallet has given.

What pig butchering texts look like

The first message is built to look harmless and to make a reply feel like the polite thing to do. These are the usual openers, in our own words:

• The wrong number. "Hi Amanda, are we still on for dinner at seven?" You say they have the wrong person, they apologise, praise your kindness and keep chatting.
• The old acquaintance. "Hey, long time! It's Jess from the conference, did you change your number?" You don't remember Jess, and that's the point: you reply to find out.
• The business message. "Mr. Lee, the documents you asked for are ready." It sounds like work, so people answer to clear up the mix-up.
• The match or follower. An attractive profile on a dating app or social network, who soon says they rarely use the app and asks for your WhatsApp.
• The group invite. You get added to a WhatsApp or Telegram "investment club" where members post screenshots of their profits. The members are part of the script too.

What these openers share is a stranger, a plausible reason to talk, and a hope that you'll answer once.

How to respond to a text you suspect

The short answer is not to respond at all. It costs you nothing more than, now and then, ignoring a real person who mistyped a number, and they'll find the right one. Here is what to do instead:

• Don't reply, not even to say "wrong number". A reply tells the sender the number is live and that you're willing to talk.
• Block the number and report it as junk. Most phones and messengers have a report option right in the chat.
• Forward the text to 7726. In the US and the UK, forwarding a spam text to 7726 (it spells SPAM on a keypad) reports it to your mobile carrier, which helps it block the sender.
• If you're already chatting, set one rule. Whatever the person says, no money, no crypto and no "just try the app".

Red flags of a pig butchering scam

Any one of these is a reason to stop and step back. Several together are the pattern:

• A stranger becomes a close friend in days. The warmth comes fast, along with constant messages.
• They never quite meet you. In-person plans fall through, and video calls are rare, short or blurry.
• Money comes up on its own. An uncle with trading signals, a mentor, a sure strategy, mentioned as if by chance.
• They choose the platform. A link they send, an app outside the official app stores, a site you've never heard of before.
• Returns are steady and sure. Real investments rise and fall; a balance that only goes up is typed in.
• Secrecy and hurry. They ask you to keep it from family, coach you on what to tell your bank if it questions a transfer, or warn that the window closes tonight.
• You have to pay to get paid. Any fee, tax or deposit before a withdrawal means the balance isn't real.
• They ask for your recovery phrase. Those words are the master key to your wallet, and no exchange, friend or support desk ever needs them, which is why a seed phrase must never leave your hands.

What to do if you've already sent money

If you're reading this after sending crypto, act today, in this order:

1. Stop sending money. No fee, tax or unlock payment will release the balance; each one only feeds the next demand.
2. Stop talking to the scammer. You don't owe them an explanation, and they will try to talk you back in.
3. Save the evidence. Keep screenshots of the chats, the site's address and app name, usernames and phone numbers. For each transfer, note the date, the amount, the coin, the network, the receiving address and the transaction ID.
4. Tell the exchange or bank you used to buy the crypto. They can flag the receiving address, and if the coins land on an account they run, they may be able to freeze it.
5. Report the scam. Where to do that depends on your country; the next section lists the main places.

Many victims also ask whether their wallet was hacked. In the classic version it wasn't: you sent the coins yourself, which is exactly why they can't be pulled back. If you gave someone your recovery phrase or signed a permission on their site, though, the wallet is exposed, and it's worth reading how crypto wallets actually get hacked and how to close each gap.

How to report a pig butchering scam

Report even if you lost nothing: each report helps investigators trace addresses and find people who are still being drawn in. The main places, as of October 2026:

• United States. File a complaint with the FBI's Internet Crime Complaint Center (IC3), and you can also report to the Federal Trade Commission. Some states run their own complaint forms through the attorney general or the financial regulator.
• United Kingdom. Report to Report Fraud, the City of London Police service that replaced Action Fraud on 4 December 2025. It covers England, Wales and Northern Ireland. In Scotland, call Police Scotland on 101.
• Canada. Report to the Canadian Anti-Fraud Centre, online or by phone.
• Anywhere else. Go to your local police and ask for the cybercrime or fraud unit.

Also report the profile to the messenger or dating app where it started, so the account gets closed before it reaches the next person.

Investigators also work the other way round and warn people while the scam is still running. In the US, the FBI's Operation Level Up contacts people it identifies as current victims of crypto investment scams. In 2025 it reached 3,780 of them, and nearly four in five didn't yet know they were being scammed.

Can you get the money back?

The honest answer: usually not, and rarely quickly. A crypto transfer can't be cancelled the way a card payment can, so any return has to come from freezing or seizing the coins after the fact.

That does happen, and two kinds of company can stop stolen coins:

• Exchanges. An exchange can freeze an account that receives stolen coins, as long as the coins are still on that account.
• Stablecoin issuers. The companies behind stablecoins such as USDT can block the tokens on a flagged address, as long as the tokens haven't been swapped for something else.

Both work only while the coins are still within reach, which is why reporting in the first days matters more than anything else.

Then comes the second act. Weeks or months later, someone contacts you, or an ad finds you, offering to recover your money for an upfront fee. They may already know how much you lost. This is a recovery scam, often run by the same people, and it ends the same way: a fee, then a "tax", then silence. Government agencies don't charge you to investigate a crime, and nobody can trace and return crypto because you paid them first.

The short version

A pig butchering scam takes weeks to build, and the friendship and the growing balance are both part of the script. The tell is always the same at the end. Real money can be withdrawn; a balance you have to pay to release was never there. If a stranger online steers the talk toward crypto, stop there, and if you've already sent coins, save everything and report it the same day.

Questions people ask next

How should I respond to a pig butchering text I've already answered?

Stop there and don't send anything more. Block the number and report it as junk. One reply tells the sender your number is live, so more messages may come, but nothing has been taken from you. The risk starts only when you move to a private chat and money comes up.

They video-called me. Doesn't that prove they're real?

It proves less than it seems. Some scam operations hire real people just to appear on video calls, and face-swapping software can put a stolen face on someone else in real time. Even a genuine person on camera can be reading from the same script, so judge by what they ask you to do, not by how they look.

Why do they always want crypto?

A crypto transfer crosses borders in minutes, and no bank can reverse it once it's sent. Once the coins reach the scammers' wallet, they can move them on within minutes, before anyone has a chance to freeze them. Some versions still ask for bank wires or even cash handed to a courier, so the payment method alone doesn't clear anyone.

Do the people behind these scams ever get caught?

Sometimes, and on a large scale. On 14 October 2025 the US Justice Department charged Chen Zhi, the chairman of Cambodia's Prince Group, with wire fraud and money laundering conspiracy over forced-labour scam compounds, and filed to forfeit about 127,271 bitcoin, worth roughly $15 billion at the time. On the same day the US Treasury and the UK government announced sanctions against the group and people tied to it. Cases like this take years to reach a court's decision.

This article is general information, not legal or financial advice. For a decision about your own case, speak to the police, your bank or a qualified professional where you live.