How pig butchering works
The name is blunt: the scammer “fattens the pig” (builds trust, encourages larger deposits) before the “slaughter” (a total drain).
- First contact. Wrong-number texts (“Hi Michael, this is about our lunch tomorrow”), dating-app matches, LinkedIn connection requests, Facebook group interactions. The opening is deliberately vague or friendly.
- Relationship build. Daily chat — coffee photos, selfies, shared life updates. The scammer invests weeks in rapport before mentioning money. Often the “person” is entirely scripted, sometimes with AI-generated photos and voice.
- The introduction. The scammer casually mentions crypto trading that “their uncle runs” or a “private signals group” that generates steady returns. Doesn’t push; lets the victim ask questions.
- Small test deposit. The victim is walked through signing up on a counterfeit exchange UI (a website that looks like a real exchange but is entirely controlled by the scammer). They deposit a small amount, trade a few times, and withdraw successfully. Everything works.
- Larger deposits. The victim is coached to deposit more. They see “profits” accumulate on the fake UI. The scammer talks through “strategies” — futures, leveraged positions, IEO launches.
- The harvest. When the victim has deposited a meaningful amount, withdrawal is blocked. Reasons rotate: “unpaid taxes” (pay more to unlock), “KYC verification fee”, “anti-money-laundering deposit required to release funds”. Each fee extracts more.
- Silence. Once the victim stops paying or escalates, the scammer disappears. The fake exchange is abandoned. Funds are already laundered.
Why it works
Pig butchering is industrial-scale organized crime, not opportunistic fraud. Key enablers:
- Purpose-built fake exchanges. Counterfeit platforms that mirror real UIs (Binance, Coinbase) down to the candle animations. Deposits go to scammer wallets; displayed balances are fabricated.
- Labor compounds. Much of the day-to-day chat work is performed by trafficked workers in Southeast Asia (Cambodia, Myanmar, Laos) — themselves victims, forced to run scripts under threat. Journalism by Rest of World, ProPublica, and the UN has documented these operations extensively.
- Chain-hopping laundering. Funds move through USDT on Tron, into mixers, across cross-chain bridges, and into cashout networks faster than enforcement can freeze them.
- Emotional capture. The romantic or friendship hook means victims often keep contributing even after red flags appear. Walking away feels like abandoning a relationship.
Red flags
- Unsolicited contact that turns into financial advice. A “new friend” who mentions crypto profits within the first few weeks.
- The exchange is one you’ve never heard of. Any platform you can’t verify across multiple independent sources (CoinGecko exchange listings, major-publication coverage, public volume data on real rails) is likely fake.
- “Withdraw” requires sending more money. No legitimate exchange requires a “tax deposit” or “verification fee” to release funds.
- The person refuses a video call or their video looks off. Deepfakes are now good enough to pass low-quality calls, but scammers often decline high-resolution or live-interaction video.
- Urgency around a “limited opportunity”. IEO-this-weekend, margin-call-right-now pressure tactics.
- Photos that can be reverse-searched. Right-click “search image” on their profile photo. If it appears elsewhere under different names, it’s lifted.
Defenses
- Never move funds into a platform introduced by someone you met online. This is the single most important rule. Even if the platform looks real, the path is the scam.
- Verify exchange legitimacy independently. CoinGecko, major-publication reviews, on-chain proof-of-reserves, real listing on CMC with public volume. Anything missing disqualifies.
- Discuss suspected scams with someone offline. Pig butchering targets isolation. A third-party perspective breaks the tunnel.
- If you’ve deposited and withdrawals are blocked, stop immediately. Don’t pay “release fees” — they are part of the scam, not the recovery.
- Report to the FBI IC3, local police, and the exchange’s listed jurisdiction. Recovery odds are low but reports help enforcement track the networks.
Risks and considerations
Pig butchering is the largest fraud category targeting crypto holders and is growing. The dollar losses dwarf drainer kits and rug pulls combined because the per-victim extraction is orders of magnitude larger — individual victims have lost homes, retirement savings, and borrowed funds. The primary defense is pattern recognition: recognize the shape (unsolicited contact → relationship → unfamiliar exchange → urgent deposits → blocked withdrawals) and treat it as diagnostic regardless of how real the person feels. Once you’re aware of the script, the same script gets obvious fast.