What Is a Pig Butchering Scam? How It Works and How to Protect Yourself
The name is ugly and it is theirs, not mine. Scammers coined it: fatten the pig before slaughter.
What it describes is a long-form investment fraud that starts as a relationship. Not a fake bank alert, not a phishing email. Weeks or months of somebody being genuinely good company, and then an investment platform that turns out to be a webpage.
It is now the largest category of fraud loss in the country. The FBI's April 2026 report put cryptocurrency fraud at $11.3 billion for 2025, inside a $20.9 billion total, and a large share of that runs through exactly this script.
The five phases
The sequence barely changes between cases. That is the most useful thing about it.
Phase 1: the accidental contact. A wrong number text. A LinkedIn message meant for someone else. A friendly reply on a language exchange app or a dating profile. The opening is designed to feel like chance, and to give you a natural reason to reply politely rather than ignore it.
Phase 2: building the relationship. This is the long part, and it is why the script works. Weeks of ordinary conversation. Photos of meals. Questions about your day that get remembered and asked about later. There is no pitch. Anyone pitching in week one is running a different, worse scam.
Phase 3: the investment appears. Not as a sale. As something they do. A family member trades, or they have been doing well with a platform, mentioned in passing and then dropped. You will usually be the one who asks about it, and that is deliberate. You will remember bringing it up yourself.
Phase 4: the small investment that works. A modest amount goes in. The dashboard climbs. You withdraw a portion and it arrives in your account exactly as promised. That single successful withdrawal is the most expensive thing that happens in the whole sequence, because it converts caution into confidence.
Phase 5: the slaughter. Larger deposits, often encouraged with warmth rather than pressure. Then the withdrawal that will not process. There is a fee. Then a tax. Then a compliance hold. Each one is described as the last obstacle.
There is no fee that releases the balance. The balance is a number on a page they control, and it was always a number on a page they control.
Who is actually on the other end
This is the part that changes how most victims feel about what happened.
The person typing is frequently a trafficking victim. Recruited with a fake job listing, held inside a compound in Cambodia, Laos, or Burma, working to a quota under threat of violence. These are industrial operations with shift schedules, scripts, and management, run largely by Chinese transnational criminal organizations.
In April 2026 the Justice Department charged two managers of the Shunda compound in Burma, seized 503 fraudulent investment websites, and restrained $701,962,392 in cryptocurrency. Court filings describe one worker under that management taking more than $3 million from a single American.
I raise it because victims almost always believe they were personally selected and personally fooled by someone who knew them. Nobody in that building knew you. Somebody in that building was handed a script and a target.
The tells
The person is good at this and does it all day, so the person is rarely the tell. The structure is.
You met through a wrong number, a dating app, a professional network, or a language app, and moved to WhatsApp or Telegram quickly.
The photos are consistently good and the video calls never quite happen, or last seconds.
Investing was their idea, framed as something they do rather than something offered to you.
The platform is one you had never heard of, and you cannot find independent history for it.
A small withdrawal worked perfectly.
The large one is stuck behind a payment.
That last one is the end of the script rather than an obstacle inside it.
Why getting out now beats getting back to even
The hardest conversation I have is with somebody who already suspects and is still sending money. Not because they are naive, but because stopping means accepting a loss that only feels survivable if the platform is real.
Every additional payment is spent against a number that does not exist. People routinely lose more during the recovery attempt than in the original scam, because the recovery attempt carries the highest pressure in the whole script.
Reporting early is what makes tracing possible. Crypto is traceable. Seizures at the scale above happen because transactions were documented while the trail was warm. Six months of embarrassment is the most common reason nothing can be done.
The grief is real and separate from the money. For most people the harder loss is that the person they talked to daily is about to disappear. That person, as you knew them, was a role on a shift. Grieving that is normal, and it still does not mean keeping the account open.
You are about to be targeted again. Victim lists get resold. The offer to recover your funds for an upfront fee will arrive, well timed and sympathetic, and it is the same industry.
What to do
Stop sending money. No fee, tax, or verification payment releases a withdrawal.
Screenshot everything before access disappears. Chat history, the platform, the balance, wallet addresses, transaction IDs, the profile.
Report it. ic3.gov for US victims, and include the wallet addresses. Tell your bank or exchange. Report a Scam has the rest gathered in one place.
Do not pay a recovery service. Nobody legitimate cold-contacts you offering to retrieve crypto for a fee.
Tell one person you trust. This is the step people skip, and it is the one that stops them going back in.
The full first-days walkthrough is here: What to Do Immediately After Being Scammed. For the wider enforcement picture, I wrote about the Scam Center Strike Force here: The US Finally Launched a Strike Force Against Southeast Asian Scam Centers.
If somebody you love is in one
Do not lead with the word scam. People who feel accused defend the relationship, and the scammer has already told them that family would not understand.
Ask about the platform instead. Ask whether a withdrawal has been tried recently, and how it went. The withdrawal question does more work than any warning, because it points at something they can check themselves without conceding anything to you.
Where to go from here
If this is happening to you right now, stop paying, screenshot everything, report it. That is today's work and it is enough.
If you want to understand the machinery, the course covers it properly. Chapter 5 is the geography of these operations, Southeast Asia included, so you know who is on the other end. Chapter 4 covers the scammers and what actually motivates the structure. Chapter 2 covers the hooks, including love and greed running at the same time, which is what makes this script harder to break than a straight investment pitch.
If you are the one trying to help, the intervention chapter is built for that conversation, including how to adjust it depending on who you are talking to.
Access starts at $15 a month and includes the full course and the printable workbook. Take it, use it, cancel when you are done.
Choose a plan and start the course
You were not careless. You were worked, professionally, by an industry that does this for a living. What happens next is still yours.
