What "Pig Butchering" Actually Means
The Commodity Futures Trading Commission describes pig butchering as "a relationship-building con that typically takes several weeks before the investment scam occurs," carried out under the Chinese-language name sha zhu pan. The FDIC's Office of Inspector General defines it more clinically as "a type of confidence and investment fraud in which the victim is gradually lured into making increasing monetary contributions, generally in the form of cryptocurrency, to a seemingly sound investment before the scammer disappears with the contributed monies," in its own explainer for consumers.
What separates it from an ordinary romance scam or a garden-variety investment pitch is the combination of the two, run with real patience. The relationship is not a pretext dropped after the first ask; it continues throughout, alongside the investment, which is what makes victims keep believing even as losses mount and excuses pile up.
Where the Name Comes From
Pig butchering is rarely the work of a single scammer typing from a laptop. Much of it is run out of forced-labor compounds in Southeast Asia, concentrated in Cambodia and Myanmar, where trafficked workers are held against their will and compelled, under threat of violence, to run scripted conversations against victims across dozens of countries. That organized-crime backbone is why US Treasury and Justice Department action against this industry now reads more like a human-trafficking case than a fraud case, a point covered in detail further down this article.
How the Con Unfolds, Stage by Stage
The US Secret Service and the FDIC's Office of Inspector General describe the same basic sequence, and the New York Attorney General's office repeats it in its own February 2026 consumer warning. Six stages recur across nearly every documented case.
- Unsolicited contact: a wrong-number text, a dating-app match, a social-media DM, or a message in a gaming or chat app.
- Relationship building over days or months, with a fast push off-platform onto WhatsApp, WeChat, Telegram, or Signal.
- The pivot to money: the contact mentions crypto or forex gains, or introduces a "friend" who can help you invest.
- Account setup and a small, real, verifiable win to build trust.
- Escalation: bigger deposits, framed as unlocking a return tier, covering a "tax," or matching an opportunity.
- The butcher: a withdrawal is blocked by a sudden fee, the account is frozen, or the platform and the contact both vanish.
Fattening Up
The first four stages can run for weeks, and that duration is the point. A scammer working from a script, sometimes under coercion in a scam compound, invests real time in sounding like a specific, consistent person: a successful trader, a long-lost friend, someone deployed overseas or working an oil rig, which conveniently explains why video calls never quite happen. Moving the conversation off the dating app or social platform where it started is not a convenience; it removes the contact from a service that might flag suspicious behavior or ban the account. Once the relationship feels solid, the pivot to money is framed as generosity, not a pitch: the contact is not selling anything, they are letting you in on something that is already working for them. A small early withdrawal, sometimes just a few hundred dollars processed without friction, is what makes the much larger deposits that follow feel safe.
The Butcher
The escalation phase is where the fabricated platform earns its keep. Balances climb on a dashboard the victim cannot independently verify, and each new deposit is framed as necessary to reach the next tier, cover a tax obligation, or match a matching program. The end, when it comes, is usually abrupt: a withdrawal request triggers an unexpected fee, a compliance hold, or an account freeze, and the "opportunity" or the person offering it disappears. Because the money has typically moved through cryptocurrency or wire transfer, both fast and difficult to reverse, very little of it is recoverable once it clears.
The Scale of the Damage, in the Government's Own Numbers
IC3 has published an annual Internet Crime Report since 2000, and the two most recent editions show how fast this category is growing. The 2025 report, covering the 2025 calendar year, recorded $20.877 billion in total reported losses, a 26% increase over 2024 and more than double the figure from three years earlier, drawn from 1,008,597 complaints, the first time IC3 has crossed one million complaints in a single year.
Investment fraud was the largest single category in 2025 at roughly 41% of all reported losses, on nearly 73,000 complaints, up 52% from 2024. Cryptocurrency was tied to 72% of investment-fraud losses specifically, which puts the crypto-driven, pig-butchering-style subset at close to $6.2 billion of that $8.65 billion. That is a different number from the "$11 billion in crypto fraud" figure in the table above, which spans every fraud category where crypto was the payment method, not investment fraud alone; the two should not be quoted interchangeably. Sources: the FBI's own summary of the report and independent reporting on it, since the underlying 2025 IC3 Annual Report (PDF) is the primary document. See also the FBI's release on the report and Forbes' coverage of the crypto surge within it. The 2024 comparison figures are drawn from the prior year's report as summarized by CyberScoop, where crypto-specific investment fraud alone was $5.8 billion across 41,557 complaints, up 47% in losses from 2023.
Cryptocurrency and Social Media: The Preferred Delivery System
The Federal Trade Commission's Consumer Sentinel Network tells a parallel story from a different angle: not internet crime broadly, but romance and social-media fraud specifically. In the first nine months of 2025, the FTC logged 55,604 romance-scam reports, up 22% year over year, totaling $1.16 billion in reported losses with a median individual loss of $2,218. Nearly 60% of people who lost money to a romance scam in that period said it started on social media, according to the FTC's consumer alert on romance scams.
Payment method has shifted too. Cryptocurrency has overtaken wire transfer as the top reported romance-scam payment method: about 34% of reported romance-scam losses were paid in crypto, ahead of gift cards at 17%, wire transfer at 15%, and bank transfer at 14%. A separate FTC release from April 2026 found that scams that originated on social media cost Americans $2.1 billion in 2025, an eightfold increase since 2020, with investment scams alone accounting for $1.1 billion of that, more than half. Facebook generated more reported losses than any other platform, with WhatsApp and Instagram ranking second and third; both of those two also turn up repeatedly as the messaging and recruiting channels named in the enforcement cases described later in this article. The scam ads and fake "investment club" chats that recruit victims on those platforms are their own well-documented problem; see our companion guide to how fake investment ads use digital-marketing tricks to steal your money for how those campaigns are built and targeted.
Across every fraud category, the FTC's Consumer Sentinel Network logged $15.9 billion in reported losses in 2025, up from $12.5 billion in 2024, on roughly 3 million complaints. More than $4 billion of that moved through bank transfer or cryptocurrency, the two payment rails pig-butchering operators favor because both are fast and difficult to reverse once a transfer clears.
The Consumer Financial Protection Bureau has tracked the same shift from the complaint side. Between October 2018 and September 2022, it received more than 8,300 crypto-asset complaints, and roughly 40% involved fraud or scams, the largest single issue category, per its 2022 complaint bulletin. The bureau specifically flagged that pig-butchering scammers "coach their victims on setting up a cryptocurrency account and steal the account's assets," and that romance-linked crypto scams disproportionately target older consumers, a pattern the next section quantifies.
Who Loses the Most: Elder Victims and the New AI Angle
Age is the single biggest predictor of loss size in this category. IC3's 2025 report counted more than 201,000 victims age 60 and older, with $7.7 billion in losses, a 37% increase over 2024 and 37% of the year's total losses across every fraud type. Investment fraud alone cost victims 60 and older $3.519 billion in 2025. The year before, IC3 recorded 147,127 elder-fraud complaints and $4.885 billion in losses, a 43% increase over 2023, with more than 7,500 seniors individually losing over $100,000 at an average of roughly $83,000 each.
The 2025 report also included, for the first time, a dedicated section on AI-related fraud: AI-assisted scams cost victims age 60 and older $352 million on their own. That reflects a real operational shift, chatbots and voice or video deepfakes now let a single scam compound run far more simultaneous "relationships" than a human typing alone ever could, without lowering the quality of the impersonation a victim actually experiences.
Inside the Scam Compounds: The Chen Zhi and Prince Group Case
The largest action against this industry to date came on October 14, 2025, when the US Treasury Department and the Justice Department moved in parallel against Chen Zhi, known as "Vincent," the founder and chairman of Cambodia's Prince Holding Group. Federal prosecutors in the Eastern District of New York unsealed charges of wire fraud conspiracy and money laundering conspiracy, carrying a maximum penalty of 40 years if he is convicted;
Chen Zhi remains at large.
Alongside the charges, the Justice Department seized approximately 127,271 bitcoin, worth roughly $15 billion at the time of seizure, the largest single forfeiture action in the department's history, according to its press release announcing the indictment and CNBC's reporting on the seizure.
Prosecutors describe Prince Group as having operated at least ten forced-labor scam compounds across Cambodia, including a facility identified as Golden Fortune Resorts World Co. Ltd. near Chrey Thum, south of Phnom Penh, where trafficked workers were held and compelled, under threat of violence, to run pig-butchering scripts against victims in more than 30 countries. US Attorney Joseph Nocella Jr. put it plainly: "Prince Group's investment scams have caused billions of dollars in losses and untold misery to victims." FBI Director Kash Patel described Chen Zhi as someone who "allegedly operated a vast criminal network across multiple continents involving forced labor."
The Bitcoin Seizure and the Sanctions
Treasury's Office of Foreign Assets Control acted the same day, designating Prince Group a transnational criminal organization and sanctioning 146 total targets, including named associates and a network of shell companies and a bank. Treasury Secretary Scott Bessent said, in the department's press release on the joint US-UK action: "The rapid rise of transnational fraud has cost Americans billions. Treasury is taking action to protect Americans by cracking down on foreign scammers." A related platform, Huione Group, was separately cut off from the US financial system under a FinCEN Section 311 rule; Treasury says Huione laundered at least $4 billion in illicit proceeds between August 2021 and January 2025, including $36 million traced specifically to virtual-currency investment scams. Banks are formally on notice about this activity too: FinCEN's own alert on pig butchering, addressed to financial institutions, lays out red flags for the wire and crypto transfers this fraud relies on, and is worth reading directly at fincen.gov if you work in compliance or want the regulator's own framing.
Regulators Are Building a Case File
The Prince Group case is the largest, but it is not the only one. Securities and commodities regulators have brought a string of smaller actions naming the fake platforms and "investment clubs" directly.
The SEC's first-ever pig-butchering enforcement action, filed in September 2024, targeted two fake platforms: NanoBit, where defendants impersonated finance professionals in WhatsApp groups and falsely claimed affiliation with a regulated platform before wiring roughly $2 million to Hong Kong bank accounts, and CoinW6, where scammers posed as young, wealthy professionals on LinkedIn and Instagram pitching returns of "up to 3% per day," according to CoinDesk's coverage of the filing.
A December 2025 case widened the pattern to fake "investment clubs": the SEC charged three purported crypto trading platforms and four investment clubs it says misappropriated $14 million between January 2024 and January 2025, recruiting victims through social-media ads into WhatsApp groups, feeding them fake AI-generated trading tips, and steering them to platforms that falsely claimed government licenses and offered bogus token sales, then demanding advance "fees" before any withdrawal, per the SEC's own press release. Laura D'Allaird, chief of the SEC's Cyber and Emerging Technologies Unit, said: "Fraud is fraud, and we will vigorously pursue securities fraud that harms retail investors." The dashboards and balance screenshots victims are shown in cases like this are usually fabricated with ordinary design software, not custom-built systems; our guide to how scammers use Canva and design tools to fake bank documents covers the same trick applied to bank statements and proof-of-funds letters.
"He Said That He Loved Me": One Victim's Story
Erika DeMask, of Lombard, Illinois, lost nearly $1 million, her entire life savings, and was ultimately forced to sell her home and belongings, according to reporting by ABC7 Chicago. The relationship started the way the pattern predicts: a man she met online who was romantic and attentive, sending flowers and declarations of love.
"He said that he loved me," she told the reporter.
The money requests escalated in stages that map almost exactly onto the sequence described earlier in this article: $20,000 for a fabricated "oil rig breakdown" emergency, then $35,000 twice within a few weeks, then $250,000 framed as matching a pastor's charitable donation, and finally a pitch to double all of it through an investment. At one point, she recalled telling herself, "You know what? I need to pray about this," before sending more.
By the time it ended, "there's $400 left. That's it, $400," she said.
She now owes her bank on a home-equity loan she took out to fund the scam, plus tax liability on the investment withdrawals she made along the way, and the FBI was unable to recover her losses.
Red Flags That Signal a Pig Butchering Scam
None of these signs is proof on its own. Together, and especially in combination with a request for money, they are the pattern regulators keep describing in case after case, compiled here from the CFTC's statement on its Debiex enforcement action, the New York Attorney General, and the FDIC OIG.
- Contact you did not initiate: a dating-app match, a "wrong number" text, a social-media DM, or a gaming-app message.
- A fast push to move the conversation onto WhatsApp, WeChat, Telegram, or Signal.
- Claims of wealth from crypto or forex trading, or an offer to introduce you to an "expert" who can help.
- Repeated excuses for why a video call or an in-person meeting never happens.
- Direction toward one specific trading platform or app that accepts only cryptocurrency.
- A small, real, verifiable early "win" designed to build trust before the real asks begin.
- Pressure to keep the relationship or the "opportunity" secret from family, your bank, or a financial advisor.
- Coaching on what to say if your bank or brokerage questions a transaction.
- Instructions to use a cash courier, a bitcoin ATM, or to move money in smaller, structured batches.
- A demand for an unexpected "fee," "tax," or "unlock" payment before any withdrawal is released.
The last item on that list is close to a certainty, not a maybe.
A legitimate platform never charges a fee to release money that is already yours.
A sudden fee, tax, or compliance hold at the exact moment you try to withdraw is the single clearest sign the account is a fabrication and the funds are not coming back.
Before you send money to any platform a new contact recommends, check it independently. Search the firm's name plus the word "scam," look it up on FINRA's BrokerCheck if it claims to offer securities, and be skeptical of any site you can only find through a link the contact sent you rather than through your own independent search.
What to Do If You Think You've Been Targeted
Speed matters more than almost anything else once money has actually moved. If a wire transfer just went out, IC3's Recovery Asset Team can sometimes help freeze funds in transit, but generally only if it is reported within hours, not days.
Reporting Channels in the United States
File with IC3 even if you doubt the money can be recovered. The report itself feeds the aggregate data used to track and prosecute these networks, including the case against Prince Group.
IC3 has explicitly warned that scammers now impersonate IC3 itself, contacting past victims to demand a fee or personal information to "process" a recovery. The real IC3 will never call or email you asking for money, gift cards, or account credentials to release a refund.
Outside the United States: The UK Picture
The UK's Financial Conduct Authority reports that crypto-investment-scam reports have "more than doubled since 2020," and directs consumers to check the Financial Services Register before investing, while warning that registration alone does not guarantee Financial Services Compensation Scheme or ombudsman protection, since most crypto activity in the UK is unregulated. The FCA has also separately warned about "clone firm" scams, in which criminals impersonate a real, authorized firm; an earlier FCA warning put losses to that specific tactic at more than £78 million. More recently, the FCA logged almost 5,000 reports in just the first six months of 2025 of scammers posing as the FCA itself to "help recover" money from an earlier scam, a pattern known as a recovery scam that targets people who have already lost money once. See the FCA's own pages on crypto investment scams and on fake-FCA recovery scam reports for detail. UK reporting for this kind of fraud generally runs through Action Fraud, the national reporting center, alongside the FCA.
The Bottom Line
Pig butchering works because it does not feel like a pitch. It feels like a relationship, sustained long enough and carefully enough that the eventual ask reads as an act of trust rather than a con. The federal numbers behind it are no longer a niche statistic: $8.65 billion in investment-fraud losses reported to IC3 in 2025 alone, most of it tied to cryptocurrency, and a single Justice Department forfeiture of roughly $15 billion in bitcoin from one network. Behind those numbers are forced-labor compounds on one end and people like Erika DeMask on the other, who lost a lifetime of savings to a stranger who never existed the way she thought he did.
The defense that actually works is unglamorous: treat any unsolicited contact that eventually turns to money as a reason for scrutiny, not excitement; verify any platform independently before sending it a dollar; and if a withdrawal suddenly requires a fee you were never told about, stop and report it the same day, at ic3.gov and ReportFraud.ftc.gov, rather than trying to pay your way out of a frozen account. For related tactics that feed these same schemes, see how scammers exploit tracking data to target victims with personalized pitches, and how SIM swap fraud lets criminals hijack a phone number outright once they already have enough of your information to try.
