Blog
Pig Butchering Scams: How Fake Crypto Investments Work
Short answer
A pig butchering scam is a long con in which a stranger builds a friendship or romance online, then talks you into a crypto investment platform they control, shows you fake profits and finally takes everything, often after demanding fees or taxes to release a withdrawal.
Key takeaways
- These scams usually start with a 'wrong number' text or a friendly message from someone you've never met.
- The trading platform or app is fake; the balance it shows you is just a number the scammers type in.
- Being asked to pay taxes or fees before you can withdraw is the clearest sign the money is already gone.
- Investment fraud was the largest source of losses reported to the FBI's IC3 in 2025.
The 2020 Twitter hack was fast and loud. Attackers took over famous accounts and asked for bitcoin within a few hours. Pig butchering is the opposite. It's slow, patient and personal, and it has taken far more money from ordinary people than any single hack. If you hold crypto, or someone online keeps bringing up crypto investing, you should know how it works.
What is a pig butchering scam?
A pig butchering scam is a fraud in which a scammer spends weeks or months building trust with a victim, then steers them into a fake crypto investment and drains everything they put in.
The name comes from the Chinese phrase sha zhu pan. The scammers compare their victims to pigs being fattened before slaughter. The US Treasury's Financial Crimes Enforcement Network (FinCEN) issued an alert on the scheme in September 2023, and the FBI's 2025 Internet Crime Report lists investment fraud as the largest single source of reported losses.
The messages are scripted, patient and persistent. They are written to feel like a normal friendship, which is exactly why they work on careful, smart people.
How does the scam usually start?
It usually starts with a message that looks like a mistake, such as a text meant for someone else, or a friendly approach on social media, a dating app or a messaging app.
FinCEN describes scammers reaching out under the guise of a wrong number or an attempt to reconnect with an old friend. A typical opener is something like "Hi, is this Jenny? Are we still on for dinner?" If you reply to say they have the wrong number, they apologize, say you seem nice and keep chatting.
From there, the conversation moves to WhatsApp, Telegram or another app. The scammer presents as successful, warm and interested in your life. Photos show nice cars, travel and good food. There may be romance, or it may stay a friendship.
When does crypto enter the conversation?
Crypto comes up casually after trust is established, usually as a side income the scammer says a relative or mentor taught them.
The scammer rarely asks you to invest at first. They mention their trading results, show screenshots of profits and wait for you to ask. When you do, they offer to teach you. They send a link to a trading website or tell you to download an app, sometimes one that looks professional and even appears in app stores for a while.
Then they walk you through it:
- Buy crypto on a real exchange you already use or are told to sign up for.
- Send it to a deposit address on the fake platform.
- Watch your balance grow, sometimes fast.
- Get encouraged to add more, often for a "limited" opportunity.
The real exchange is real. The platform you send to is not. Once crypto leaves your exchange account for their address, it's in the scammers' hands.
Why does the balance look like it's growing?
The platform shows whatever numbers the scammers choose, because they control the website and the account database behind it.
There is no trading happening. Your "profit" is a number in a database. Early on, scammers may let you withdraw a small amount so the platform feels trustworthy. That small withdrawal is a cost of doing business for them, paid out of your own deposits.
What happens when you try to withdraw?
When you try to take out a large amount, the platform suddenly requires a fee, a tax, a deposit or a "verification" payment, and paying it never releases the money.
FinCEN notes that victims who attempt to withdraw may be told to pay purported taxes or early withdrawal fees. The FBI's 2025 report describes the same pattern. If you pay, a new fee appears. Accounts get "frozen for suspicious activity" and need another deposit to unfreeze. When you stop paying, the friendly contact disappears.
Some victims are then contacted by "recovery" firms or fake lawyers who promise to get the money back for a fee. That's a second scam. I've covered it in more detail in the bitcoin safety guide.
What are the red flags at each stage?
The biggest red flags are a stranger who won't meet in person, any mention of crypto investing from someone you met online, a platform you've never heard of and a fee to withdraw your own money.
| Stage | Red flag |
|---|---|
| First contact | A wrong-number text that turns into a long chat |
| Relationship | They push you to move to WhatsApp or Telegram quickly and avoid meeting in person |
| Pitch | They mention trading profits and offer to teach you |
| Platform | A website or app you can't find independent information about |
| Growth | Returns that are steady and high, with pressure to deposit more |
| Withdrawal | Taxes, fees or deposits required before you can take money out |
The FTC puts it plainly: only scammers guarantee profits, and if someone you met online offers investment advice or asks you to send crypto, they're a scammer.
What should you do if you're being pulled in?
Stop sending money, stop talking to the contact, save everything and report it.
- Don't send any more crypto or pay any fee, whatever the platform says.
- Save chats, usernames, phone numbers, website addresses and transaction IDs.
- Contact the exchange you sent the crypto from and tell them the destination addresses.
- Report to the FBI at ic3.gov and to the FTC at ReportFraud.ftc.gov.
- Tell someone you trust. Shame keeps people paying longer, and these scammers rely on it.
If someone you know is talking about an online friend who's making them rich in crypto, show them this page. The stories of the people who lost everything almost all began with a stranger who seemed kind. The story of this bitcoin address shows the fast version of the same lesson: a crypto request from someone you can't verify is a request to lose money.
Questions
Why is it called pig butchering?
The name translates a Chinese term, sha zhu pan, used by the scammers themselves. It compares fattening a pig before slaughter to building trust and growing a victim's 'investment' before taking it all.
Can I withdraw a small amount to test the platform?
Scammers often let you withdraw a small amount early on to build trust. A successful small withdrawal proves nothing about the platform. It's part of the setup.
The person I'm talking to seems real and has video-called me. Could it still be a scam?
Yes. These operations use stolen photos, scripts and sometimes deepfake video or voice. If the relationship leads to a crypto investment opportunity, treat it as a scam no matter how real the person seems.
I've already sent money. What should I do first?
Stop sending money, including any fees to 'release' a withdrawal. Save every message and transaction detail, contact the exchange you sent from, and report it to the FBI at ic3.gov and to the FTC at ReportFraud.ftc.gov.
Sources
- FinCEN Alert FIN-2023-Alert005 on pig butchering
- FBI IC3: 2025 Internet Crime Report
- FTC: What To Know About Cryptocurrency and Scams
Educational only. This is general safety information, not legal or financial advice. If you've lost money, contact law enforcement and the bank or exchange you used.