Pig Butchering Scams: The $75 Billion Fraud Destroying Lives Worldwide

When the chief executive of a small community bank in Kansas struck up a friendship with a charming Australian investment adviser on WhatsApp in 2022, nobody could have predicted the catastrophe that followed. The “adviser” guided Shan Hanes — CEO of Heartland Tri-State Bank — through a series of cryptocurrency investments that appeared to yield stunning returns. Over the following months, Hanes transferred his own savings, $60,000 from his daughter’s college fund, $40,000 from his church, and ultimately $47 million of his bank’s depositors’ money into what he believed were profitable trades. It was all gone. Every cent. The bank collapsed. Hanes is now serving a 24-year federal prison sentence.

His case is extreme in scale but not in character. It illustrates with brutal clarity how “pig butchering” — the fastest-growing form of financial cybercrime on earth — operates: with patience, emotional manipulation, and a fake investment platform engineered to inspire complete trust right up until the moment everything disappears.

What Is Pig Butchering?

The term comes from the Chinese phrase shā zhū pán (杀猪盘) — “pig butchering plate.” Scammers refer to their victims as “pigs” who must be “fattened” — built up with flattery, emotional connection, and fabricated financial wins — before being “slaughtered” for their money. It is a deliberately dehumanising frame that reflects the industrial, calculated nature of the crime.

Unlike quick-hit phishing or ransomware attacks, pig butchering is a long game. The average grooming period before a significant financial extraction runs from weeks to months. Victims are not tricked into handing over their banking credentials — they are persuaded, through what feels like a genuine human relationship, to invest voluntarily in platforms they believe are legitimate.

“The real cost is not just monetary. Pig butchering erodes trust in online communication, in investment channels — and ultimately in other people.”

CoinLaw Research Report, December 2025

The scam typically unfolds across messaging platforms — WhatsApp, Telegram, Instagram, dating apps like Tinder and Hinge — often initiated by a “wrong number” text or a LinkedIn connection request. The scammer builds rapport over days or weeks before introducing cryptocurrency investment as a topic. They share their own “returns,” offer to guide the victim, and eventually direct them to a fake trading platform — slick, professional, and entirely fabricated.

How a Pig Butchering Scam Unfolds: The Five-Phase Playbook

The Scale of the Crisis

The numbers are staggering and rising fast. Global losses from pig butchering scams are estimated to exceed $75 billion in total, according to research aggregated by CoinLaw. In 2024 alone, blockchain analytics firm Chainalysis estimated crypto wallets linked to investment scams received $9.9 billion — a figure the firm predicted would be revised up to $12.4 billion as more scam wallets are identified.

The FBI’s Internet Crime Complaint Center reported that Americans lost $11.37 billion to cryptocurrency scams in 2025 — a 22 percent increase over the prior year. People aged 60 and older accounted for $4.35 billion of those losses, roughly 38 percent of the total. Elder fraud across all internet crime categories jumped 59 percent in a single year.

The FBI’s Operation Level Up — a proactive victim-notification initiative launched in January 2024 — had, by March 2026, contacted nearly 9,000 victims of cryptocurrency investment fraud. Critically, 77 percent of those victims were unaware they were being scammed at the time they were notified. The operation is estimated to have saved $562 million from being transferred. The FBI also referred 93 victims to crisis specialists for suicide intervention — a figure that rarely appears in coverage of this crime, but which speaks to its devastating psychological consequences.

The Security Flaws Behind the Scam

Platform Infrastructure Vulnerabilities

The fake trading platforms at the heart of pig butchering scams are sophisticated pieces of criminal infrastructure. Security researchers at Cyvers, Chainalysis, and CYFIRMA have documented their architecture in detail. These platforms typically feature professional UI design cloned from legitimate exchanges like Binance or Coinbase, fabricated trading dashboards showing convincing market movements, customer service chat functions (often also operated by scammers), and withdrawal mechanics engineered to extract additional “fees” rather than return funds.

A key vulnerability they exploit is the lack of a unified global registry for cryptocurrency investment platforms. Unlike regulated brokers, fake crypto platforms face no barrier to launching under an official-sounding name. By the time regulators or law enforcement identify a domain, the operation has typically migrated to a new URL.

Social Engineering as the Primary Attack Vector

From a cybersecurity perspective, pig butchering does not rely on technical exploits — it relies on exploiting human psychology. The threat model is entirely social engineering at scale. Criminal syndicates have developed what researchers at CYFIRMA describe as a “coordinated layer structure” — one team for initial contact and rapport-building, another for introducing the investment platform, another for financial operations, and dedicated “closers” who handle victims resisting withdrawal fees.

The use of stolen personal data to personalise approaches — drawn from data breaches, social media scraping, and purchased from dark-web brokers — significantly increases the success rate of initial contact. A scammer who knows your job, recent travel, and shared cultural background is far more persuasive than a generic cold message.

Cryptocurrency’s Role as an Enabler

Cryptocurrency serves pig butchering operations in two critical ways: it appears legitimate to victims already interested in digital assets, and its pseudo-anonymous transaction model makes tracing and recovering stolen funds extremely difficult. Chainalysis data shows Chinese-language money laundering networks processed approximately $16.1 billion — roughly $44 million per day — in 2025 alone, using over 1,799 active wallets to move pig butchering proceeds through mixing services, chain-hopping, and over-the-counter desks in permissive jurisdictions.

Forced Labour: The Human Trafficking Dimension

Behind the keyboards in these operations lies one of the most disturbing dimensions of pig butchering: the workers running the scams are often themselves victims. A UN report found a workforce of at least 300,000 people from 66 countries trapped in Southeast Asian scam compounds — approximately 75 percent in the Mekong River region encompassing Myanmar, Cambodia, Laos, and Thailand.

These individuals are typically young graduates from developing nations, lured by legitimate-sounding job advertisements promising customer service or IT roles in Bangkok, then driven across borders into fortified compounds where their passports are confiscated. Those who fail to meet daily scam quotas — or attempt to escape — face beatings, electric shocks, or sale to other compounds. Some families have paid ransoms in cryptocurrency to secure their relatives’ release.

The US Treasury Department stated plainly: “Southeast Asia’s cyber scam industry not only threatens the well-being and financial security of Americans, but also subjects thousands of people to modern slavery.” In September 2025, the Treasury sanctioned 19 entities across Myanmar and Cambodia for operating scam networks using forced labour. The US strike force has seized over $401 million in cryptocurrency and is pursuing an additional $80 million in forfeiture proceedings.

“As many as 100,000 trafficked people may be working in scam centres against their will in Myanmar alone — many subjected to torture, arbitrary detention, and threats of organ harvesting.”

Thai Police estimates, cited by The Week, April 2026

Key Research: What the Experts Say

Source	Key Finding	Date	Type
Chainalysis — Crypto Crime Report 2026	Chinese-language money laundering networks processed $16.1B (~$44M/day) in 2025; pig butchering revenue grew ~40% YoY in 2024	Jan 2026	Blockchain
FBI IC3 — 2025 Annual Report	Americans lost $11.37B to crypto scams in 2025; elder fraud (60+) jumped 59% YoY; Operation Level Up saved ~$562M	2026	Law Enforcement
Cyvers — Pig Butchering Report	$5.5B lost on Ethereum network alone across 200,000 identified cases in 2024; December 2024 was peak month at $468M	Feb 2025	Blockchain
CYFIRMA — Threat Intelligence	Scam operations run coordinated multi-layer structures; Southeast Asia compounds employ hundreds; AI tools growing at 1,900% CAGR	Nov 2025	Threat Intel
ASPI / UN OHCHR — Southeast Asia Labour Report	Over 300,000 people from 66 countries trapped in scam compounds; 27+ fortified compounds in Myanmar alone	2024–2025	Human Rights
Embry-Riddle Aeronautical University	Academic analysis documenting the psychological manipulation cycle and syndicate operating model behind pig butchering	2024	Academic

Law Enforcement Response

International law enforcement has escalated significantly, though the scale of the problem continues to outpace investigative capacity. In November 2025, the US Department of Justice — working with the FBI and Secret Service — seized scam domains tied to pig butchering operations defrauding Americans via fake cryptocurrency investment sites. The US Treasury has sanctioned infrastructure providers including firms like Trans Asia and Troth Star, which allegedly operated scam compounds using forced labour.

Chainalysis’s Strike Force — a dedicated operational unit focused on disrupting pig butchering infrastructure — seized over $401 million in cryptocurrency and is pursuing an additional $80 million in forfeiture. Despite these interventions, scam revenues continued rising in 2025, driven by AI-enhanced personalisation and the sheer difficulty of prosecuting syndicates operating under the protection of corrupt or ungovernable jurisdictions.

How to Stay Safe: A Practical Guide

Pig butchering works because it targets the entirely rational human desire for connection and financial security. Security awareness is the most effective countermeasure available to individuals.

• Treat unsolicited contact with extreme caution. A friendly stranger who messages you out of nowhere — wrong number, random LinkedIn connection, Instagram DM — and sustains the conversation over days is a textbook opening gambit. Legitimate relationships are not initiated this way at scale.
• Verify every investment platform independently. Check registration status with the FCA (UK), SEC (US), or ASIC (Australia) before transferring a single cent. Legitimate platforms appear in official registries. Search the platform name plus “scam” or “warning” as a first step.
• Never invest via a platform recommended by someone you’ve only met online. This is the single most reliable rule. No legitimate investment adviser meets you on WhatsApp and directs you to their own private platform.
• Be deeply suspicious of withdrawal barriers. Any platform that demands additional “taxes,” “fees,” “verification deposits,” or “compliance payments” before releasing your funds is a fraud. Legitimate exchanges do not operate this way.
• Talk to someone you trust before investing significant sums. Scammers routinely encourage secrecy. This is a manipulation tactic designed to remove the safeguard of outside perspective.
• Use reverse image search on profile photos. Many scammer profiles use stolen photos from model agencies or Instagram accounts. Google Reverse Image Search or TinEye can expose this quickly.
• Request a live, unscripted video call early. While AI deepfakes are advancing, demanding a spontaneous live video interaction remains a strong filter. Most pig butchering operators avoid live video entirely.
• Enable two-factor authentication everywhere. Many victims also suffer secondary account compromises once a scammer has cultivated deeper access to their digital life.

The Road Ahead

Pig butchering is not a static threat. Its operators are sophisticated, well-funded, and operationally adaptive. The 2025 and 2026 data show continued growth despite significant law enforcement action — driven by AI personalisation, expanding geographic reach into Latin America and Africa, and the ongoing availability of trafficked labour in weakly governed territories.

Meaningful progress requires action on three fronts simultaneously: stronger cryptocurrency exchange verification requirements to create friction for scam platforms, aggressive international law enforcement cooperation to dismantle compound infrastructure, and — critically — sustained public education campaigns that treat this as a mainstream safety issue rather than a niche cybercrime.

For cybersecurity professionals, the challenge is primarily one of human-layer defence. Technical controls cannot prevent a victim who has been emotionally groomed over three months from voluntarily transferring cryptocurrency to a fabricated exchange. Awareness, social pressure normalisation (“talk to someone before investing”), and better reporting infrastructure are the primary tools available. The FBI’s proactive notification model — contacting identified victims before they have transferred everything — is a promising template that deserves broader adoption and resourcing.

The pigs, as the criminal slang has it, are everywhere. So are the butchers. The difference between a devastating loss and a close call is almost always a moment of informed scepticism arriving just in time.

---

Sources: Chainalysis Crypto Crime Report 2026  |  FBI IC3 2025 Annual Report  |  Cyvers Pig Butchering Report (Feb 2025)  |  CYFIRMA Threat Intelligence (Nov 2025)  |  CoinLaw Research (Dec 2025)  |  ASPI Southeast Asia Scam Compounds Report  |  UN OHCHR (Mar 2024)  |  Foreign Policy (Oct 2025)  |  The Week (Apr 2026)  |  CNBC / Chainalysis (Feb 2025)