Pig Butchering: The Crypto Scam Built on Fake Relationships

Asset Alert|April 24, 20264 min readsecurity

Why this matters

Pig butchering scams accounted for $8.6 billion of the $11.36 billion in crypto fraud losses recorded by the FBI in 2025. These scams begin with social contact, not a malicious link, which means standard technical security measures do not protect against them. Knowing the pattern and the warning signs is the primary defense available to crypto holders.

Pig butchering scams cost Americans $8.6 billion in investment losses in 2025, according to the FBI's Internet Crime Complaint Center, making crypto investment fraud the single largest category of cybercrime loss for the year. Unlike crypto phishing attacks, this scam does not begin with a suspicious link. It begins with a message from a stranger who seems genuinely interested in you.

How a pig butchering scam unfolds

The name comes from an analogy: the victim is "fattened" with trust over time before being "slaughtered" financially. A scammer builds a convincing online persona, typically appearing on dating apps, WhatsApp, LinkedIn, or social media, and makes first contact through what seems like a wrong number, a shared interest group, or a connection through a mutual friend.

The early conversations have nothing to do with money. The scammer discusses travel, work, food, or personal goals. This phase can last weeks or months. Once the relationship feels established, the scammer introduces an investment opportunity, usually framed as something they personally use or learned from a trusted mentor. The recommended platform is a fake exchange or trading app, designed to show realistic account balances and fabricated gains. A small first deposit appears to grow quickly, encouraging larger transfers.

When a victim tries to withdraw, problems appear: taxes owed upfront, verification fees, compliance holds, or withdrawal thresholds that require additional deposits to clear. Each new obstacle extracts more before the platform eventually disappears. The FBI's Operation Level Up notified over 8,100 victims of this type of fraud during one year-long effort and estimated it prevented over $511 million in losses (FBI, 2025). Eighty victims from that same operation were referred for suicide intervention.

Warning signs that are easy to overlook

Several patterns appear consistently across pig butchering cases. Contact arrives unexpectedly, often claiming to have reached the wrong number or connecting through a mutual contact. The conversation moves quickly off any moderated platform, typically to WhatsApp or Telegram. The person's photos and lifestyle descriptions suggest wealth and financial success.

The investment pitch arrives gradually and is presented as a personal tip rather than a sales approach. The scammer may share screen recordings of their own trades, walk the victim through a first deposit, or offer to introduce them to a "mentor." AI-generated voices and deepfake video calls have made remote verification harder: a voice or video that appears convincing is no longer reliable confirmation of identity.

The FBI found that 77% of victims notified through Operation Level Up were unaware they were being scammed at the time of contact (FBI, 2025). Prior victims include professionals, investors, and people who considered themselves security-conscious. The scam works because the social layer feels real before the financial element is introduced.

What to check before sending assets to any new platform

Before transferring assets to any platform introduced through an online relationship, verify it independently of the person who recommended it. Search the platform name with "scam" or "withdrawal problems." Check whether it is registered with a financial regulator: the SEC's EDGAR or FINRA BrokerCheck in the US, or the FCA register in the UK. Conduct a reverse image search on the contact's profile photos using Google Images or TinEye.

If you have already deposited and are now being asked to pay fees or taxes before withdrawing, do not pay. That pattern is a standard secondary phase of the scam, designed to extract more before the platform closes. Stop all transfers, document everything, and report to the FBI at ic3.gov.

Your crypto setup, the platforms holding your assets and how distributed that exposure is, can be checked at any time via /app. Keeping assets spread across multiple platforms with clear separation limits what is exposed if social engineering leads to a loss in one part of your setup.

Frequently asked questions

See your health score in under five minutes.

No wallet connection. No account needed to start. Just map your setup and get a clear picture of where the gaps are.

Related Articles