TLDR
Cryptocurrency investment scams caused $17 billion in on-chain losses in 2025, according to Chainalysis. ScamVerify™ tracks phone scam infrastructure across 4 million+ FTC complaints, and crypto scams now represent the highest-dollar fraud category. The average scam payment increased 253% from $782 to $2,764. FBI Operation Level Up saved $359 million by notifying 5,831 victims, 77% of whom did not know they were being scammed. The pipeline almost always starts the same way: a phone call or "wrong number" text.
What Is Pig Butchering?
"Pig butchering" (sha zhu pan) is a term coined by Chinese law enforcement describing a scam where the victim is "fattened up" with trust and small gains before being "slaughtered" for a large payout. Unlike quick-hit scams, pig butchering operations invest weeks or months building a relationship with the victim before asking for money.
The name is uncomfortable for a reason. These operations are industrialized, often run from compounds in Southeast Asia (Myanmar, Cambodia, Laos, Philippines) where trafficked workers are forced to execute the scam under threat of violence.
The Full Pipeline
Stage 1: First Contact
The scam begins with what appears to be an innocent mistake:
- "Wrong number" text: "Hey Jessica, are we still on for dinner?" When you reply "wrong number," they apologize and start a conversation.
- Cold call: A "financial advisor" or "investment specialist" calls with a hot tip.
- Dating app match: A profile that quickly moves the conversation to WhatsApp or Telegram.
- Social media DM: A stranger complimenting your posts and gradually steering toward finance.
Stage 2: Trust Building (1-4 Weeks)
The scammer builds a personal relationship. They share photos (stolen from real social media profiles), talk about their daily life, discuss hobbies, and gradually introduce the topic of investing. They often present themselves as:
- A successful crypto trader who "retired early"
- A financial analyst at a major firm
- A tech entrepreneur with inside knowledge of crypto markets
- A new friend or romantic interest who "just wants to help"
Stage 3: The Introduction (Week 2-6)
The scammer casually mentions their success with cryptocurrency investing. They share screenshots of their "portfolio" showing massive gains. They suggest the victim try it with a small amount, often $200 to $500.
Stage 4: Fake Exchange and Early Gains
The victim is directed to a website or app that looks like a professional trading platform. Key characteristics:
| Feature | What It Shows | Reality |
|---|---|---|
| Account dashboard | Growing balance with real-time charts | Completely fabricated numbers |
| Initial investment | Quick 20-50% "return" | Scammer credits fake gains to build confidence |
| Small withdrawal | Successfully withdrawn to bank | Real money sent to prove the platform "works" |
| Customer support | Responsive chat support | Scammers maintaining the illusion |
| Trading interface | Professional charts, order books | Copied from real exchanges like Binance or Coinbase |
The small successful withdrawal is critical. It proves the platform is "real" and encourages larger deposits.
Stage 5: Escalation (Week 4-12)
With trust established and a successful withdrawal completed, the scammer pushes for larger investments:
- "There's a VIP tier with higher returns, but you need $10,000 minimum"
- "I'm putting in $50,000, you should match it"
- "This opportunity closes next week, it's now or never"
- "I can lend you money to invest if you don't have enough"
Victims often invest their savings, take out loans, or borrow from family. The fake exchange dashboard shows their "balance" growing to six or seven figures.
Stage 6: The Slaughter
When the victim tries to make a large withdrawal, the trap closes:
- "Tax payment required": The platform demands 20 to 30% of the balance as a "tax" before withdrawal
- "Compliance verification": An additional fee to "verify identity" for large withdrawals
- "Account frozen": The platform claims regulatory issues and demands a "compliance deposit"
- Platform disappears: The website goes offline, the app stops working, and the scammer blocks all communication
Every fee paid goes directly to the scammers. The original investment, the fake gains, and the "tax payments" are all gone.
The Data
| Metric | Figure | Source |
|---|---|---|
| Total crypto scam losses (on-chain) | $17 billion (2025) | Chainalysis |
| Average scam payment increase | 253% ($782 to $2,764) | Chainalysis |
| FBI Operation Level Up savings | $359 million | FBI IC3 |
| Victims notified by FBI | 5,831 | FBI IC3 |
| Victims unaware they were scammed | 77% (4,490 of 5,831) | FBI IC3 |
| USDT seized by federal authorities | $61 million | DOJ |
| Impersonation tactics increase | 1,400% since 2023 | CrowdStrike |
| AI-enabled scams vs traditional | 4.5x more profitable | FBI IC3 |
The 77% figure is staggering. FBI Operation Level Up proactively identified victims by tracing blockchain transactions to known scam wallets, then contacted them directly. Most were still depositing money, unaware the "exchange" was fake.
Why Crypto Scams Are Uniquely Dangerous
Irreversible Transactions
Unlike credit card charges or bank transfers, cryptocurrency transactions cannot be reversed. Once you send Bitcoin, Ethereum, or USDT to a scam wallet, there is no chargeback, no dispute process, and no bank to call.
Fabricated Returns
The fake exchange shows whatever number the scammer wants. A victim who deposited $10,000 might see a "balance" of $150,000. This creates a psychological anchor: the victim is not just losing their initial investment, they feel like they are losing $150,000. This makes them willing to pay "taxes" and "fees" to access money that never existed.
Psychological Manipulation
As we explored in our breakdown of debt reduction robocalls, scammers exploit financial stress and urgency. Pig butchering adds a layer of emotional manipulation. Victims often describe the scammer as a close friend or romantic interest. Admitting they were scammed means admitting the relationship was fake, which many victims resist long after the money is gone.
How to Protect Yourself
Red Flags
- Unsolicited investment advice from anyone you have not met in person
- "Wrong number" texts that turn into friendly conversations about crypto
- Guaranteed returns. No legitimate investment guarantees profits. Period.
- Unknown trading platforms not listed on CoinMarketCap or major exchange directories
- Pressure to invest quickly or increase your deposit
- Requests to download apps outside the App Store or Google Play
- Inability to withdraw without paying fees or taxes first
Verification Steps
- Search the platform name + "scam" on Google and Reddit before depositing any money
- Verify the exchange is registered with FinCEN (fincen.gov) and your state's financial regulator
- Check if the website domain was recently registered using a WHOIS lookup
- Never send crypto to a wallet address provided by someone you met online
- Look up the phone number that initiated contact using ScamVerify's phone lookup
- Talk to someone you trust before making any investment over $1,000
If You Are Currently Investing with Someone You Met Online
Ask yourself these questions:
- Have you met this person in person?
- Can you withdraw your full balance right now without paying any fees?
- Is the platform listed on established exchange directories?
- Would you tell your family or friends about this investment?
If you answered "no" to any of these, stop investing immediately and verify the platform independently.
What to Do If You Have Been Scammed
- Stop sending money immediately. Do not pay "taxes," "fees," or "compliance deposits" to unlock funds.
- Document everything. Screenshot the platform, save all messages, record wallet addresses and transaction hashes.
- Report to the FBI IC3 at ic3.gov. The FBI's Operation Level Up actively traces scam wallets.
- Report to the FTC at ReportFraud.ftc.gov.
- Contact your bank if you sent funds via wire transfer (there may be a brief recovery window).
- Report the phone number through ScamVerify to help protect others.
- Be cautious of "recovery" scams. Scammers often recontact victims posing as law enforcement or "crypto recovery specialists" promising to retrieve lost funds for a fee. This is a second scam.
For immediate next steps after any scam call, see our guide on what to do if you answered a scam call.
FAQ
Can I get my cryptocurrency back?
In most cases, no. Cryptocurrency transactions are irreversible by design. However, law enforcement has had some success tracing and seizing funds. The DOJ seized $61 million in USDT from pig butchering operations in 2024. Report to the FBI IC3 immediately, as speed matters for tracing. Be extremely skeptical of any "crypto recovery service" that contacts you, as these are almost always secondary scams.
How do scammers create fake trading platforms?
Scam trading platforms are built using white-label exchange software that costs $500 to $5,000 to deploy. The interface mimics real exchanges like Binance or Coinbase. Prices displayed on the platform are manipulated in real time by the scammer. Some platforms even have mobile apps available for download (usually as sideloaded APK files rather than through official app stores).
Are all crypto investment opportunities scams?
No. Legitimate cryptocurrency exchanges (Coinbase, Kraken, Gemini, Binance.US) are registered, regulated, and audited. The key difference: legitimate platforms are found through official app stores, listed on regulatory websites, and never promoted through unsolicited phone calls or texts from strangers. If someone contacts you first with an investment "opportunity," it is almost certainly a scam.
Why do scammers use USDT (Tether) instead of Bitcoin?
USDT is a stablecoin pegged to the U.S. dollar, meaning its value does not fluctuate. This makes it easier for scammers to tell victims "you made 50% returns" without market movements contradicting the claim. USDT also processes faster and cheaper than Bitcoin on many networks, and some stablecoin-focused blockchains have less sophisticated transaction monitoring.
How large are pig butchering operations?
These are industrial-scale operations. The largest compounds raided by law enforcement held hundreds of workers. A single operation in Myanmar was estimated to process $100 million per month. The workers are often trafficking victims themselves, recruited with fake job postings for "customer service" or "tech support" positions in Southeast Asia, then held against their will and forced to run scams.