Skip to content
ScamAlertScamAlert home
Banking & Wire

Pig Butchering Scam: How Crypto Romance Investment Fraud Works

A wrong-number text becomes a friendship, then an investment tip on a platform that shows fake profits. Learn how pig butchering works and why withdrawals always fail.

11 minute read

SA

Written by ScamAlert Editorial Team

Fraud research and consumer protection reporting

Checked against primary sources

FTC, FBI IC3 and CFPB — how we verify

Published:
Updated:

The short answer

Pig butchering builds a genuine-feeling relationship over weeks before introducing an investment platform that displays fabricated profits. The balance you see is a number in a database the scammer controls. Withdrawals fail because there is nothing to withdraw — the "tax" or "fee" required to release funds is simply a second theft.

  • The relationship is the product. Weeks of ordinary conversation are the investment they make in you.
  • Small early withdrawals succeed on purpose — that is what convinces you to send far more.
  • Any fee demanded to release your own funds is proof the platform is fake.
  • Recovery firms that contact you after a loss are almost always a follow-up scam.

It starts with a message that appears to be a mistake. "Hi David, are we still on for Thursday?" You reply that they have the wrong number. The response is warm and slightly embarrassed, they apologize, and a conversation happens anyway. Or it begins on a dating app, or a professional network, or in a hobby group — the entry point varies, but the pattern that follows does not.

Over the next several weeks the correspondence becomes a real part of your day. They are attentive, consistent and interested. They share photographs of an ordinary life. They ask about your work, remember details, and check in when you said you had something difficult coming up. There is no request for money and no obvious angle, which is exactly what makes people dismiss the possibility of fraud.

The name given to this crime — pig butchering, translated from the Chinese term shāzhūpán — refers to fattening an animal before slaughter. It is a crude label for something the victims experience as a genuine friendship or romance, and that gap is precisely why the losses are so large. This is among the most financially devastating consumer frauds currently operating, and it is worth understanding structurally rather than as a list of warning signs.

The stages, and why each one exists

  1. Contact. A wrong-number text, a dating match, or a friendly approach in an online community. Blasted at enormous scale; almost everyone ignores it, which is fine because the few who reply are all that matter.
  2. Rapport. Days to months of ordinary conversation with no financial content whatsoever. This is deliberate patience — it inoculates you against the idea that this could be a scam, because a scammer would surely have asked for something by now.
  3. Wealth signaling. They mention investing casually, never as a pitch. A screenshot of a return, an offhand comment about a good month, a relative who works in trading. Curiosity is left to you.
  4. The invitation. Only after you ask do they explain, often reluctantly. Being made to feel you pursued the opportunity is far more persuasive than being sold it.
  5. The platform. A polished app or site with live charts, an order book and a portfolio view. It is entirely fabricated, and every number on it is written by the operator.
  6. The proof withdrawal. You deposit modestly, watch it grow, and successfully withdraw a small amount. This is the pivotal step and the money is real — a deliberate loss to establish that the platform pays out.
  7. The scale-up. Convinced, you invest far more: savings, a refinance, borrowed money, retirement funds. The displayed balance rises dramatically.
  8. The harvest. Withdrawal is blocked. A tax, an audit fee, a compliance deposit or a liquidity charge must be paid first — always from new money, never from the balance shown.

Why intelligent, careful people lose everything

Victims of this crime are frequently well-educated professionals, and they are often the last people their families would expect. Several mechanisms compound, and none of them are about gullibility.

The first is the sunk relationship. By the time money is discussed you have invested weeks of genuine emotional attention. Concluding that the platform is fraudulent means concluding that the friendship was manufactured, and people resist that far longer than they resist doubts about a financial product.

The second is that the proof withdrawal is real evidence. You tested the platform and it paid. Skepticism was applied and satisfied. Everything after that is reasoning from a verified premise — the premise was just purchased by the operator for a few hundred dollars.

The third is isolation. The scammer frames the opportunity as private, discourages discussion with family, and sometimes reframes concerned relatives as jealous or ignorant. Combined with the embarrassment of admitting a romantic connection formed online, this reliably removes the outside perspective that would end it.

It is also worth stating plainly that many of the people sending these messages are themselves victims. Large-scale investigations have documented compounds in Southeast Asia staffed through trafficking and forced labor, where workers are coerced into running these scripts. That does not reduce your loss, but it explains the industrial consistency of the approach.

Legitimate investment platform vs. a pig butchering platform
SignalLegitimateFraudulent
How you found itYou sought it out independentlyIntroduced by someone who contacted you first
Regulatory statusVerifiable with the SEC, FINRA or a state regulatorClaims registration that cannot be independently confirmed
WithdrawalsProcessed without extra paymentsBlocked pending a tax, fee or compliance deposit
App distributionOfficial app stores under a verifiable developerDirect link, TestFlight, or a web app you were sent
ReturnsVariable, with lossesConsistent gains, often with no losing days
SupportInstitutional, documented channelsA person you chat with privately
Deposit methodBank transfer to a named regulated institutionCrypto to a rotating wallet address

Red flags at any stage

The early ones are easy to miss precisely because nothing has been asked of you yet.

  • The relationship began with a wrong-number text or an unsolicited approach.
  • They consistently avoid live video calls, or the video is brief and evasive.
  • Conversation moves quickly to a private channel such as WhatsApp or Telegram.
  • Wealth and investing come up casually and early, without any direct pitch.
  • You are asked to install a trading app from a link rather than an app store.
  • Deposits are made in cryptocurrency, or to a wallet address that changes.
  • The platform shows steady gains with no meaningful losses.
  • You are discouraged from discussing the investment with family or an adviser.
  • A withdrawal requires you to pay a fee, tax or deposit from outside funds.
  • Pressure increases when you hesitate, framed as concern for your opportunity.

If you are in one now

The most useful thing to do first is a test, not a confrontation. Attempt to withdraw a meaningful portion of the balance — not a token amount — and see what happens. If any payment is requested to release it, you have your answer, and you should send nothing further.

Investment scam response

  1. 1

    Immediately

    Stop sending money, including release fees

    Every additional payment is a fresh loss. There is no balance to unlock. Do not send a final amount to recover the rest, however it is framed.

  2. 2

    Hour 1

    Preserve everything before it disappears

    Screenshot the platform, your balance, the chat history, profile pages and every wallet address and transaction ID. Accounts and apps are deleted quickly once you stop paying, and blockchain addresses are the most traceable evidence investigators have.

  3. 3

    Same day

    Notify your bank and any exchange used

    If funds left by wire or transfer, request a recall immediately — this only works while funds remain in the receiving account. Report the destination addresses to your crypto exchange in writing; exchanges can sometimes freeze assets that arrive at their platform.

  4. 4

    Same day

    File with IC3

    This matters more here than in most fraud. IC3 aggregates cryptocurrency addresses across victims and has contributed to seizures. File even if you believe recovery is hopeless, and include every wallet address and transaction hash.

  5. 5

    Days 1–7

    Report to the FTC and market regulators

    File at ReportFraud.ftc.gov, and report the platform to the SEC and the CFTC, which both operate complaint channels for fraudulent investment offerings.

  6. 6

    Ongoing

    Tell someone, and refuse recovery offers

    Shame keeps this crime underreported and effective. Tell a family member or a friend. And expect contact from "recovery specialists" — that list is sold, and those approaches are a second scam.

Report an investment or romance scam

Include every wallet address, transaction hash, platform URL and screenshot you preserved.

These are official government resources. ScamAlert is not affiliated with any government agency and receives no compensation for these links.

If there is one structural insight worth carrying away, it is that the investment platform is not the scam — it is the receipt. The scam was the eight weeks of attentive conversation that made a stranger's financial advice feel like a friend's tip. That is why the standard advice to research a platform before investing does not protect anyone here: by the time the platform appears, the persuasion is already complete. The defense has to sit earlier, in a rule that costs nothing to hold: no investment opportunity that reaches you through someone who contacted you first, however long ago and however well you now know them.

What to do if you are in a pig butchering investment scam

Verification and recovery steps for a suspected fraudulent investment platform introduced through an online relationship.

  1. 1

    Attempt a meaningful withdrawal

    Request a substantial portion of your balance, not a token amount. If any fee, tax or deposit is demanded to release it, the platform is fraudulent.

  2. 2

    Stop all further payments

    Send nothing more, including release fees. There is no balance to unlock and each payment is a new loss.

  3. 3

    Preserve all evidence immediately

    Screenshot the platform, balances, chat history and profiles, and record every wallet address and transaction ID before accounts are deleted.

  4. 4

    Contact your bank and request a recall

    If funds left by wire or bank transfer, ask for a recall the same day, while money may still sit in the receiving account.

  5. 5

    Notify any cryptocurrency exchange in writing

    Report the destination addresses. Exchanges can sometimes freeze assets that arrive on their platform.

  6. 6

    File with IC3, the FTC, the SEC and the CFTC

    Include wallet addresses and transaction hashes. IC3 aggregates these across victims and has contributed to seizures.

  7. 7

    Refuse every recovery offer that contacts you

    Firms approaching you after a loss are a follow-up scam. Legitimate recovery runs through law enforcement, banks and exchanges.

Frequently asked questions

Why can I see profits but not withdraw them?

Because the balance is a number in a database the operator controls, not a record of assets you own. The chart, the portfolio and the gains are all display, written by the same people asking you to deposit. Withdrawals fail because there is nothing to send. The tax, audit or liquidity fee demanded to release the funds is simply a mechanism to extract more money, and paying it always produces a new obstacle.

I withdrew money successfully once. Doesn’t that prove it is real?

Unfortunately not — that withdrawal is a planned expense. Allowing a small early payout is the single most effective persuasion technique in the entire scheme, because it converts your skepticism into evidence in their favor. The few hundred dollars they release buys the tens of thousands that follow. A successful small withdrawal is a characteristic feature of the scam, not a defense against it.

Can I get cryptocurrency back after sending it to a scammer?

Recovery is difficult and often impossible, but it is not automatically zero and speed matters. Blockchain transactions cannot be reversed, but funds are frequently routed through exchanges that can freeze assets if notified quickly. Report the destination addresses to your exchange in writing and file with IC3 the same day — IC3 aggregates addresses across victims and has contributed to seizures. Never pay a company that offers to recover funds for an upfront fee.

What is the wrong number text really doing?

It is a filter. Blasted to enormous numbers of phones, its only job is to identify people who reply politely to a stranger — which signals both availability and conversational warmth. Nothing about the first message is targeted at you specifically. If you reply, you are moved into a scripted rapport-building sequence that may run for weeks before money is ever mentioned.

How do I raise this with a family member who is in one?

Avoid confrontation, because attacking the relationship triggers defensiveness and the scammer has usually pre-framed relatives as jealous. Ask process questions instead: how would you withdraw everything today, and what happens if you try? Suggest a full withdrawal as a test rather than declaring the platform fake. Letting them discover the blocked withdrawal themselves is far more persuasive than any warning, and it preserves the trust you will need afterwards.

Are the people messaging me criminals themselves?

Frequently they are also victims. Investigations have documented large compounds in Southeast Asia staffed through human trafficking and forced labor, where workers are coerced into running these scripts under threat. This does not change what you should do — stop paying, preserve evidence and report — but it explains why the approaches are so uniform and so persistent, and why the operations behind them are treated as organized crime.

Sources & further reading

Every guide on ScamAlert is checked against primary sources from US consumer protection and law enforcement agencies.

  1. [1]Investment scams and cryptocurrency fraud Federal Trade Commission
  2. [2]Internet Crime Complaint Center (IC3) Federal Bureau of Investigation
  3. [3]Investor alerts and bulletins US Securities and Exchange Commission
  4. [4]Customer advisories on relationship and crypto fraud US Commodity Futures Trading Commission

Topics covered

  • pig butchering scam
  • crypto romance scam
  • fake investment platform
  • wrong number text scam
  • cannot withdraw crypto profits
  • investment scam recovery

Editorial note: This guide is general consumer education, not legal or financial advice. Dispute deadlines, liability limits and reimbursement policies vary by institution and change over time. Confirm your specific rights with your bank or a qualified professional. See our editorial policy for how we research and review this content.

Sponsored content

Related guides

AI & Cyber

AI Voice Cloning Scams

A few seconds of public audio is enough to clone a relative’s voice. Learn how AI voice cloning emergency scams are built, why they defeat instinct, and the one habit that stops them.

12 min readUpdated July 14, 2026

Cards & Payments

P2P Accidental Transfer Scam

Money arrives in your Venmo or Cash App "by mistake" and a stranger asks you to send it back. Here is why returning it costs you twice, and how P2P payment fraud really works.

12 min readUpdated July 9, 2026

Cards & Payments

Gift Card Scams & Draining

Nobody legitimate is ever paid in gift cards. Learn why fraudsters insist on them, how in-store card draining works, and what to do in the first hour after paying.

9 min readUpdated July 17, 2026