Pig Butchering Scam: How Crypto Romance Investment Fraud Works
A wrong-number text becomes a friendship, then an investment tip on a platform that shows fake profits. Learn how pig butchering works and why withdrawals always fail.
11 minute read
Written by ScamAlert Editorial Team
Fraud research and consumer protection reporting
Checked against primary sources
FTC, FBI IC3 and CFPB — how we verify
- Published:
- Updated:
The short answer
Pig butchering builds a genuine-feeling relationship over weeks before introducing an investment platform that displays fabricated profits. The balance you see is a number in a database the scammer controls. Withdrawals fail because there is nothing to withdraw — the "tax" or "fee" required to release funds is simply a second theft.
- The relationship is the product. Weeks of ordinary conversation are the investment they make in you.
- Small early withdrawals succeed on purpose — that is what convinces you to send far more.
- Any fee demanded to release your own funds is proof the platform is fake.
- Recovery firms that contact you after a loss are almost always a follow-up scam.
It starts with a message that appears to be a mistake. "Hi David, are we still on for Thursday?" You reply that they have the wrong number. The response is warm and slightly embarrassed, they apologize, and a conversation happens anyway. Or it begins on a dating app, or a professional network, or in a hobby group — the entry point varies, but the pattern that follows does not.
Over the next several weeks the correspondence becomes a real part of your day. They are attentive, consistent and interested. They share photographs of an ordinary life. They ask about your work, remember details, and check in when you said you had something difficult coming up. There is no request for money and no obvious angle, which is exactly what makes people dismiss the possibility of fraud.
The name given to this crime — pig butchering, translated from the Chinese term shāzhūpán — refers to fattening an animal before slaughter. It is a crude label for something the victims experience as a genuine friendship or romance, and that gap is precisely why the losses are so large. This is among the most financially devastating consumer frauds currently operating, and it is worth understanding structurally rather than as a list of warning signs.
The stages, and why each one exists
- Contact. A wrong-number text, a dating match, or a friendly approach in an online community. Blasted at enormous scale; almost everyone ignores it, which is fine because the few who reply are all that matter.
- Rapport. Days to months of ordinary conversation with no financial content whatsoever. This is deliberate patience — it inoculates you against the idea that this could be a scam, because a scammer would surely have asked for something by now.
- Wealth signaling. They mention investing casually, never as a pitch. A screenshot of a return, an offhand comment about a good month, a relative who works in trading. Curiosity is left to you.
- The invitation. Only after you ask do they explain, often reluctantly. Being made to feel you pursued the opportunity is far more persuasive than being sold it.
- The platform. A polished app or site with live charts, an order book and a portfolio view. It is entirely fabricated, and every number on it is written by the operator.
- The proof withdrawal. You deposit modestly, watch it grow, and successfully withdraw a small amount. This is the pivotal step and the money is real — a deliberate loss to establish that the platform pays out.
- The scale-up. Convinced, you invest far more: savings, a refinance, borrowed money, retirement funds. The displayed balance rises dramatically.
- The harvest. Withdrawal is blocked. A tax, an audit fee, a compliance deposit or a liquidity charge must be paid first — always from new money, never from the balance shown.
Why intelligent, careful people lose everything
Victims of this crime are frequently well-educated professionals, and they are often the last people their families would expect. Several mechanisms compound, and none of them are about gullibility.
The first is the sunk relationship. By the time money is discussed you have invested weeks of genuine emotional attention. Concluding that the platform is fraudulent means concluding that the friendship was manufactured, and people resist that far longer than they resist doubts about a financial product.
The second is that the proof withdrawal is real evidence. You tested the platform and it paid. Skepticism was applied and satisfied. Everything after that is reasoning from a verified premise — the premise was just purchased by the operator for a few hundred dollars.
The third is isolation. The scammer frames the opportunity as private, discourages discussion with family, and sometimes reframes concerned relatives as jealous or ignorant. Combined with the embarrassment of admitting a romantic connection formed online, this reliably removes the outside perspective that would end it.
It is also worth stating plainly that many of the people sending these messages are themselves victims. Large-scale investigations have documented compounds in Southeast Asia staffed through trafficking and forced labor, where workers are coerced into running these scripts. That does not reduce your loss, but it explains the industrial consistency of the approach.
| Signal | Legitimate | Fraudulent |
|---|---|---|
| How you found it | You sought it out independently | Introduced by someone who contacted you first |
| Regulatory status | Verifiable with the SEC, FINRA or a state regulator | Claims registration that cannot be independently confirmed |
| Withdrawals | Processed without extra payments | Blocked pending a tax, fee or compliance deposit |
| App distribution | Official app stores under a verifiable developer | Direct link, TestFlight, or a web app you were sent |
| Returns | Variable, with losses | Consistent gains, often with no losing days |
| Support | Institutional, documented channels | A person you chat with privately |
| Deposit method | Bank transfer to a named regulated institution | Crypto to a rotating wallet address |
Red flags at any stage
The early ones are easy to miss precisely because nothing has been asked of you yet.
- The relationship began with a wrong-number text or an unsolicited approach.
- They consistently avoid live video calls, or the video is brief and evasive.
- Conversation moves quickly to a private channel such as WhatsApp or Telegram.
- Wealth and investing come up casually and early, without any direct pitch.
- You are asked to install a trading app from a link rather than an app store.
- Deposits are made in cryptocurrency, or to a wallet address that changes.
- The platform shows steady gains with no meaningful losses.
- You are discouraged from discussing the investment with family or an adviser.
- A withdrawal requires you to pay a fee, tax or deposit from outside funds.
- Pressure increases when you hesitate, framed as concern for your opportunity.
If you are in one now
The most useful thing to do first is a test, not a confrontation. Attempt to withdraw a meaningful portion of the balance — not a token amount — and see what happens. If any payment is requested to release it, you have your answer, and you should send nothing further.
Investment scam response
- 1
Immediately
Stop sending money, including release fees
Every additional payment is a fresh loss. There is no balance to unlock. Do not send a final amount to recover the rest, however it is framed.
- 2
Hour 1
Preserve everything before it disappears
Screenshot the platform, your balance, the chat history, profile pages and every wallet address and transaction ID. Accounts and apps are deleted quickly once you stop paying, and blockchain addresses are the most traceable evidence investigators have.
- 3
Same day
Notify your bank and any exchange used
If funds left by wire or transfer, request a recall immediately — this only works while funds remain in the receiving account. Report the destination addresses to your crypto exchange in writing; exchanges can sometimes freeze assets that arrive at their platform.
- 4
Same day
File with IC3
This matters more here than in most fraud. IC3 aggregates cryptocurrency addresses across victims and has contributed to seizures. File even if you believe recovery is hopeless, and include every wallet address and transaction hash.
- 5
Days 1–7
Report to the FTC and market regulators
File at ReportFraud.ftc.gov, and report the platform to the SEC and the CFTC, which both operate complaint channels for fraudulent investment offerings.
- 6
Ongoing
Tell someone, and refuse recovery offers
Shame keeps this crime underreported and effective. Tell a family member or a friend. And expect contact from "recovery specialists" — that list is sold, and those approaches are a second scam.
Report an investment or romance scam
Include every wallet address, transaction hash, platform URL and screenshot you preserved.
These are official government resources. ScamAlert is not affiliated with any government agency and receives no compensation for these links.
If there is one structural insight worth carrying away, it is that the investment platform is not the scam — it is the receipt. The scam was the eight weeks of attentive conversation that made a stranger's financial advice feel like a friend's tip. That is why the standard advice to research a platform before investing does not protect anyone here: by the time the platform appears, the persuasion is already complete. The defense has to sit earlier, in a rule that costs nothing to hold: no investment opportunity that reaches you through someone who contacted you first, however long ago and however well you now know them.
What to do if you are in a pig butchering investment scam
Verification and recovery steps for a suspected fraudulent investment platform introduced through an online relationship.
- 1
Attempt a meaningful withdrawal
Request a substantial portion of your balance, not a token amount. If any fee, tax or deposit is demanded to release it, the platform is fraudulent.
- 2
Stop all further payments
Send nothing more, including release fees. There is no balance to unlock and each payment is a new loss.
- 3
Preserve all evidence immediately
Screenshot the platform, balances, chat history and profiles, and record every wallet address and transaction ID before accounts are deleted.
- 4
Contact your bank and request a recall
If funds left by wire or bank transfer, ask for a recall the same day, while money may still sit in the receiving account.
- 5
Notify any cryptocurrency exchange in writing
Report the destination addresses. Exchanges can sometimes freeze assets that arrive on their platform.
- 6
File with IC3, the FTC, the SEC and the CFTC
Include wallet addresses and transaction hashes. IC3 aggregates these across victims and has contributed to seizures.
- 7
Refuse every recovery offer that contacts you
Firms approaching you after a loss are a follow-up scam. Legitimate recovery runs through law enforcement, banks and exchanges.
Frequently asked questions
Why can I see profits but not withdraw them?
Because the balance is a number in a database the operator controls, not a record of assets you own. The chart, the portfolio and the gains are all display, written by the same people asking you to deposit. Withdrawals fail because there is nothing to send. The tax, audit or liquidity fee demanded to release the funds is simply a mechanism to extract more money, and paying it always produces a new obstacle.
I withdrew money successfully once. Doesn’t that prove it is real?
Unfortunately not — that withdrawal is a planned expense. Allowing a small early payout is the single most effective persuasion technique in the entire scheme, because it converts your skepticism into evidence in their favor. The few hundred dollars they release buys the tens of thousands that follow. A successful small withdrawal is a characteristic feature of the scam, not a defense against it.
Can I get cryptocurrency back after sending it to a scammer?
Recovery is difficult and often impossible, but it is not automatically zero and speed matters. Blockchain transactions cannot be reversed, but funds are frequently routed through exchanges that can freeze assets if notified quickly. Report the destination addresses to your exchange in writing and file with IC3 the same day — IC3 aggregates addresses across victims and has contributed to seizures. Never pay a company that offers to recover funds for an upfront fee.
What is the wrong number text really doing?
It is a filter. Blasted to enormous numbers of phones, its only job is to identify people who reply politely to a stranger — which signals both availability and conversational warmth. Nothing about the first message is targeted at you specifically. If you reply, you are moved into a scripted rapport-building sequence that may run for weeks before money is ever mentioned.
How do I raise this with a family member who is in one?
Avoid confrontation, because attacking the relationship triggers defensiveness and the scammer has usually pre-framed relatives as jealous. Ask process questions instead: how would you withdraw everything today, and what happens if you try? Suggest a full withdrawal as a test rather than declaring the platform fake. Letting them discover the blocked withdrawal themselves is far more persuasive than any warning, and it preserves the trust you will need afterwards.
Are the people messaging me criminals themselves?
Frequently they are also victims. Investigations have documented large compounds in Southeast Asia staffed through human trafficking and forced labor, where workers are coerced into running these scripts under threat. This does not change what you should do — stop paying, preserve evidence and report — but it explains why the approaches are so uniform and so persistent, and why the operations behind them are treated as organized crime.
Sources & further reading
Every guide on ScamAlert is checked against primary sources from US consumer protection and law enforcement agencies.
- [1]Investment scams and cryptocurrency fraud — Federal Trade Commission
- [2]Internet Crime Complaint Center (IC3) — Federal Bureau of Investigation
- [3]Investor alerts and bulletins — US Securities and Exchange Commission
- [4]Customer advisories on relationship and crypto fraud — US Commodity Futures Trading Commission
Topics covered
- pig butchering scam
- crypto romance scam
- fake investment platform
- wrong number text scam
- cannot withdraw crypto profits
- investment scam recovery
Editorial note: This guide is general consumer education, not legal or financial advice. Dispute deadlines, liability limits and reimbursement policies vary by institution and change over time. Confirm your specific rights with your bank or a qualified professional. See our editorial policy for how we research and review this content.
Sponsored content
Related guides
AI & Cyber
AI Voice Cloning Scams
A few seconds of public audio is enough to clone a relative’s voice. Learn how AI voice cloning emergency scams are built, why they defeat instinct, and the one habit that stops them.
Cards & Payments
P2P Accidental Transfer Scam
Money arrives in your Venmo or Cash App "by mistake" and a stranger asks you to send it back. Here is why returning it costs you twice, and how P2P payment fraud really works.
Cards & Payments
Gift Card Scams & Draining
Nobody legitimate is ever paid in gift cards. Learn why fraudsters insist on them, how in-store card draining works, and what to do in the first hour after paying.