Know the pattern
Pig butchering, explained without the jargon
The long-con investment scam behind a large share of crypto losses — how it is built, and why it works on careful people.
Last reviewed September 2026
The name is ugly and it comes from the scammers themselves — shā zhū pán, "pig butchering plate", the idea of fattening an animal before slaughter. It describes a long-form investment scam that begins as a relationship and ends with a drained account.
It is worth understanding the structure, for one reason: almost everyone who falls for it believes afterwards that they should have seen it. Once you see how deliberately it is engineered, that belief tends to soften — and it is easier to act clearly when you are not drowning in shame.
How it is built
Stage one: the wrong number
Contact arrives sideways, never as a pitch. A text to the wrong number. A LinkedIn connection. A dating app match who moves the conversation to WhatsApp or Telegram quickly. The opening is designed to feel like an accident, because an accident does not trigger the defences a sales approach would.
Stage two: the relationship
Weeks or months of ordinary conversation. Good morning messages, photos of meals, family details, career talk. No money is mentioned. This is the part people underestimate: genuine rapport is built, and by the time investing comes up, you are not taking advice from a stranger — you are taking it from someone you talk to every day.
The person on the other end may themselves be a trafficking victim working under coercion in a scam compound. That does not make the loss less real, but it explains the volume and the consistency of the script.
Stage three: incidental success
Wealth appears as background detail, not a proposition. An uncle in commodities. A proprietary arbitrage desk. A quiet mention of a good month. When you ask — and the script is built so that you ask — they are reluctant. That reluctance is the hook.
Stage four: the small win
A modest first deposit onto a platform that looks entirely professional: real-time charts, an app, customer support, a licence number, sometimes a genuine-looking regulatory registration. It shows a gain. You withdraw, and the withdrawal works.
That successful withdrawal is the most important moment in the whole scheme. It converts scepticism into evidence. Everything after it is you scaling up a system you have personally tested.
Stage five: the scale-up
Larger deposits, sometimes with encouragement to borrow, remortgage, or move retirement funds. The dashboard number climbs. The number is a value in a database that they control. It has never corresponded to a position in any market.
Stage six: the wall
You try to withdraw a meaningful sum and it fails. Then comes the sequence: a tax on gains, an anti-money-laundering fee, an account verification deposit, a regulatory bond. Each one is presented as the last obstacle. Each is paid from outside funds, because the "balance" can never be touched.
If you are at this stage right now
Every additional payment is a new loss, not a step toward recovering the old one. There is no fee that unlocks the balance, because there is no balance. Stop paying, and work through the first 48 hours.
Why careful people fall for it
Because it is not built to catch careless people. It is built to defeat exactly the checks a careful person runs: it takes months, so it defeats "anyone rushing me is a scammer". It pays out a real withdrawal, so it defeats "test it with a small amount". It never asks for money directly, so it defeats "never send money to someone who asks". The platform is a functioning piece of software, so it defeats "it looked amateurish".
Victims skew toward educated, financially literate people in their 40s to 70s. The FBI reported roughly $11 billion in cryptocurrency-related fraud losses across 181,565 complaints in 2025, with Americans over 60 reporting about $7.7 billion in losses across all cyber-enabled crime — up 37% in a single year.
Where the money goes, and what that means
Deposits are typically converted to a stablecoin and moved through a chain of wallets within hours, then out through offshore exchanges or over-the-counter brokers in jurisdictions with limited cooperation.
Honestly: once funds have gone through that chain, individual recovery is rare. What does happen, sometimes, is large coordinated seizures where prosecutors reach a pool of funds and distribute to identified victims. You are only part of that distribution if you filed a report with your wallet addresses and transaction hashes. That is the practical reason to file with IC3 even when it feels pointless.
What actually helps now
- Preserve everything before the accounts disappear.
- File the reports, with addresses and hashes included.
- Expect the follow-up recovery scam and refuse it — here is what it looks like.
- Talk to someone. Financial-fraud victimisation carries a heavy psychological load, and the isolation is part of what the scheme engineered. The DOJ Office for Victims of Crime maintains a directory of victim services by state.
Keep reading
Not legal advice. CryptoLawyer.com is an information service operated by Apogee Intelligence LLC. It is not a law firm, does not practice law, and no attorney–client relationship is created by using this site. Assessments are generated by software and are a starting point for your own research, not a substitute for advice from a licensed attorney in your jurisdiction.