Pig Butchering
How the cryptocurrency investment fraud known as “pig butchering” works, the long-form romance and confidence scheme run from organized scam compounds, and the legal avenues open to victims who have lost digital assets to it.
Overview
Pig butchering is a form of cryptocurrency investment fraud in which the offender builds a personal relationship with the victim over weeks or months and then uses that trust to draw the victim into a fraudulent investment platform. It combines two older frauds, the romance scam and the fake-investment scam, into a single, patient scheme. The victim is not pressured into a hasty decision; the victim is cultivated, shown fabricated profits, and persuaded to deposit more and more, until the money is gone. The name is a translation of the Mandarin term shā zhū pán, which likens the victim to a pig fattened before slaughter. It is the term used by the Department of Justice and by federal financial regulators, and it is used here for that reason, though the same conduct is also described as crypto confidence fraud or romance-investment fraud.
What distinguishes pig butchering from an ordinary scam is its scale, its patience, and its organization. It is not the work of a lone fraudster. The schemes are run, in the main, by transnational criminal organizations operating from large compounds in Southeast Asia, and they account for an enormous share of reported fraud losses. In its 2025 Internet Crime Report, the FBI’s Internet Crime Complaint Center recorded cryptocurrency-related losses of more than $11 billion, and identified investment fraud — the category that includes pig butchering — as the single largest source of loss, with crypto investment schemes alone accounting for roughly $7 billion. Reported losses are widely understood to be a fraction of the true total, because this fraud is heavily under reported.
This page explains how the scheme operates, the industrial structure behind it, how United States law applies to it, and what avenues exist for a victim trying to recover digital assets. It is a companion to the Crypto Fraud & Asset Recovery foundation section, which sets out the recovery mechanisms — forfeiture, restitution, civil litigation, and asset tracing — in full. This page applies them to one particular scheme.
How the Scheme Works
A pig butchering scheme begins with unsolicited contact. The first message is engineered to seem accidental or benign — a wrong-number text, a friendly direct message on social media, a match on a dating application, a connection request on a professional network. The opening rarely mentions money; its only purpose is to start a conversation. Once the victim responds, the offender invests time: daily messages, personal disclosures, the steady construction of a friendship or romance. This stage can last weeks or months, and it is deliberate. The relationship is the instrument of the fraud, not an incidental part of it.
Only after trust is established is an investment introduced, and it is introduced casually, as something the offender does personally and profitably, not as a sales pitch. The victim is directed to a trading platform or mobile application that appears professional and legitimate but is controlled entirely by the scheme. Early deposits are small, and the platform displays them generating rapid gains. Crucially, the victim is often permitted to withdraw a modest sum at this stage. That withdrawal is the most effective single device in the scheme: it converts skepticism into confidence and persuades the victim that the platform is real. From that point the deposits grow. A victim may commit savings, retirement accounts, or borrowed money, watching a balance that exists only as numbers on a screen the offender controls.
The scheme ends when the victim tries to withdraw a significant amount. The platform does not pay. Instead it manufactures obstacles, a “tax,” a “fee,” a “verification deposit,” an “unfreezing” payment, each presented as the final step before the funds are released, each requiring more money, none of which produces a withdrawal. Eventually the offender stops responding, the platform becomes inaccessible, and the relationship disappears along with the money. The cryptocurrency the victim deposited was, from the first transfer, moved into accounts controlled by the scheme and laundered onward. It was never invested in anything.
The Industrial Scale and the Forced-Labor Dimension
The compounds from which these schemes are run are a defining feature of the modern phenomenon. Pig butchering is, in substantial part, an industrialized criminal enterprise concentrated in parts of Cambodia, Myanmar, and Laos. The FBI has stated that these scams are largely perpetrated by organized criminal organizations in Southeast Asia that use victims of human trafficking as forced labor to operate them. People are recruited with false offers of legitimate jobs, transported across borders, and then confined in guarded compounds, described in United States court filings as prison-like facilities with barbed wire, dormitories, and rooms used for punishment, and compelled, under threat of violence, to run scams against victims worldwide. See, for example, Press Release, U.S. Dep’t of Justice, Chairman of Prince Group Indicted for Operating Cambodian Forced Labor Scam Compounds Engaged in Cryptocurrency Fraud Schemes, October 14, 2025.
The legal significance of this structure is twofold. First, it means a single scheme can defraud thousands of victims at once and at enormous aggregate value; the operations are organized, capitalized, and resourced like businesses. Second, it places the offenders, the proceeds, and the controlling individuals outside the United States. This both shapes, and constrains,every recovery effort discussed below. It also means that the person a victim actually communicated with may themselves be a trafficking victim coerced into the work, while the individuals who profit and control the money sit at the top of a transnational organization. Recovery, where it is possible at all, runs against that organization and its assets, not against the person who sent the messages.
How the Law Applies
There is no federal statute addressed specifically to “pig butchering.” Like other crypto frauds, it is prosecuted and litigated under established law. The criminal conduct is charged principally as wire fraud (18 U.S.C. § 1343), because the scheme is executed through electronic communications, and as money laundering (18 U.S.C. §§ 1956 and 1957), reflecting the movement and concealment of the proceeds; both are frequently charged as conspiracies. Because the fraud is presented to the victim as an investment, securities or commodities fraud charges (18 U.S.C. § 1348) and the anti-fraud provisions enforced by the securities and commodities regulators may also apply, depending on how the supposed investment was characterized. The Digital Asset Regulation foundation section of this website explains which regulator’s authority follows which asset, and the Crypto Fraud & Asset Recovery foundation section sets out the enforcement landscape in full.
Several agencies have a role. The Federal Bureau of Investigation investigates these schemes and operates the Internet Crime Complaint Center, the federal intake point for victim reports. The Department of Justice prosecutes the offenses and pursues the proceeds through forfeiture. The Securities and Exchange Commission and the Commodity Futures Trading Commission bring civil enforcement actions where the scheme involved a digital asset within their respective authority, and the Federal Trade Commission reaches consumer-facing deception under its own statute. The Financial Crimes Enforcement Network addresses the laundering of proceeds and issued an alert in September 2023 identifying behavioral, financial, and technical red flags of the scheme for financial institutions. Because the operations are foreign, the Treasury Department’s sanctions authority is also in use against the organizations and individuals behind them.
The scale of both the schemes and the federal response is illustrated by the action the Department of Justice brought in October 2025 against the chairman of a Cambodian conglomerate alleged to have operated forced-labor scam compounds. The Department unsealed an indictment charging wire fraud conspiracy and money laundering conspiracy and filed a civil forfeiture action against approximately 127,000 bitcoin, valued at roughly $15 billion, and described by the Department as the largest forfeiture action in its history, alleged to be proceeds and instrumentalities of the fraud. The Treasury Department imposed sanctions on the organization and scores of associated individuals and entities the same day. The case is an allegation, not an adjudication, and the principal defendant remains at large; but it demonstrates both the magnitude of the industry and the government’s willingness, and growing technical capacity, to trace and seize cryptocurrency proceeds across borders.
Recovery and What Victims Can Do
For a victim, the most important fact about recovery is that it depends on speed. Cryptocurrency transferred to a scheme is moved and laundered quickly; assets reported within hours can sometimes be frozen at an exchange before they are dispersed, while the same assets discovered weeks later usually cannot. A loss should be reported to the FBI’s Internet Crime Complaint Center at ic3.gov as soon as it is discovered, and any exchange the victim used to send funds should be notified immediately. All records, transaction identifiers, wallet addresses, the platform’s details, and the communications themselves, should be preserved. Reports of this kind also feed the FBI’s victim-notification work; the Bureau’s Operation Level Up has identified and warned thousands of people while they were still being defrauded.
Beyond rapid reporting, recovery is genuinely difficult, and a victim is best served by an honest account of why. The proceeds are usually moved offshore, into the control of a foreign organization, and converted or laundered before any complaint is filed. Two routes nonetheless exist. The criminal route runs through prosecution and forfeiture: where the government seizes assets traceable to the scheme, victims can seek a share through the Department of Justice’s remission and restoration processes. The civil route is a lawsuit brought by the victim but it is productive only where there is a defendant who can be identified, served, and is solvent, which in practice often means an intermediary rather than the anonymous operators. Both routes, and the asset-tracing work that supports them, are set out in detail in the Crypto Fraud & Asset Recovery foundation section of this website.
The cross-border structure of pig butchering is the central obstacle to recovery. A United States judgment is slow and difficult to enforce against assets and defendants abroad, and even criminal forfeiture reaches only what the government can locate and secure. Recovery is most feasible where stolen funds passed through an exchange subject to United States or allied jurisdiction, where they can be frozen and the receiving accounts identified. For many victims, the proportionate course is to report the loss thoroughly and promptly and to seek inclusion in any eventual forfeiture distribution; for larger losses, particularly where tracing identifies recoverable assets, a civil action or a coordinated civil-and-criminal strategy may be warranted. That assessment is best made early, with advice, while assets may still be within reach.
One further warning is specific to this scheme and important. Victims of pig butchering are frequently approached a second time by “recovery” services that promise, for an up-front fee, to retrieve the lost funds. These offers — particularly unsolicited ones that arrive after a loss — are very often a second fraud aimed at the same victim. Legitimate recovery work, whether by an attorney, a forensic firm, or law enforcement, does not begin with a guarantee of success or a demand for payment sent to a personal cryptocurrency wallet. Any such offer should be verified independently before money is sent or account access is shared.
Frequently Asked Questions
What is pig butchering?
Pig butchering is a form of cryptocurrency investment fraud in which an offender spends weeks or months building a personal relationship — often a romance or close friendship — with a victim, then uses that trust to draw the victim into a fraudulent investment platform the offender controls. The victim is shown fabricated profits and encouraged to deposit progressively larger sums until the money, which was never invested, is gone. The schemes are typically run by organized criminal groups operating from compounds in Southeast Asia.
I was able to withdraw a small amount of money early on — does that mean the platform was real?
No. Permitting a small early withdrawal is one of the most common and effective techniques in a pig butchering scheme. The early payout costs the offender very little and is designed to overcome the victim’s natural caution, convince the victim that the platform is legitimate, and encourage much larger deposits. A successful small withdrawal is not evidence that an investment is genuine; in this scheme it is frequently a sign of the opposite.
Can I recover cryptocurrency lost to a pig butchering scam?
Sometimes, partially, and rarely in full. Recovery depends on whether the assets can be traced, whether they remain somewhere a court or a cooperating institution can reach them, and whether there is a solvent, identifiable defendant or a pool of seized funds available for distribution. Because pig butchering is run by foreign organizations that move proceeds offshore quickly, recovery is genuinely difficult, and many victims recover little or nothing. The strongest cases are those reported immediately and those in which stolen funds are traced to a regulated exchange. The companion Crypto Fraud & Asset Recovery resource explains the available routes in detail.
Is it worth hiring a lawyer to recover money lost to a pig butchering scam?
It depends on the specifics of the loss, and an honest assessment is the place to start. Pig butchering proceeds are usually moved offshore quickly by a foreign organization, so recovery is genuinely difficult — and for many victims, engaging counsel to chase anonymous overseas operators would cost more than it could realistically return. A lawyer is most useful where there is something concrete to work with: a larger loss, funds that tracing can follow to a regulated exchange, or an identifiable intermediary that can be pursued — and in determining, early, whether such a route exists at all. Separately, and regardless of whether a victim engages a lawyer, the loss should be reported promptly to the FBI’s Internet Crime Complaint Center at ic3.gov; reporting can occasionally allow funds to be frozen before they are dispersed, it feeds investigations that have produced very large forfeitures, and it costs nothing.
Someone has contacted me offering to recover my lost funds for a fee — is that legitimate?
Treat such an offer with great caution. Victims of pig butchering are routinely targeted a second time by “recovery” services that promise, for an advance fee, to retrieve lost assets — an offer that is itself frequently a scam. Legitimate recovery work does not begin with a guarantee of results or a demand that payment be sent to a personal cryptocurrency wallet. Any such provider should be verified independently before money is sent or account access is shared.
Related Resources
- Crypto Fraud & Asset Recovery — the full treatment of how losses to digital asset fraud are recovered, through criminal forfeiture and restitution, civil litigation, and asset tracing.
- Digital Asset Regulation — the regulatory architecture that determines which agency has authority over a given digital asset.
- Crypto Exit Scams — projects built to be abandoned, in which the operators withdraw investor funds and disappear.
- Crypto Pump-and-Dump Schemes — coordinated price manipulation in digital asset markets and the law that applies to it.
- Oracle Manipulation — the manipulation of price-feed data used to drain decentralized finance protocols.