$11.4 billion stolen through crypto scams in 2025. Here's how it works.

How pig butchering actually works

The term comes from the Chinese phrase shā zhū pán — "fattening a pig before slaughter." It describes the most patient, psychologically sophisticated scam in existence — and it often begins as a romance scam before pivoting to investments.

Phase 1 — The Hunt: Contact starts with an "accidental" wrong-number text, a dating app match, or a LinkedIn connection. The scammer presents as attractive, successful, and emotionally available.

Phase 2 — The Fattening: Over weeks or months, they build a genuine-feeling relationship. Daily messages about life, dreams, family. They become your confidant. No mention of money yet — just trust-building.

Phase 3 — The Introduction: Casually, they mention they've been making money through trading. They show screenshots of their "portfolio" — fabricated returns on a platform they control. They suggest you try it with a small amount.

Phase 4 — The Escalation: Your first "investment" shows impressive returns. You deposit more. The platform looks professional, with charts, order books, and customer support. It's all fake.

Phase 5 — The Slaughter: When you try to withdraw, there are "tax problems," "verification fees," or "minimum balance requirements." No matter how much you pay, new obstacles appear. The money is gone.

The platforms look indistinguishable from real exchanges

This is what makes pig butchering uniquely devastating. The scammers don't ask you to wire money to a stranger. They set up professional-looking trading platforms with:

• Real-time charts that mirror actual market movements
• Fake order books showing other "users" trading
• Customer support chat that responds promptly
• Mobile apps that look identical to legitimate exchanges
• Fabricated profit reports that can be "withdrawn" in small amounts early on to build trust

The victim believes they're growing wealth, not giving money away. This is why victims — including bankers, engineers, doctors — invest their life savings, retirement funds, and even take loans. A Kansas banker embezzled $47 million from his own bank to cover losses from a pig butchering scam. He was sentenced to 24 years in prison.

Red flags that identify investment scams

Every investment scam follows patterns. Learn these and you'll never fall for one:

• Unsolicited contact — legitimate investment advisors don't cold-text you from WhatsApp.
• Guaranteed returns — no legitimate investment guarantees profits. Ever.
• Pressure to act quickly — "This opportunity closes tomorrow" is always a lie.
• Unregulated platforms — verify any exchange through your country's financial regulator (SEC, FCA, ASIC, BaFin).
• Can't withdraw — if you need to pay fees, taxes, or deposits before withdrawing, it's a scam.
• Moved to private channels — shifting from a dating app to Telegram or WhatsApp isolates you from platform protections.
• They invest with you — scammers "invest alongside you" to build trust. Their returns are fabricated.
• Requests for crypto — crypto transfers are irreversible. That's why scammers prefer them.

How to verify any investment platform

Before sending a single dollar (and if you've already sent money, go straight to our recovery guide):

1. Check your national financial regulator's registry (SEC EDGAR, FCA Register, ASIC search, BaFin database).
2. Search "[platform name] + scam" online. Check Reddit, Trustpilot, and Bitcointalk forums.
3. Verify the domain age — use whois.domaintools.com. Legitimate exchanges have years of history. Scam platforms are days or weeks old.
4. Look for real office addresses — Google Street View them. Call the phone number listed.
5. Never invest based solely on an online relationship — if they won't video call or meet in person, that's your answer.
6. Consult a licensed financial advisor before any significant investment. A real advisor will never pressure you.

The one test the platform cannot pass

Look back at the six checks above and notice what they have in common. Every one of them is a property of the platform or of the story around it: the registry entry, the domain age, the reviews, the office address, the phone number, the charts. The operator controls or can buy all of it. Domains age while an operation waits. Reviews get written. Addresses get rented. A registry search returns a clean result when the platform has borrowed the name of a firm that really is registered. Run every check, do it properly, and a well-built operation still comes back clean.

There is one thing the operator does not control: what happens when you take the money out.

A real exchange is indifferent to that request. It earns on fees and spreads whether your balance sits there or leaves, so your withdrawal costs it nothing it cares about. An investment fraud cannot be indifferent, because your withdrawal is the moment it loses. That is why the resistance is structural rather than bad luck or bad service: a release fee, a sudden tax, a verification deposit, an account manager who explains that right now is precisely the wrong time to exit. The FTC makes the same point from the other side in its own guidance: honest businesses give you time to think and to check their story, and pressure to act immediately is itself one of the signs of a scam.

One warning about this test, because the fraud is built to survive the lazy version of it. As the list above says, small early withdrawals are often paid, deliberately, to build your trust. A successful $200 withdrawal is not evidence the platform is real. It is the product. The test only means something at the full balance, once the number on screen is large enough that releasing it would end the operation. Until then you are being sold, not served. The same trap runs on task and earning apps, where a climbing balance is a claim rather than money and a deposit is demanded to release it, which is the mechanic behind the deposit-to-withdraw scam.

There is a second version of the same test that costs you nothing. Tell them you are having a licensed adviser, or simply someone in your family, look at it before you add another cent. A real opportunity survives a third party reading the paperwork. A fraud cannot, which is why isolation is on the red-flag list above rather than being a coincidence of how these conversations go. If the answer to an outside opinion is urgency, flattery, secrecy or a warning that you will miss the window, you already have your answer.

So the verdict is not in the platform. It is in what happens when you try to leave it. None of this means stop verifying. The six checks still earn their place: they catch the careless operations, which are many, and they tell you what you are dealing with. The claim is narrower and it matters. Checking the platform is no longer sufficient on its own to decide whether to send money, because a well-run operation is built to pass exactly those checks. Use the checks to recognise the attack. Use the withdrawal, and the outside opinion, to decide. The full version of this argument is in why scammers create urgency, and the clearest example of every check passing correctly for an attacker is in the SIM-swap port-out scam.

Source: FTC, How To Avoid a Scam.