The Pig Butchering Scam: From Social Engineering to Empty Wallets

You get a message from someone you don’t know. Maybe it’s a simple “Hi,” a supposed wrong number, or a random person who somehow seems very interested in your life. You start talking. They seem friendly. Then surprisingly attentive. Eventually, you might start thinking, “Huh, this person is actually pretty nice.” And then comes the investment advice.

Welcome to the world of pig butchering scams, one of the more elaborate forms of online fraud. Despite the ridiculous-sounding name, this is not about someone trying to sell you suspicious bacon.
Pig butchering comes from the Chinese term shā zhū pán (杀猪盘), commonly translated as “pig butchering” or “pig-killing scheme.” The metaphor describes the process criminals use to exploit their victims: first they identify a target, then they “fatten” them by building trust and encouraging financial involvement, and finally they “slaughter” them by taking as much money as possible.
In other words, the scammer isn’t looking for a quick meal.

The interesting (and disturbing) part is that the scam usually doesn’t begin with money. It begins with a relationship.

So, What Exactly is a Pig Butchering Scam?

Pig butchering is essentially a hybrid of romance fraud, investment fraud, and social engineering. The scammer contacts the victim through dating apps, social media, messaging platforms, or sometimes simply by sending a seemingly innocent text message. The initial contact can be surprisingly mundane. From there, the scammer starts building rapport.

They may ask about the victim’s job, hobbies, family, travel plans, or financial interests. They might share photos, talk about their own life, and maintain conversations for weeks or even months (!!). In romance-oriented versions, the relationship can become explicitly romantic. In other cases, the scammer presents themselves as a friend, business contact, or someone who happens to know a lot about investing.

Unlike a traditional phishing email screaming “URGENT! YOUR ACCOUNT WILL BE DELETED!!!” five seconds after you open it, pig butchering relies on patience. The criminal wants the victim to develop enough trust that their eventual financial suggestions don’t sound like suggestions coming from a complete stranger. And that’s where the “investment opportunity” enters the conversation.
The scammer may claim to have discovered an excellent cryptocurrency investment, trading strategy, or financial platform. They might even offer to teach the victim how to use it.
The victim is then directed to a website or app that appears to be a legitimate investment platform. It may display charts, account balances, transaction histories, and impressive-looking profits. Everything appears to be working, except isn’t.
The platform is controlled by the scammers, and the numbers on the screen can be completely fictional.

Sometimes, the victim is even allowed to withdraw a small amount initially. That’s a particularly nasty psychological trick because it creates the impression that the system is legitimate.
“See? I told you it works! :)”
And because the victim has already developed trust in the person who introduced them to the platform, they may continue investing.

More money goes in, the fake balance gets bigger, and the scammer encourages another deposit. And another. Until eventually the victim tries to withdraw a substantial amount.
Suddenly, there is a problem.
Maybe they need to pay a “tax.” Perhaps there is a “withdrawal fee.” Maybe the account needs additional verification. There could be a supposed regulatory charge, liquidity requirement, or some other beautifully invented financial obstacle.
Then, the victim sends more money and the obstacle somehow remains.
Eventually, the scammer disappears, the platform stops responding, or the victim realizes that the impressive investment account they were watching grow was essentially a very sophisticated digital mirage.

More Than Meets the Eye…

Another interesting aspect of pig butchering is the industrial scale behind many operations.
Investigations have linked these schemes to organized criminal networks and large-scale scam compounds, particularly in Southeast Asia. Some people working inside these compounds have reportedly been victims of human trafficking themselves, forced to participate in online fraud operations. In other words, the person chatting with the victim may be only one small component of a much larger criminal ecosystem.

That ecosystem can include people responsible for finding victims, maintaining fake identities, conducting conversations, providing technical infrastructure, creating fraudulent investment platforms, handling cryptocurrency transactions, and laundering the proceeds.
So when an investigator encounters a single victim communicating with a seemingly charming “crypto expert,” there may be a considerably larger operation hiding behind that profile.

The profile picture is just the front door.
For investigators, pig butchering cases can be particularly interesting because they potentially generate evidence across several different environments.
There may be dating-app or social-media accounts, messaging histories, phone numbers, email addresses, fake identities, cryptocurrency wallet addresses, transaction hashes, domains, hosting infrastructure, screenshots of the fraudulent platform, bank transfers, and records from legitimate cryptocurrency exchanges.

Don’t Blame the Victims

There’s also an ongoing debate about whether investigators, journalists, and researchers should continue using the term “pig butchering.”

The reason is fairly obvious once you think about it: the metaphor comes from criminals referring to their victims as animals that are being prepared for slaughter. Some researchers and international organizations have argued that the terminology can dehumanize victims and contribute to victim-blaming or shame, potentially making people less willing to report what happened.

Alternative terms include investment scam, romance-investment scam, hybrid investment fraud, and romance baiting.
That doesn’t mean the term “pig butchering” is going to disappear anytime soon. It’s already widely used by law enforcement, researchers, cybersecurity professionals, and the media. But understanding where the name came from is important — especially when talking about victims.
Because the victim didn’t “fail to spot the obvious scam.” The scam was specifically designed to make it not obvious.

The Biggest Lesson

Pig butchering scams demonstrate something that cybersecurity professionals have known for a long time: sometimes the weakest link isn’t a vulnerability in the software. It’s trust.

A fake investment platform can be technically impressive. A cryptocurrency wallet can be perfectly legitimate. A dating profile can look completely convincing. And the person on the other side of the screen can spend months carefully constructing a believable identity. The attack succeeds when all those pieces work together.

So, if someone you’ve never met suddenly appears in your messages, becomes extremely interested in your life, has an amazing investment strategy, and just happens to know exactly how you can make money with crypto… Well…
Maybe don’t start shopping for that yacht just yet.