Anatomy of a pig-butchering scam

"Pig butchering" — 殺豬盤 in the Chinese networks where the pattern was first named — is the most common fraud type we see in 2026. The operators invest months cultivating a relationship before introducing a fraudulent investment platform. Understanding how the pattern unfolds makes it easier to stop mid-way.

The operational stages

The scam is almost always staged in four parts:

1. Contact. An unsolicited message, usually on a dating app, WhatsApp, LINE, or Telegram, sometimes after a wrong-number message that invites a casual reply.
2. Cultivation. Weeks to months of relationship-building. The operator's persona is consistent: successful in a finance-adjacent field, attractive, based far enough away that a video call is never quite feasible.
3. Soft introduction. The operator mentions — casually — a platform they have been trading on. Returns are presented as modest at first.
4. The trap. The victim is walked through depositing onto a platform that mirrors a legitimate exchange's branding. Early "withdrawals" succeed to build confidence. Later requests to withdraw are blocked behind escalating "tax," "unfreezing," and "verification" fees.

The on-chain footprint

The pattern leaves an identifiable on-chain signature. Deposits are typically routed through one of a small number of deposit consolidators before reaching the operator's cashout infrastructure. We trace these flows using Chainalysis Reactor and Arkham Intelligence, which cluster addresses that empirically belong to the same party.

Where the funds end up depends on the operator's sophistication:

• A regulated exchange in a cooperative jurisdiction (best case for recovery — freezing order available).
• An offshore exchange with inconsistent KYC (recovery possible but slower).
• A mixing service such as Tornado Cash (recovery extremely unlikely at this point).

Warning signs to stop the pattern early

• The counterparty refuses live video or in-person meetings indefinitely.
• The introduction to the "platform" comes only after emotional investment.
• The platform cannot be reached via a web search independent of links the counterparty provides.
• Withdrawals of small amounts succeed; a larger withdrawal triggers a new fee.

If you have been affected

The single most important variable in recovery is time. Preserving transaction records and ceasing further deposits materially changes the probability that any part of the funds can be reached. Our risk disclosure sets out the factors and the scenarios where we advise against engaging counsel at all.