HostHostDeFi › Guides › Pig butchering
Pig butchering scams: the whole playbook, stage by stage
The most financially devastating scam in crypto doesn't hack anything. It builds a relationship for weeks, then walks the victim into a fake platform that shows profits which never existed.
"Pig butchering" — the scammers' own term, fattening the pig before the slaughter — is consistently flagged by the FBI among the highest-loss scam categories in crypto. It deserves study precisely because it defeats smart people: there's no malware, no hack, and no urgency at the start. Just patience, aimed at your trust.
The script, stage by stage
Stage 1 — the approach. A "wrong number" text, a dating-app match, a LinkedIn connection. The opener is mundane on purpose. The tell: a stranger who keeps a low-stakes conversation going with unusual persistence, and whose profile is polished but thin.
Stage 2 — the fattening. Weeks of genuine-feeling contact: good mornings, life details, photos. Money isn't mentioned; when it appears it's oblique — screenshots of their own "trades," a lifestyle that seems funded by something. The tell: an eventual, casual pivot to how they make money, always involving a platform you've never heard of.
Stage 3 — the demonstration. You're invited to try it with a small amount, on a professional-looking site or app. You deposit a little; the dashboard shows a quick gain. Often a small withdrawal works — the single most persuasive moment of the entire con, and pure theater. The tell: the platform exists nowhere reputable, its domain is young, and it came to you exclusively through this one person.
Stage 4 — the slaughter. Convinced by the visible "profits," you deposit seriously — sometimes borrowing to do it. The numbers on screen keep climbing; none of it is real trading, just a database the operators type into. When you try to withdraw, the trap closes: a "tax," a "compliance fee," an "account unlock" — each payable in advance, each followed by another. Every fee is a further theft. Eventually the platform and the person evaporate.
Stage 5 — the second scam. Weeks later, "recovery agents" find you, offering to retrieve the funds for an upfront fee. This is routinely the same operation harvesting its own victim list — the subject of our recovery-scam guide.
| Stage | What you see | What's actually happening |
|---|---|---|
| Approach | Wrong-number text, dating match | Outbound script at industrial scale |
| Fattening | Weeks of genuine friendship | Trust-building on a quota'd schedule |
| Demonstration | Quick gains, a small withdrawal works | Theater funded by your own deposit |
| Slaughter | A dashboard full of profits | A database — plus the fee ladder |
| Second scam | A "recovery agent" who found you | The same operation, re-skinning its victim list |
The economics of the con
Each element is load-bearing. The weeks-long build is the expensive part — and it's staffed: investigators including the UN's drugs-and-crime office have documented fraud compounds running these scripts at scale, often with trafficked workers, which is why the 'person' you're talking to has such patience and polish. The fake platform is software with a skin — cloning a convincing exchange UI is the cheap part. And crypto rails are chosen deliberately: irreversible settlement, cross-border in minutes, no bank to call. The fee ladder at withdrawal is calibrated psychology — each "tax" or "unlock fee" is priced just low enough to feel worth paying against the balance on screen, and it only ends when the victim stops paying.
Smart people fall for it because the attack surface is emotional, not technical: authority (a successful mentor figure), sunk cost (weeks invested, money down), and isolation (the scammer quietly discourages outside opinions). Competence in markets doesn't immunize anyone — the platform was never a market.
The one structural rule: never trade on a platform that reached you through a relationship. Real exchanges are found by you; fake ones find you. That single filter defeats the entire category regardless of how good the con is.
If you're inside one right now
Stop sending money immediately — including any "fee to withdraw"; there is nothing behind the dashboard to withdraw. Preserve everything: chat logs, addresses you sent to, transaction IDs, the platform's URL. Report to law enforcement (in the US, the FBI's IC3) — recovery is genuinely rare, but reports build the cases that take down operations. Tell someone you trust; isolation is the con's operating environment, and these operations are staffed at industrial scale, so shame is misplaced. And when the "recovery service" contacts you, you'll recognize Stage 5.
Real platforms don't find you — but tokens still need checking
Trading somewhere real? Paste any token before you buy it; the scan reads the chain, not the marketing.
Frequently asked
What is a pig butchering scam?
A long-con investment scam: the scammer builds a weeks-long relationship (romance, friendship, or professional), then introduces a fake trading platform showing fabricated profits. Deposits are stolen; withdrawals trigger endless fake 'fees' that are further theft. It's consistently among the highest-loss scam categories in crypto.
How do fake trading platforms show me profits?
The dashboard is just a website the operators control — the numbers are typed into a database, not produced by trades. Many even allow a small early withdrawal, funded by your own deposit, because that moment converts skeptics better than anything else in the script.
Can I get my money back after a pig butchering scam?
Rarely, honestly. Report with full evidence to law enforcement (IC3 in the US) and your exchange — freezes do happen when funds hit cooperative platforms. Treat anyone who contacts you promising recovery for an upfront fee as the same scam's second act.
What's the fastest way to spot one early?
The platform test: did the investment site reach you through a person who reached you? Legitimate venues are ones you found independently. A stranger-turned-confidant steering you to an unknown platform is the entire scam in one sentence — exit at that point.
How do I check whether a trading platform is real?
Independently — never through the link a person sent you. A real venue is findable without your contact: it has years of third-party coverage, an aged domain, regulatory registration where required, and an order flow you didn't reach through a relationship. If the only evidence a platform is legitimate is the person who introduced it, that's Stage 3 of the script, not a platform.
Are these run by lone scammers?
No — that's part of why they're so convincing. Investigators have documented industrial-scale fraud compounds running the scripts with teams and quotas, sometimes staffed by trafficked workers. The patient, polished 'person' on the other end is often a role being worked on a schedule, which is why the playbook is so consistent across victims.