Anatomy of a Pig-Butchering Scam

What "pig butchering" actually means

The phrase translates from a slang term used by the criminal networks themselves — to *fatten the pig* before the slaughter. Victims are emotionally invested for weeks before being asked to send money. Losses regularly exceed $500K per victim.

The 8-week playbook (typical)

• Week 1: First contact (dating app, LinkedIn, "wrong number" text)
• Week 2: Emotional bond building, daily messaging, photos
• Week 3: Mention of "uncle who works in crypto" — small wins
• Week 4: Victim opens account on attacker-controlled "platform"
• Week 5–7: Deposits grow, fake portfolio shows gains
• Week 8: Attempted withdrawal blocked by "tax", "compliance fee", or "KYC deposit"
• Final: Victim sends more or realizes — funds gone

Red flags by phase

• Romantic interest develops *unusually fast*
• Talk of investing on a platform you've never heard of
• Anyone who refuses to video call live (deepfakes notwithstanding)
• Withdrawal blocked by upfront fees — always a scam
• Pressure, urgency, emotional escalation

Disruption windows

There are at least four moments to intervene — first deposit, mid-cycle growth, withdrawal denial, and post-loss. Cyberphoenix offers family-coaching playbooks for each.

If you've been hit

1. Stop sending money. *Especially* if "you need to send more to release the rest" — this is the recovery trap
2. Document everything (screenshots, wallet addresses, messages)
3. File with FBI IC3 and your country's equivalent within 24 hours
4. Contact your bank — push for SWIFT recall if international
5. Don't trust "recovery services" that contact you out of nowhere — they're the same criminals