Anatomy of a Pig-Butchering Scam

What "pig butchering" actually means

The phrase translates from a slang term used by the criminal networks themselves — to *fatten the pig* before the slaughter. Victims are emotionally invested for weeks before being asked to send money. Losses regularly exceed $500K per victim.

The 8-week playbook (typical)

Week 1: First contact (dating app, LinkedIn, "wrong number" text)
Week 2: Emotional bond building, daily messaging, photos
Week 3: Mention of "uncle who works in crypto" — small wins
Week 4: Victim opens account on attacker-controlled "platform"
Week 5–7: Deposits grow, fake portfolio shows gains
Week 8: Attempted withdrawal blocked by "tax", "compliance fee", or "KYC deposit"
Final: Victim sends more or realizes — funds gone

Red flags by phase

Romantic interest develops *unusually fast*
Talk of investing on a platform you've never heard of
Anyone who refuses to video call live (deepfakes notwithstanding)
Withdrawal blocked by upfront fees — always a scam
Pressure, urgency, emotional escalation

Disruption windows

There are at least four moments to intervene — first deposit, mid-cycle growth, withdrawal denial, and post-loss. Cyberphoenix offers family-coaching playbooks for each.

If you've been hit

Stop sending money. *Especially* if "you need to send more to release the rest" — this is the recovery trap
Document everything (screenshots, wallet addresses, messages)
File with FBI IC3 and your country's equivalent within 24 hours
Contact your bank — push for SWIFT recall if international
Don't trust "recovery services" that contact you out of nowhere — they're the same criminals