Investment Fraud

Pig-Butchering: Definition, Mechanics, and AML Detection Signals

7 min read · April 2026 · Reviewed by CAMS-certified professional

Definition

Pig-butchering (sha zhu pan) is a fraud typology that blends romance fraud with fake investment platforms, typically involving cryptocurrency. The typology takes its name from the Mandarin metaphor of fattening a pig before slaughter: the scammer builds the relationship over weeks or months before introducing the investment that ultimately defrauds the victim. As of 2025, pig-butchering is the largest single fraud-loss category reported to the FBI Internet Crime Complaint Center (IC3) and a top-tier focus for FinCEN, FCA, AUSTRAC, and most major regulators.

Test for pig-butchering indicators in 90 seconds →

Pig-butchering is a mature, organized fraud typology run primarily by criminal organizations operating from compounds across Southeast Asia. The scale is substantial: tens of billions of dollars of victim losses annually, growing year over year. From an AML perspective, pig-butchering proceeds pass through ordinary retail bank accounts and exchange accounts before disappearing into the cryptocurrency layer. Detection therefore sits squarely in frontline AML, not just fraud investigation.

The typology has converged with money mule typologies (mule accounts receive and forward pig-butchering proceeds) and with broader crypto-bridge laundering. Effective programs treat pig-butchering as a dedicated typology with explicit detection rules and trained pattern-interruption staff.

How Pig-Butchering Works

The typology follows a consistent five-stage script. Stage 1: Contact. The victim is approached, usually unsolicited, on a dating app, social media platform, professional network, or messaging service, often through an apparent "wrong number" that develops into conversation. Stage 2: Relationship building. Over weeks or months, the scammer builds trust as a romantic interest, professional contact, or family-like figure. The scammer presents as successful in finance, real estate, or technology. Stage 3: Investment introduction. The scammer introduces a "trading platform" or "exclusive investment opportunity," typically presented as cryptocurrency arbitrage, FX, or a new financial product. Initial small investments by the victim show extraordinary returns on the fake platform. Stage 4: Escalation. The victim is encouraged to invest larger amounts, often taking loans or liquidating retirement assets to do so. Stage 5: Exit. When the victim attempts to withdraw, they are told they must pay "tax," "release fees," or "compliance charges" first, and after paying these the platform either disappears or continues to demand fees until the victim is exhausted.

Detection Signals

The following indicators, considered individually, are not conclusive. Considered as a pattern, they form the diagnostic basis for pig-butchering alerts in mature transaction monitoring programs.

01
New beneficiary, large transfers. Victims typically send to a beneficiary they have never paid before, in amounts that grow over weeks. Early transfers may be in the low thousands; later transfers can reach hundreds of thousands.
02
Crypto exchange destinations. A high proportion of pig-butchering payments flow to cryptocurrency exchange accounts (especially regulated domestic exchanges) before being converted to crypto and sent on-chain.
03
Loans and asset liquidation precede transfers. Victims often draw on home equity, take personal loans, or liquidate retirement accounts to fund the investment. A sudden shift from saver to borrower in an established customer is a strong contextual signal.
04
Accelerating frequency and size. Transfers escalate predictably. A scheme that begins with one 5,000 transfer can reach 50,000 per week within two months. The trajectory itself is a signal.
05
Pattern interruption resistance. When the bank intervenes (a phone call, a transaction hold), the customer often defends the activity strongly, sometimes with scripted answers. One of the most diagnostic single signals.
06
Customer age and isolation indicators. Victims span all demographics, but older customers and recently widowed or divorced customers are over-represented. Isolation from family, often actively encouraged by the scammer, is common.
07
Use of unregulated trading platform. The "investment" platform cannot be verified as regulated by any recognized authority. Victims often cannot produce a regulatory registration when asked.
08
Inability to withdraw. The victim has only ever seen funds on the platform interface and has never successfully withdrawn cash. "Tax" or "fee" requirements have been introduced when withdrawal was attempted.
09
Cross-border destination patterns. Recipient accounts often resolve to jurisdictions associated with pig-butchering compound operations, including parts of Southeast Asia, with onward routing into crypto.
10
Customer mentions never having met the counterparty in person. A "relationship" maintained exclusively through messaging and video calls (which often have technical excuses for not working properly), without any physical meeting, is a near-universal pattern.

Real-World Patterns

A 58-year-old recently divorced customer establishes a relationship through a dating app with someone presenting as a successful Singapore-based finance professional. Over four months the customer is introduced to a "private trading platform." Initial investments of 5,000 and 10,000 show apparent returns of 30 percent. The customer then transfers 75,000 (taken from a home equity line), then 120,000 (liquidated retirement account), then attempts a third transfer of 200,000 which the bank holds. The customer defends the activity strongly until investigators ask whether they have ever met the person in physical reality and whether they have ever withdrawn cash from the platform; the answer to both is no. This is the textbook pig-butchering case profile observed across UK APP fraud reimbursement claims since 2024.

A small business owner is contacted by an apparent "former classmate" who has built a successful career in cryptocurrency arbitrage. Over six weeks the business owner invests increasing amounts. The investment platform shows substantial gains. When the business owner attempts to withdraw to fund a new business expansion, they are told they must pay a 30,000 "compliance fee" first. This requested fee is itself the typology signal; legitimate platforms do not require pre-payment of fees before withdrawal.

Test these indicators against an actual transaction or relationship. The Red Flag Check assessment tool includes scenario-specific red flag sets covering pig-butchering alongside the broader AML indicator set. Run the assessment →

Regulatory Basis

Pig-butchering is captured under general AML reporting obligations and is the subject of dedicated guidance from FinCEN (FIN-2023-Alert005), the UK NCA, AUSTRAC, FINTRAC, and the FATF. The UK Payment Systems Regulator's mandatory APP fraud reimbursement rules (effective October 2024) place direct financial liability on institutions for failures to prevent customers from being defrauded, with pig-butchering as one of the largest single contributors to APP fraud losses. Several US states and federal agencies have introduced specific consumer warnings and enhanced suspicious activity reporting requirements for the typology.

Common Investigation Mistakes

Accepting the customer's defense of the activity at face value (victims are convinced the relationship and investment are real and will defend both vigorously), failing to ask the verification questions that allow the victim to recognize the typology themselves (in-person meetings, successful withdrawals, regulator verification), missing the connection between mule alerts at receiving institutions and pig-butchering victim losses at originating institutions, and intervening too aggressively (which can entrench the customer's commitment to the scammer rather than interrupting the pattern).

Frequently Asked Questions

What is pig-butchering?

A fraud typology blending romance fraud with fake investment platforms (typically cryptocurrency-based), in which the scammer builds a long-term relationship with the victim before introducing the fraudulent investment. The name translates from the Mandarin sha zhu pan: fattening the pig before slaughter.

How large is pig-butchering as a fraud category?

As of 2025, pig-butchering is the largest single fraud-loss category reported to the FBI IC3, with reported US losses exceeding 4 billion USD annually and growing. Global losses are estimated to be substantially higher, including significant losses across the UK, Australia, Canada, and EU markets.

Where do pig-butchering operations originate?

Most large-scale operations are run by organized criminal groups operating from compounds in parts of Southeast Asia. Many of the operatives at the compounds are themselves victims of human trafficking, coerced into running the scams. This humanitarian dimension has drawn substantial international attention since 2023.

How can banks intervene in pig-butchering?

Through transaction holds while review takes place, trained pattern-interruption conversations focused on factual verification questions (in-person meetings, successful withdrawals, regulator verification), coordination with receiving institutions (especially regulated crypto exchanges), and clear escalation paths to law enforcement.

Are banks liable for pig-butchering losses?

Increasingly, yes. The UK PSR's mandatory APP fraud reimbursement rules in effect since October 2024 place direct financial liability on both sending and receiving institutions for failures to prevent customers from being defrauded. Other jurisdictions are moving in similar directions. The expectation is no longer that institutions detect pig-butchering eventually; it is that they detect and intervene before significant loss occurs.

This article is for educational purposes only and does not constitute legal, tax, or compliance advice. Reporting obligations and detection thresholds vary by jurisdiction and regulated sector. Always consult a qualified compliance professional or your firm's MLRO for guidance specific to your situation.

← Back to typologies