Fallannahme · 24/7 geöffnet
Maschinelle Übersetzung. Professionelle Prüfung steht aus.
Home / Scam Patterns / Romance scams (pig butchering)
§ — · Scam pattern

Romance-into-investment crypto scams,
recovery starts the moment you realise.

Romance-to-investment scams (commonly called "pig butchering" inside law-enforcement circles) are the single highest-loss crypto-fraud category globally. They combine weeks or months of emotional manipulation with a polished fake trading platform, and they target professionals, recent widows or widowers, and anyone who's been on a dating app long enough to be lonely. The loss patterns are characteristic and the recovery paths are real, if you act before the funds are laundered through privacy mixers.

§ 01 · How this scam works

The scheme begins outside any financial context. A contact on Bumble, Hinge, LinkedIn, or WhatsApp opens with a misdialed-number conversation or a coincidental shared interest. The chat continues for weeks. They are warm, attentive, available, and consistently unable to video-call (the explanations sound reasonable: deployed overseas, working in remote oil-platform infrastructure, recently divorced and rebuilding).

After the relationship feels established, the contact mentions a trading platform they've been using — usually framed as something they "discovered" rather than something they recommend. The platform looks legitimate: a real trading interface, real-time price feeds, even small test withdrawals that work. The contact walks the victim through the first deposit and shows them a small profit. Trust deepens.

Subsequent deposits get larger. The platform's interface shows continued gains; the contact celebrates with the victim. When the victim finally requests a substantial withdrawal, the platform invents a sequence of barriers: "tax clearance fees", "anti-money-laundering verification", "withdrawal upgrade tiers". Each new barrier requires an additional deposit. The contact is sympathetic but encourages the victim to "just complete the process so we can finally cash out together".

The deposits never come back. By the time the victim recognises the pattern, the platform has typically moved the funds through one or more cryptocurrency mixers and onto non-cooperative offshore exchanges. The contact disappears.

Typical victim profile

Late-30s to 60s, often a recently-divorced or widowed professional, often with cryptocurrency curiosity but limited prior trading experience. The romance phase typically lasts 6-16 weeks. The first deposit is usually £500-5,000; the cumulative loss before recognition averages £40,000-150,000. Both men and women are targeted in roughly equal numbers. The scheme cuts across socioeconomic lines; education does not protect against it.

§ 02 · Red flags to recognise

Signals victims and bystanders should know.

  • 01

    Contact begins outside dating context but moves there

    Misdialed-number openings ("Hi James, this is the dentist confirming...") that pivot to ongoing conversation. LinkedIn connections from people whose profile is suspiciously thin. Wrong-number texts that become weeks of warmth.

  • 02

    Cannot or will not video call

    Always a reason — bad WiFi at the rig, deployed somewhere with restrictions, "I want our first video call to be when we meet in person". This is structural: revealing the face would collapse the scheme.

  • 03

    Investment "discovered" rather than pitched

    They never sell you on it. They mention it in passing. They show their own profits. They wait for you to ask. This soft-sell pattern is consistent across thousands of cases worldwide.

  • 04

    Small test withdrawals work

    Early small withdrawals to your wallet succeed. This is the trust-builder. The pattern reverses once you have deposited a substantial amount.

  • 05

    Sudden barriers when you try to withdraw real money

    Tax fees, AML checks, "platform upgrade" requirements. Each one is invented. Each one demands an additional deposit.

§ 03 · What to do if you've been hit

The first 24 hours matter most.

  1. 01

    Stop depositing immediately

    No matter how convincing the next "release fee" demand is, every additional payment compounds your loss without ever generating recovery.

  2. 02

    Document everything before logging in again

    Screenshot every conversation, every account screen, every withdrawal attempt, every fee demand. Some platforms quietly delete user-side records once they detect a complaint, so do this before further interaction.

  3. 03

    Block the contact and preserve the messages

    Block them on all channels but keep the message history; do not delete the conversations. Those messages are evidence.

  4. 04

    File a report with your national fraud-reporting centre

    IC3 (US), Action Fraud (UK), Anti-Scam Centre (Singapore), CAFC (Canada), ScamWatch (Australia), BaFin (Germany). The reference number unlocks bank and exchange escalation channels.

  5. 05

    Open a free case review with CryptoLeek

    Within 24 hours we tell you whether the on-chain trail is recoverable and what the realistic path is. No commitment until you decide.

§ 05 · Frequently asked

Questions victims of this pattern ask us most.

Can pig butchering scam money be recovered? +
In some cases yes, when the recovery action begins quickly enough. If the funds went through a regulated exchange that still holds them in identifiable accounts, recovery is realistic through compliance escalation and civil action. If the funds have already been laundered through privacy mixers into non-cooperative jurisdictions, recovery is much harder. CryptoLeek's free 24-hour review tells you which category your case is in.
How long do I have to act? +
Speed matters enormously. Within the first 24-48 hours, the receiving exchange may still hold the funds in a freezable account. After that window, the operator typically moves the funds through mixers and onto offshore exchanges. Recovery is still possible after the window but harder.
Will the platform reopen my account if I pay the "release fee"? +
No. The "release fee" demand is the second-stage scam. Paying it never results in withdrawal; it only extracts additional money. This is uniform across thousands of documented cases. The fee may sound plausible (tax compliance, AML verification), but the platform is no longer trying to deliver a withdrawal at any point.

Lost crypto to this pattern?
The free 24-hour case review tells you what's recoverable.

We trace the funds on-chain, identify where they ended up, and tell you within a day whether recovery is realistic.

§ 06 · Related glossary terms

The vocabulary this pattern uses.

Definitions of the terms that come up across this guide. Each links to the full glossary.

Pig butchering (sha zhu pan)

A months-long romance-into-investment scam in which the operator builds emotional trust with a target over weeks, then introduces a fake trading platform that shows fabricated gains until the target deposits enough money to be worth extracting.

Read full definition →
Withdrawal-block extortion

The second-stage extraction pattern in which a fraudulent trading platform refuses to release the victim's "earned" funds until the victim pays escalating fees — tax clearance, AML verification, account-tier upgrades — none of which release anything.

Read full definition →
Recovery scam

A scam that targets prior victims of cryptocurrency fraud by cold-contacting them with unsolicited "recovery" offers and demanding payment with no written scope of work — never delivering any actual recovery and often draining additional money over multiple stages.

Read full definition →
Evidence pack

The structured dossier an investigations firm assembles for a recovery case: transaction-hash trace, wallet-cluster analysis, counterparty attribution, supporting screenshots and communications, and a recovery-path recommendation, packaged to the standard a regulator or court will accept.

Read full definition →
Wallet clustering

On-chain forensic technique that groups multiple cryptocurrency addresses into "clusters" believed to be controlled by the same operator, using shared-input heuristics, common-spending patterns, and behavioural fingerprints.

Read full definition →