https://www.wired.com/story/what-is-pig-butchering-scam/ Skip to main content Open Navigation Menu To revisit this article, visit My Profile, then View saved stories. Close Alert WIRED Hacker Lexicon: What Is a Pig Butchering Scam? * Security * Politics * Gear * Backchannel * Business * Science * Culture * Ideas * Merch More Search * Security * Politics * Gear * Backchannel * Business * Science * Culture * Ideas * Merch * Podcasts * Video * Newsletters * Magazine * Events * WIRED Insider * WIRED Consulting * Jobs * Coupons Lily Hay Newman Security Jan 2, 2023 8:00 AM Hacker Lexicon: What Is a Pig Butchering Scam? This type of devastating scheme ensnares victims and takes them for all they're worth--and the threat is only growing. Illustration with a cleaver above a pig with outlines distinguishing different sections of the body and some chat... Illustration: Yaz Monet Butcher; James Marshall; Getty Images Save Save Digital swindles like business email compromises and romance scams generate billions of dollars for criminals. And they all start with a little bit of "social engineering" to trick a victim into doing something disadvantageous, whether that's trusting someone they shouldn't or sending money into the void. Now, a new variation of these schemes, known as "pig butchering," is on the rise, ensnaring unsuspecting targets to steal all of their money and operating at a massive scale thanks in large part to forced labor. Pig butchering scams originated in China, where they came to be known by the Chinese version of the phrase shazhupan because of an approach in which attackers essentially fatten victims up and then take everything they've got. These scams are typically cryptocurrency schemes, though they can involve other types of financial trading as well. Scammers cold-contact people on SMS texting or other social media, dating, and communication platforms. Often they'll simply say "Hi" or something like "Hey Josh, it was fun catching up last week!" If the recipient responds to say that the attacker has the wrong number, the scammer seizes the opportunity to strike up a conversation and guide the victim toward feeling like they've hit it off with a new friend. After establishing a rapport, the attacker will introduce the idea that they have been making a lot of money in cryptocurrency investing and suggest the target consider getting involved while they can. Next, the scammer gets the target set up with a malicious app or web platform that appears trustworthy and may even impersonate the platforms of legitimate financial institutions. Once inside the portal, victims can often see curated real-time market data meant to show the potential of the investment. And once the target funds their "investment account," they can start watching their balance "grow." Crafting the malicious financial platforms to look legitimate and refined is a hallmark of pig butchering scams, as are other touches that add verisimilitude, like letting victims do a video call with their new "friend" or allowing them to withdraw a little bit of money from the platform to reassure them. The latter is a tactic that scammers also use in traditional Ponzi schemes. Though the swindle has some new twists, you can still see where it's going. Once the victim has deposited all the money they have and everything the scammers can get them to borrow, the attackers shut down the account and disappear. "That's the whole pig butchering thing--they are going for the whole hog," says Sean Gallagher, a senior threat researcher at the security firm Sophos who has been tracking pig butchering as it has emerged over the past three years. "They go after people who are vulnerable. Some of the victims are people who have had long-term health problems, who are older, people who feel isolated. They want to get every last bit of oink, and they are persistent." Most Popular * The Keys to a Long Life Are Sleep and a Better Diet&-and Money Science The Keys to a Long Life Are Sleep and a Better Diet--and Money Matt Reynolds * Apple's MM1 AI Model Shows a Sleeping Giant Is Waking Up Business Apple's MM1 AI Model Shows a Sleeping Giant Is Waking Up Will Knight * Elon Musk's X Is Suspending Accounts That Reveal a Neo-Nazi Cartoonist's Alleged Identity Politics Elon Musk's X Is Suspending Accounts That Reveal a Neo-Nazi Cartoonist's Alleged Identity David Gilbert * 26 Great Deals From Amazon's Big Spring Sale Gear 26 Great Deals From Amazon's Big Spring Sale Louryn Strampe * Though carrying off pig butchering scams takes a lot of communication and relationship building with victims over time, researchers say that crime syndicates in China developed scripts and playbooks that allowed them to offload the work at scale onto inexperienced scammers or even forced laborers who are victims of human trafficking. "We can already see the damage and the human cost both to scam victims and to forced laborers," says Michael Roberts, founder of Rexxfield Cyber Investigations, who has been working with victims of pig butchering attacks. "That's why we need to start educating people about this threat so we can disrupt the cycle and reduce the demand for these kidnappings and forced labor." The concept is similar to that of ransomware attacks and digital extortion in which law enforcement encourages victims not to pay hackers' ransom demands so they will be disincentivized to keep trying. The Chinese government cracked down on cryptocurrency scams beginning in 2021, but criminals have been able to move their pig butchering operations to Southeast Asian countries including Cambodia, Laos, Malaysia, and Indonesia. Governments around the world have increasingly been warning about the threat. In 2021, the FBI's Internet Crime Complaint Center received more than 4,300 submissions related to pig butchering scams, totaling more than $429 million in losses. And at the end of November, the US Department of Justice announced that it had seized seven domain names used in pig butchering scams in 2022. "In this scheme, fraudsters, posing as highly successful traders in cryptocurrency, entice victims to make purported investments in cryptocurrency providing fictitious returns to encourage additional investments," the FBI said in an October alert. Government officials and researchers emphasize that public education is a key component of helping people avoid becoming the victim of a pig butchering scheme. If people know the telltale signs and understand the concepts underlying the scams, they are less likely to be ensnared. The challenge, they say, is reaching the wider public and getting people who learn about pig butchering to pass on the information to others in their families and social circles. As with romance scams and other highly personal and exploitative attacks, researchers say that pig butchering scams take an enormous psychological toll on victims in addition to their financial toll. And the use of forced labor to carry out pig butchering schemes adds yet another layer of trauma and creates even more urgency to addressing the threat. "Some of the stories you hear from victims--it eats you up," says Ronnie Tokazowski, a longtime business email compromise and pig butchering researcher and principal threat advisor at the cybersecurity firm Cofense. "It eats you up really freaking bad." You Might Also Like ... * In your inbox: Will Knight's Fast Forward explores advances in AI * This shadowy firm enables businesses to operate in near-total secrecy * Scientists are inching closer to bringing back the woolly mammoth * The first rule of the Extreme Dishwasher Loading Facebook group is ... * Phones for every budget: These devices stood up to WIRED's testing [undefined] Lily Hay Newman is a senior writer at WIRED focused on information security, digital privacy, and hacking. She previously worked as a technology reporter at Slate magazine and was the staff writer for Future Tense, a publication and project of Slate, the New America Foundation, and Arizona State University. Additionally... Read more Senior Writer * Topicsphishingmalwaresecurity More from WIRED Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment The transaction, visible on Bitcoin's blockchain, suggests the victim of one of the worst ransomware attacks in years may have paid a very large ransom. Andy Greenberg A Global Police Operation Just Took Down the Notorious LockBit Ransomware Gang A Global Police Operation Just Took Down the Notorious LockBit Ransomware Gang LockBit's website, infrastructure, and data have been seized by law enforcement--striking a huge blow against one of the world's most prolific ransomware groups. Matt Burgess How to Turn Off Facebook's Two-Factor Authentication Change How to Turn Off Facebook's Two-Factor Authentication Change With Meta's updated 2FA process, the company now automatically trusts devices you often use. Reece Rogers Russia Attacked Ukraine's Power Grid at Least 66 Times to 'Freeze It Into Submission' Russia Attacked Ukraine's Power Grid at Least 66 Times to 'Freeze It Into Submission' Several of the strikes occurred far from the front lines of the conflict, indicating possible war crimes. Researchers say the attacks likely had devastating impacts on civilians. Vittoria Elliott A Mysterious Leak Exposed Chinese Hacking Secrets A Mysterious Leak Exposed Chinese Hacking Secrets Plus: Scammers try to dupe Apple with 5,000 fake iPhones, Avast gets fined for selling browsing data, and researchers figure out how to clone fingerprints from your phone screen. Matt Burgess Russian Hackers Stole Microsoft Source Code&-and the Attack Isn't Over Russian Hackers Stole Microsoft Source Code--and the Attack Isn't Over Plus: An ex-Google engineer gets arrested for allegedly stealing trade secrets, hackers breach the top US cybersecurity agency, and X's new feature exposes sensitive user data. Dhruv Mehrotra The Mysterious Case of the Missing Trump Trial Ransomware Leak The Mysterious Case of the Missing Trump Trial Ransomware Leak The notorious LockBit gang promised a Georgia court leak "that could affect the upcoming US election." It didn't materialize--but the story may not be over yet. Andy Greenberg Binance's Top Crypto Crime Investigator Is Being Detained in Nigeria Binance's Top Crypto Crime Investigator Is Being Detained in Nigeria Tigran Gambaryan, a former crypto-focused US federal agent, and a second Binance executive, Nadeem Anjarwalla, have been held in Abuja without passports for two weeks. Andy Greenberg WIRED WIRED is where tomorrow is realized. It is the essential source of information and ideas that make sense of a world in constant transformation. The WIRED conversation illuminates how technology is changing every aspect of our lives--from culture to business, science to design. The breakthroughs and innovations that we uncover lead to new ways of thinking, new connections, and new industries. More From WIRED * Subscribe * Newsletters * FAQ * WIRED Staff * Editorial Standards * Archive * RSS * Accessibility Help Reviews and Guides * Reviews * Buying Guides * Coupons * Mattresses * Electric Bikes * Fitness Trackers * Streaming Guides * Advertise * Contact Us * Customer Care * Jobs * Press Center * Conde Nast Store * User Agreement * Privacy Policy & Cookie Statement * Your California Privacy Rights (c) 2024 Conde Nast. All rights reserved. WIRED may earn a portion of sales from products that are purchased through our site as part of our Affiliate Partnerships with retailers. The material on this site may not be reproduced, distributed, transmitted, cached or otherwise used, except with the prior written permission of Conde Nast. Ad Choices Select international site United States * Italia * Japon * Czech Republic & Slovakia * * * * * *