Online safety & scams

Crypto Investment and Pig-Butchering Scams: Warning Signs and What to Do

How a fake online relationship becomes a crypto investment scam, the warning signs to look for, and what to do if you already sent money, with FTC and FBI reporting steps.

By EpiFive Editorial TeamReviewed/updated 9 min readHow we check articles
On this page

A pig-butchering scam is an investment fraud that starts as a friendly or romantic conversation with a stranger and ends with you sending cryptocurrency to a fake trading site or app. The signs are an unexpected contact who moves the chat to another app, talks up their investing success, promises profits with no risk, and blocks you from withdrawing unless you pay more. If you have not sent money, stop replying. If you have, contact your bank or exchange immediately and report it as described below.

Who this is for and what you will have at the end

This guide is for anyone who has been contacted by someone online who is now talking about crypto, or who has already invested and cannot withdraw. You will be able to recognize the stages of the scam, check an investment pitch against the red flags, take the right steps in the first hour after paying, and report it to the agencies that handle it. The article describes how the scam works only so you can spot it. It does not give a script for running one.

This is general consumer guidance based on FTC and FBI pages, checked October 31, 2026. It is not legal or financial advice.

How the scam works

The FBI's Internet Crime Complaint Center (IC3) describes the scheme this way. Criminals, often based overseas, use fake identities to contact people through dating apps, social media, professional networking sites or encrypted messaging apps. They build trust, often as a romance or confidence scam, then bring up cryptocurrency and claim expertise in it or ties to experts.

You are then directed to a fraudulent investment website or app that the criminals control. It shows fake profits, and you are pressured to invest more. When you try to withdraw, you are told to pay fees or taxes first. Even after paying, victims do not get their money back. IC3 notes newer variants, including liquidity mining and play-to-earn schemes.

The usual stages

StageWhat it looks like
ContactAn unexpected message, a friend request, a dating-app match or a social media message
TrustDaily chats, personal stories and photos, and a push to move to another messaging app
IntroductionThe contact mentions making money with crypto, or an "investment manager" or "mentor"
Small winA small deposit appears to grow quickly on a platform the contact recommends
Bigger depositsYou are encouraged to invest more, sometimes by borrowing or cashing out savings
Blocked exitWithdrawals fail, or you are asked for fees, taxes or "verification" payments

The FTC's guidance on romance scams matches the early stages: scammers want to move off the platform quickly, claim to be far away, refuse to meet in person, and eventually ask for money, including help with cryptocurrency investing.

Warning signs to check against

The FTC's cryptocurrency guidance lists signs of an investment scam. Use these as a checklist:

  • Contact out of the blue. A so-called investment manager reaches out unprompted and says they will grow your money if you buy crypto and transfer it to their online account.
  • Guaranteed profits. The FTC says nobody can make guarantees of zero risk or big returns, and that a celebrity endorsement or testimonials do not prove legitimacy.
  • Dating mixed with investing. The FTC's advice is "Never mix online dating and investment advice." If someone you met on a dating site or app asks you to send crypto or money, or offers investment advice, treat them as a scammer.
  • Vague explanations. A legitimate advisor can explain how the investment works and where your money goes. Big claims without details are a warning sign.
  • Withdrawal problems. You cannot withdraw, or can only do so after paying high fees.
  • Unfamiliar platform. The site or app is not one you found independently, and the contact walked you through installing it.

IC3 also warns, in a 2025 alert about hosting infrastructure used by these frauds, that an HTTPS or green lock icon does not mean a specific website is trustworthy. A padlock only means the connection is encrypted.

Messaging apps and the move off-platform

IC3 lists encrypted messaging apps, such as WhatsApp, among the channels used for first contact. The app itself is not the problem. The warning sign is a new contact quickly pushing to chat elsewhere and then raising money.

If you have not sent money

  1. Stop replying. You do not need to confront the person.
  2. Do not share financial or personal information. IC3 advises not to give unknown contacts such information or send them money.
  3. Verify independently. IC3 recommends verifying any investment opportunity and any cryptocurrency website or app before using it. Do not rely only on advice from someone you met online.
  4. Report the contact. Use the report function in the app where it started, and consider reporting to the FTC even without a loss.
  5. Tell someone you trust. The FTC suggests talking to friends or family, who may spot warning signs you have missed.

If you already sent money

Speed matters, but be realistic: crypto payments are usually not reversible. The FTC says you typically will not get the money back. These steps give you the best chance of limiting the damage.

In the first hour

  1. Stop sending money. IC3 advises victims who suspect a scam not to pay further fees or taxes to withdraw funds.
  2. Contact your bank, card company or the exchange you used. The FTC's romance scam page says to contact the company or your bank right away, tell them you paid a scammer, and ask for a refund. That applies whether you paid by wire, card, gift card or cryptocurrency.
  3. Stop all contact with the person.
  4. Keep records. Save messages, usernames, phone numbers, wallet addresses, website addresses, transaction IDs and screenshots before the scammer deletes anything. IC3 says reports with transaction details are most useful.
  5. Secure your accounts. If you installed an app they sent or shared screens, change passwords for your email, bank and exchange accounts from a device you trust. If remote access was involved, see what to do about a fake tech support pop-up.

Do not pay a recovery service

After a loss, you may be contacted by someone offering to recover your funds. The FBI's warning is direct: do not pay for services that claim to be able to recover lost funds. Treat unsolicited offers, including those in the same messaging app, as a second scam.

Where to report

The FTC lists these places for fraud and suspicious activity involving cryptocurrency:

Agency or companyWhereNotes
Federal Trade CommissionReportFraud.ftc.govGeneral fraud reports
Commodity Futures Trading CommissionCFTC.gov/complaintCommodities and derivatives fraud
Securities and Exchange Commissionsec.gov/tcrInvestment and securities fraud
FBI Internet Crime Complaint Centeric3.gov/Home/FileComplaintInclude transaction details
The exchange you usedIts support or fraud teamThe FTC lists the exchange as a place to report

You can report to more than one. Also notify the app, dating site or platform where the contact began. If you are unsure which agency fits, start with the FTC and IC3.

For payments that went through a payment app rather than crypto, see Zelle, Venmo and Cash App scams: what to do.

Helping a family member or friend

People caught in this scam are often embarrassed or have been told to keep it secret. A few approaches help:

  • Ask neutral questions: where the money is going, whether they can withdraw, and how they found the platform.
  • Offer to look up the site together, and to check whether the registered business exists with the agencies above.
  • Avoid blame. The scheme is built on weeks of attention and trust, and shame stops people from reporting.
  • Help them follow the first-hour steps and file reports.

Troubleshooting common situations

The site shows large profits but withdrawals fail

The balance on the screen is controlled by the operators. IC3 describes fake profits shown to victims and demands for fees or taxes at the point of withdrawal. Do not pay more. Stop and report.

They offer to teach you with a small amount first

A small deposit that appears to grow, or a small withdrawal that succeeds, is a tactic to build confidence. The FTC's guidance on guaranteed returns applies: nobody can guarantee profits.

The contact says you are the only one who can get in on it

Pressure to act quickly or secretly is a reason to stop. A legitimate investment can survive you taking a few days to verify it.

You are not sure whether you are being scammed

Pause deposits, ask the contact to explain exactly how the money is invested and where it is held, and search for the platform's name together with the word "scam" on independent sources. If the answers are vague or the person gets upset about your questions, treat it as a scam.

Checklist

  • Never send money, crypto or gift cards to someone you only know online.
  • Treat any online contact who brings up crypto investing as a red flag, especially after dating or friendly chat.
  • Distrust guaranteed returns and websites or apps you were told to install.
  • If asked for fees or taxes to withdraw, stop paying.
  • If you paid, call your bank or exchange, keep records, and report to the FTC, IC3, CFTC and SEC.
  • Never pay anyone who offers to recover your money for a fee.

References

Questions people ask

What is a pig-butchering scam?

It is a long-running investment fraud. A stranger builds trust over messages, often starting as a friendship or romance, then steers you to a fake crypto investment site or app they control. The FBI describes it as beginning with a romance or confidence scam before cryptocurrency comes up.

Can I get my money back after a crypto investment scam?

Crypto payments are usually not reversible, so recovery is often hard. The FTC says you typically will not get the money back. Contact your bank or the exchange you used right away and report the scam, but do not pay anyone who offers to recover the funds for a fee.

Why does the site say I must pay a fee to withdraw my profits?

That is a known part of the scheme. The FBI says victims who try to withdraw are told to pay fees or taxes and still do not get their money. Do not pay more, because the profits shown on the site are fake.

Where do I report a crypto investment scam?

The FTC lists several places: ReportFraud.ftc.gov, the CFTC at CFTC.gov/complaint, the SEC at sec.gov/tcr, the FBI's IC3 at ic3.gov/Home/FileComplaint, and the crypto exchange you used to send the money.

FTCFBI IC3Crypto scamsWhatsApp
  1. Fake Norton, McAfee or Geek Squad Renewal Invoice Emails: What to Do

    Got an email or text saying you were charged for Norton, McAfee or Geek Squad? Learn how to check it safely, what to do if you called, paid or gave access, and where to report.

  2. Tax Season Scams 2027: IRS Impersonation, Phishing and How to Verify

    Get ready for the 2027 filing season: the scams the IRS and FTC warn about, the protective steps to take before you file, and how to verify any refund text, call, preparer or notice.

  3. Online Marketplace Scams: Sell Safely on Facebook and Craigslist

    Avoid overpayment, fake payment and fake-check scams when selling used items on Facebook Marketplace, OfferUp or Craigslist, and learn what to do if one succeeds.

  4. Social Security Scam Calls and Texts: What SSA Will and Won't Do

    Spot fake Social Security Administration calls, texts and emails by what SSA says it never does, and learn how to report them to the SSA OIG and the FTC.

  5. Credit Freeze vs Fraud Alert: How to Place Each at All Three US Bureaus

    Understand the difference between a credit freeze and a fraud alert, which one to use after a data breach, and how to place each at Equifax, Experian and TransUnion for free.

  6. IRS Impersonation Scams by Text, Email and Call: How to Spot and Report

    Check whether a text, email, call or letter is really from the IRS, learn the warning signs, and report impersonators to the right agency, including what to do if you already paid or shared your SSN.