Skip to content

Crypto Investment ('Pig Butchering') Escroquerie na Faux Agent ya Récupération Fraude

Mituya ya mbalakaka ekeseni na mikili. Lokasa oyo esaleli 911, nimero ya États-Unis mpe Canada. Bikólo mosusu mingi esalelaka 112, 999, to motángo mosusu. Luka nimero ya mboka na yo.

Kososola ete plateforme ya liquidité-mining ya cryptocurrency en ligne, futures ya or, devises (Forex), to finance décentralisée (DeFi) esika otie ba épargne na yo ezali vraiment Sha Zhu Pan ("Pig Butchering") escroquerie ezali moko ya ba crises financiers mpe emotionnels oyo ebebisaka mingi mutu akoki kokutana na yango. Esalemi na ba syndicats transnationales ya crime organisé na Asie du Sud-Est mobimba mpe na mokili mobimba, ba escrocs oyo elekisaka ba poso to basanza na kotonga boyokani ya bolingo, ya boninga, to ya mentorship oyo batyelaka motema na nzela ya WhatsApp, Telegram, LinkedIn, Instagram, Dating Apps, to "texte ya nimero ya mabe na mbalakaka" yambo ya kotambwisa yo na appli ya mombongo ya lokuta to contrat ya mayele ya Web3 ya mabe.

Moment définitif ya escroquerie ya Pig Butchering esalemaka tango omeki kobimisa solde ya compte na yo oyo elakisami, mbala mingi elakisaka ba centaines de milliers de dollars na ba profits fabricats, mpe plateforme e congeler retrait na yo, esengaki que o filer liboso 15 à 30 pour cent na « impôts de revenu personnel » ya libanda, « dépôts ya vérification ya AML », « frais ya dégagement ya gaz blocchain », to « score ya crédit upgrades" mpo na kobimisa mbongo na yo. Buku oyo epesi yo malako ya triage ya mbala moko, ya polele lokola cristal mpo na kopekisa makila ya mosolo, kolongola ndingisa ya drain ya smart-contract en direct na portefeuille na yo ya komibatela, kosala ba demandes ya congelation ya blockchain actionable na ba policiers mpe ba émetteurs ya stablecoin (Tether mpe Circle), mpe komibatela na ba Fake Crypto Recovery Agent ("Second Scam") ba vultures oyo azali ko cibler ba victimes mikolo sima.

Sala boye sikoyo

  1. TIKA kotinda mbongo mosusu, futa ata moke te "impôt," "frais de retrait," "dépôt de sécurité AML," "frais de gaz," to "frais de décongelé de compte" mpo na kofungola solde congelé. Na 100 pour cent ya ba courtiers réglementés légitimes mpe ba échanges ya cryptocurrency (lokola Coinbase, Kraken, Gemini, Fidelity, to Interactive Brokers), ba frais nionso ya transaction oyo ekoki kosalelama to ba retenus ya impôts elongolami directement na solde oyo ezali na kati ya compte na yo. Plateforme nionso oyo ezali kosenga ete otinda ba fonds ya sika ya poche na yo na banque to portefeuille externe mpo na "déverrouillage" solde oyo ezali ezali simulation ya 100 pour cent ya fraudule. Bamilio ya badolare oyo emonisami na écran na yo ezali banimero ya lokuta ya HTML oyo etambwisami na base de données ya sima ya mosáli; kofuta "mpako ya 20 pour cent" ekosala kaka ete ozwa excuse ya sika ("frais ya audit transfrontalier") kino okozala na ba dollars zéro.
  2. Soki okangaki portefeuille ya bobateli yo moko (Potefeuille ya Coinbase, MetaMask, Portefeuille ya Confiance, Phantom, Rabby, to Ledger) na DApp ya "Liquidity Mining / AI Yield Node", elongolaka mbala moko ba Approvals nionso ya Jeton Illimité (Approve / Permit2) TO kokende na misolo oyo etikali na portefeuille na yo na fraze ya sika ya mboto. Ba escroqueries mingi ya Pig Butchering eyebisaka yo que misolo na yo ezali "na bokengi mpo ete etikaka jamais Portefeuille na yo moko ya Coinbase to Portefeuille ya Trust." En réalité, ko cliquer "Join Mining Pool" to "Receive Voucher" esalaki que o signer ERC-20 / TRC-20 ya mabe increaseAllowance to mpe Approve(Unlimited) smart contract permission oyo e permettre contrat ya escroc e balabala 100 pour cent ya USDT/USDC oyo efandi na kati ya portefeuille na yo tango nionso balingi. Kokende kotala revoke.cash mbala moko to bolanda ya biso cryptocurrency portefeuille drain na compromis ya phrase ya mboto kokamba.
  3. Bobatela Hash ya Transaction ya blockchain moko na moko (TxID), Addresse ya Portefeuille ya Dépôt, URL, mpe journal ya chat WhatsApp/Telegram AVANT o confronter to o bloquer escroc. ​​Moment oyo okofunda escroqueur na fraude, bako cliquer "Delete Chat for Both Sides" na Telegram to WhatsApp mpe bakokanga site internet ya commerce ya lokuta, bako effacer ba preuves oyo osengeli na yango pona ba deductions ya ba pertes ya ba enforceurs ya mibeko pe ya ba casualités ya impôts. Salelá telefone to ordinatɛrɛ ya mibale mpo na kokanga fɔtɔ mpe kotinda lisolo mobimba ya kosolola na mikili mosusu, kamata lisolo ya mbongo oyo otye na ekran oyo ezali kolakisa alɛtrɛ 42 ya sikisiki (0x...), bilembo 34 (T...), to bc1... ba adresse ya portefeuille ya destination, mpe kosala kopi ya Transaction Hash nionso ya 64 caractères (TxID) uta na échange na yo ya solo (Coinbase, Kraken, Binance, Crypto.com).
  4. Soki otindaki transfert ya bancaire na nzela ya telefone, transfert ACH, to kofuta carte de crédit/débit na kati ya ngonga 24 kino 72 oyo eleki, benga mbala moko Departema ya Fraud ya fil ya banque na yo mpo na kosenga congelation ya urgence ya SWIFT Recall / FinCEN Rapid Response. Atako ba transactions ya blockchain irreversible ekoki kozongisama sima te na banque na yo, ba transferts ya banki na banque mpo na ko shell ba comptes ya compagnie (mingi mingi oyo ebombami lokola "import/export," "bijoux," to "consulting" LLCs na Hong Kong, New York, Londres, to Singapour) ekoki ntango mosusu kokangama na milɔngɔ ya banki ya ba correspondants soki bazongisaki yango na boumeli ya ngonga 24 kino 48. Tala ya biso violation ya compte bancaire na guide ya rappel ya fil.
  5. JAMAIS ko employer "Crypto Recovery Agency," "Blockchain Ethical Hacker," to "Cyber Refund Law Firm" oyo esalaka piblisite na Google, ba commentaires ya YouTube, Reddit, Telegram, to Instagram. Société privée to mutu nionso oyo azali koloba ete akoki "ko pirater portefeuille ya escroquerie" to "kozongisa USDT na yo oyo bayibi na mbongo ya liboso to retainer" ezali ko diriger Recovery Room Scam (mbala mingi esalemaka na exactement syndicat moko oyo eyibaki mbongo na yo en premier lieu). Kaka ba agences ya mibeko ya gouvernement oyo balapi ndayi oyo ezali na ba mandats judiciaires ya bokangami nde bakoki kopesa malako na Tether (USDT), Libungutulu (USDC), to ba échanges centralisés mpo na ko congeler mpe ko tumba/kozongisa misolo oyo bayibaki.
  6. Priotiser santé mentale na yo mpe sécurité personnelle sikoyo. Ba syndicats ya escroquerie transnationales esalelaka ba équipes ya ba manipulateurs psychologiques oyo ba former pona ko induire soni, isolement, pe désespoir aiguë financier. Kobosana te ete minganga, ba ingénieurs logiciels, ba avocats, bakambi ya banki, mpe bato oyo bazwi pansiɔ bakweaka na mbeba wana ya monene ya baizini mokolo na mokolo. Soki yo to molingami na yo ozali kokutana na kozanga elikya makasi to makanisi ya komizokisa, benga mbala moko moto ya libota oyo otyelaka motema mpe benga na ligne ya crise ya esika ofandi (na Etats-Unis mpe Canada, benga to tinda mesaje 988 mpo na Suicide & Crisis Lifeline; na Royaume-Uni, benga 111 to Samaritans na 116 123; to benga nimero ya urgence ya esika ofandi na 911, 112, to 999, tala nyonso banimero ya mbalakaka).

Pourquoi 'Small Test Withdrawal' esalaki na ebandeli ya escroquerie

Pene na moto nyonso oyo azwi mpasi na escroquerie ya Pig Butchering atuni boye: "Ndenge nini plateforme ekoki kozala ya lokuta ntango etikaki ngai nabimisa 500 dollars to 2.000 dollars mbala moko na compte bancaire na ngai ya solo na boumeli ya poso ya liboso?" Kolongola wana ya liboso ezali phase ya "baiting" délibéré ya script ya escroquerie. Tango omeki mbala ya liboso plateforme na 1.000 dollars, ba escrocs batindelaka yo manuellement 1.200 dollars ya vrai USDT libanda ya portefeuille na bango ya petite-cash opérationnel mpo na kondimisa yo que bouton ya retrait esalaka mpe mpo na ko désarmer scepticisme na yo. Soki mbongo wana ya dolare 200 endimisi yo olongola mbongo na yo ya 401(k), ya mbongo oyo okozwa na ndako, to mbongo oyo obombaki na bomoi mpe otya dolare 50 000 to 250 000, motambo yango ekangami mpe kobimisa mbongo mosusu te.

Crypto investissement scam & DeFi drain nzete ya décision ya triage ya urgence

flowchart TD
    Root["Ba suspecter Escroquerie ya Investissement Crypto (‘Boluka ngulu’) to Retrait congelé"] --> StopPay["RULE 1: Stop All Transfers Immediately, Never Pay 'Taxes', 'Gas', or 'AML Verification Fees'"]

    StopPay --> ModeCheck{"How Were Your Funds Transferred or Connected?"}

    ModeCheck -->|"Option A: Connected Self-Custody Wallet (Coinbase Wallet, Trust Wallet, MetaMask) to a 'Mining / Yield' DApp"| WalletRescue["1. Open revoke.cash immediately & revoke all Unlimited USDT/USDC Token Approvals<br/>2. If USDT is still showing in your own wallet address, immediately transfer it to a brand-new hardware/software wallet before the scammer sweeps it"]

    ModeCheck -->|"Option B: Sent Crypto (BTC, ETH, USDT, USDC) to a Deposit Address on a Fake Exchange App/Website"| TraceFreeze["1. Export all TxID hashes & Scammer Deposit Addresses BEFORE blocking scammer<br/>2. Trace hops on Etherscan / Tronscan / Breadcrumbs to find the Exchange Deposit Consolidation Address<br/>3. File FBI IC3 (US) / Action Fraud (UK) report + notify Tether/Circle & Destination Exchange Compliance"]

    ModeCheck -->|"Option C: Sent Bank Wire (SWIFT / Fedwire / SEPA / Faster Payments) within Last 72 Hours"| BankRecall["Call Bank Wire Fraud Dept Immediately: Request Emergency SWIFT gpi Stop-and-Recall & FinCEN Rapid Response Referral"]

    WalletRescue --> DeviceCheck["Audit Computer & Phone: Uninstall AnyDesk/TeamViewer, Delete Rogue iOS TestFlight / Enterprise Profiles, Rotate Exchange Passwords"]
    TraceFreeze --> DeviceCheck
    BankRecall --> DeviceCheck

Anatomy of the 3 technical variants of "Pig Butchering" platforms

Understanding which technical mechanism the syndicate used against you determines whether any funds are still sitting inside your own wallet waiting to be rescued right now:

Scam Architecture Variant How the Victim Experiences It What Actually Happens on the Blockchain Can You Rescue Remaining Funds Right Now?
1.1. Fake Centralized Exchange / Trading App (Ezali na ngambo na nzela ya Apple TestFlight, Profil ya Enterprise ya iOS, WebClip ya lokuta, to domaine spoofed lokola coin-pro-vip[.]com) . Osali compte na site internet to appli mobile moko ya kitoko, osala copie ya adresse ya dépôt (0x... to mpe T...), mpe tinda crypto uta na compte na yo ya solo ya Coinbase/Kraken. Na écran, ozali kotala ba tableaux ya bougies en direct mpe ozali ko exécuter ba commerces ya 60 secondes "noeuds / options binaire / futurs d'or" oyo elongi 20% chaque fois. Ba tableaux ya commerce na solde ya compte na yo ya $300,000 ezali 100% ya ba faux entrées ya base de données. Na 3 minutes ya dépôt na yo ya solo ekomi na adresse ya portefeuille ya escroc, script automatique e balabala USDT/BTC na yo ya solo libanda na portefeuille central ya lavage. Retrait ya auto-aide ezali possible te na app ya lokuta. Esengeli o tracer ba sauts ya blockchain (TxID) kobanda na adresse na yo ya dépôt ya liboso tii na échange hors rampe mpe tinda demande ya congelation ya ba policiers.
2.1.1. Malicious Web3 DeFi "Liquidity Mining / Smart Pool" Drainer (Ezwami na kati ya navigateur intégré ya Coinbase Portefeuille, Portefeuille de confiance, MetaMask, to SafePal) Mokosi ayebisi yo: "Esengeli ata moke te kotinda mbongo na moto. Bomba kaka USDT na yo na kati ya Portefeuille officiel na yo moko ya Coinbase, fungola navigateur DApp, kende na lien oyo ya piscine ya mine, mpe finá na 'Receive Voucher / Join Node' mpo na kozwa 1,5% mokolo na mokolo." Kofina "Receive Voucher" to "Confirm" ebimaki transaction ya smart-contract oyo ezalaki vraiment Approve(Spender: ScammerContract, Amount: Unlimited USDT) **. Na ebandeli, escroqueur atikaka USDT na yo na portefeuille na yo mpe atindelaka yo ba petites payouts ya mokolo na mokolo mpo obakisa mbongo mingi; mbala moko solde ya portefeuille na yo ekomi na sommet, contrat na bango ebengi transferFrom() pe ezo drainer 100% ya USDT na yo na 1 seconde. OUI, SOKI ba bendaki nanu déclencheur te: Soki USDT na yo ya solo efandi kaka na adresse na yo moko ya Coinbase Wallet / Trust Wallet sikoyo, mbala moko kende na revoke.cash mpo na kolongola ndingisa ya jeton, TO kotinda mbala moko USDT na yo libanda ya portefeuille wana na compte na yo ya solo ya Coinbase Exchange liboso ete escroqueur ayeba.
3. Drain ya banque/échange assistée à accès à distance (Escroqueur a guider yo na screen-share to AnyDesk / TeamViewer / Zoom) "Mosungi" to "Mokambi ya compte VIP" esalisaka yo obongisa Kraken, Coinbase, to fil ya banque na yo na nzela ya partage ya écran, to a installer esaleli ya lisungi ya mosika na ordinateur portable/telephone na yo. Moto oyo azali kosala escroquerie akanga ba cookies ya session na yo, ba touches API, to ba codes 2FA, to atalaka écran na yo tango azali kosala liste blanche adresse na bango ya retrait na compte na yo ya échange légitime. Mbala moko kokata ordinatɛrɛ na Wi-Fi, kolongola bisaleli ya mosika (tala ya biso escroquerie ya soutien tech na guide ya ko longola AnyDesk), mpe kanga compte na yo ya solo ya échange.

Etape 1: Kobatela ba preuves forensiques (Sala yango AVANT o confronter escroqueur) .

Erreur unique ya munene oyo ba victimes basalaka ezali kotindela escroqueur ba messages "Nayebi que ozali escroqueur, zongisa ngai mbongo na ngai to nazali kobenga FBI." Instant otindi message wana, opérateur ya syndicat a cliquer bouton moko oyo e effacer thread ya Telegram/WhatsApp na ba téléphones nionso mibale mpe e désactiver login na yo na site ya commerce ya lokuta.

Yambo ya koloba liloba moko na escroc, sala lokola ozali "kosala na banque na yo mpo na kosangisa misolo ya mpako/vérification" na boumeli ya miniti 30 ntango ozali kobimisa ensemble oyo ya bilembeteli ya sikisiki:

  1. Exporter Hash nionso ya Transaction ya Blockchain (TxID) mpe Addresse ya Portefeuille oyo euti na échangeur na yo ya SOLO:
  2. Kota na échangeur ya cryptocurrency légitime to portefeuille oyo osalelaki mpo na kosomba mpe kotinda crypto (lokola Coinbase, Kraken, Robinhood, Crypto.com, Gemini, Binance, Cash App, to PayPal).
  3. Fungola Histoire ya Transaction / Retrait na yo pona transfert nionso otindaki na plateforme ya escroquerie.
  4. Kopi mpe kobomba lokola makomi ya pɛtɛɛ (kaka ba captures d’écran te, mpo balukiluki basengeli na ba chaînes alphanumériques oyo ekoki ko coller na copie):
    • Mokolo ya sikisiki ya UTC, ngonga, mpe Dollar/Crypto Montant ya retrait moko na moko.
    • Réseau ya ba biens & Blockchain (e.g., . USDT on Tron TRC-20, . USDC on Ethereum ERC-20, to Bitcoin BTC).
    • Adresse ya Portefeuille na yo ya kotinda.
    • Adresse ya Portefeuille ya Boyambi / Botiami ya Mokosi (e.g., 0x71C... to mpe TX9k...).
    • Hash ya Transaction hexadécimal ya bilembo 64 (TxID / . TxHash) mpo na transfert moko na moko.
  5. Screensshot mpe screen-enregistrer ya Fake Trading App / Site internet tango okoki kaka kokota:
  6. Enregistrer vidéo ya smartphone oyo ezali kolandana oyo ezali kolakisa:
    • URL / kombo ya domaine ya sikisiki ya plateforme ya lokuta na barre ya adresse ya navigateur.
    • Faux Compte Dashboard / numéro UID na yo, faux histoire ya commerce, mpe écran "Dépôt" oyo ezali kolakisa adresse ya portefeuille plateforme oyo bapesaki yo.
    • Fenêtre ya chat "Customer Service / VIP Support" na kati ya plateforme esika ba sengaka 15 à 30% ya impôt to frais ya AML (surtout adresse nionso ya portefeuille oyo bapesaka pona kofuta "impôt," lokola portefeuille wana ezali activement surveillé na syndicat lelo).
  7. Exporter archive ya chat ya WhatsApp, Telegram, to Signal mobimba:
  8. Na WhatsApp: Fungola chat na escroc -> finga kombo ya profil na bango na likolo -> défiler na se pe finá Exporter Chat -> Inclure Media -> bomba ba... .zip archive na ordinateur na yo to na Google Drive/iCloud. Lisusu capture d'écran ya numéro ya téléphone na bango, ba photos ya profil, pe ba notes nionso ya mongongo to ba enregistrements ya ba appels vidéo.
  9. On Telegram: Open Telegram Desktop on a computer -> open the chat -> click the three dots (⋮) in the top-right corner -> Export chat history -> check all boxes (Photos, Voice messages, Video messages) and export as HTML/JSON. Also click their profile to check if their numeric Telegram User ID is visible (unlike @usernames which scammers change daily, the numeric Telegram User ID is permanent).

Step 2: How to trace your stolen funds on the blockchain and request an emergency Tether (USDT) / Exchange freeze

Unlike physical cash stuffed in a suitcase, every Bitcoin (BTC), Ethereum (ETH / . ERC-20), and Tron (TRX / . TRC-20) transaction is permanently recorded on a public, immutable global ledger. Even sophisticated laundering syndicates must eventually move stolen funds through one of two chokepoints where assets can be frozen by law enforcement:

Chokepoint 1: Centralized Stablecoin Smart Contracts (Tether USDT mpe Circle USDC) .

Over 80 percent of Pig Butchering scams demand payment in USDT (Tether) on the Tron (TRC-20) or Ethereum (ERC-20) blockchain, or USDC (Circle). - What most victims do not know is that both the Tether (USDT) mpe Cercle (USDC) ba contrats intelligents ezalaka na fonction administrative intégrée oyo babengaka ** .addBlackList(address) / . freeze(address)** **. - Tango Tether Limited to Circle ezui demande ya congelation ya noki noki ya ba policiers oyo elakisaka que bayibi USDT to mpe USDC ezali kofanda na kati ya adresse ya portefeuille ya syndicat oyo ezali na hébergement te (0x... to mpe T...), Tether can cryptographically freeze that wallet address on the blockchain so the scammer can never move or spend the USDT, and upon court forfeiture order, Tether can burn (destroyBlackFunds) ba jetons congelés na portefeuille ya escroc mpe remplacement ya menthe USDT directement kozonga na victime.

Point d’étouffement 2: Portefeuilles ya consolidation ya dépôt d’échange centralisé (CEX).

Pona ko convertir bayibi BTC, . ETH, to USDT na mbongo ya fiat (Yuan chinois, Dollars américains, Baht thaïlandais, to Dirhams ya Emirats Arabes Unis), ba escrocs ba transférer misolo na nzela ya ba portefeuilles "hop" intermédiaires 2 à 6 avant ya ko déposer yango na Adresse ya Dépôt na Échange Centralisé ya munene (lokola Binance, OKX, HTX/Huobi, Bybit, Gate.io, KuCoin, to Kraken).

How to trace your TxID na miniti 5 na kosalelaka ba explorateurs ya bloc public ya ofele

  1. Kola Hash ya Transaction na yo (TxID) na kati ya explorateur ya bloc officiel pona réseau wana:
  2. Ethereum (ETH, . USDT-ERC20, . USDC): Visit etherscan.io ** .
  3. Tron (TRX, . USDT-TRC20): Visit tronscan.org ** .
  4. Bitcoin (BTC): Visit mempool.space or blockchair.com ** .
  5. Visual Multi-Hop Graph Tracer (Free tier): Visit breadcrumbs.app or metasleuth.io and paste your scammer deposit address to generate an automatic visual flow diagram showing every hop.
  6. Follow the hops forward from your Deposit Address:
  7. Click on the Scammer's Deposit Address (To: field) in your original transaction, then click the Token Transfers (ERC-20 / TRC-20) tab to see where the scammer moved your tokens next.
  8. Follow the large outbound transfers 1 to 4 hops forward until you see either:
    • A high-balance "Holding / Piggybank" Wallet: An unlabelled wallet currently holding $50,000 to $10,000,000+ in static USDT to mpe USDC (prime target for an immediate Tether / Circle Smart-Contract Freeze).
    • A Labeled Exchange Deposit Address: On Etherscan or Tronscan, the final destination address will suddenly show a public nametag like Binance 14, OKX 7, HTX 2, to ** .Bybit**. The wallet one step immediately before (From:) that labeled exchange hot wallet is the scammer's personal Customer Deposit Address at that exchange (which corresponds to an internal account with KYC documents, IP logs, and freezable funds).

Step 3: Official law enforcement & exchange reporting checklist (In exact priority order)

Law enforcement agencies receive thousands of vague complaints daily; complaints that merely say "I lost $80,000 to a girl named Sophia on WhatsApp" get queued for months. In contrast, a structured report titled "URGENT LIVE CRYPTO FREEZE REQUEST: $80,000 USDT-TRC20 Currently Sitting in Unhosted Wallet [Address] / Deposited to Binance via TxID [Hash]" gives cybercrime agents something they can freeze the same afternoon.

1. United States Victims

  • FBI Internet Crime Complaint Center (ic3.gov): File an immediate report at https://www.ic3.gov. Put all Transaction Hashes (TxIDs), Scammer Wallet Addresses, and any Identified Destination Exchange (e.g., Binance/OKX/Tether) in the dedicated financial transaction fields so the FBI's Recovery Asset Team (RAT) and Virtual Asset Unit (VAU) automated parsers index the wallet addresses immediately.
  • Rapport ya Bureau ya Terrain & Police Local ya Service Secret ya Etats-Unis (USSS): Benga U.S. Biro ya terrain ya Force de travail ya Cyber ​​Fraud ya Service Secret directement na téléphone (etangami na secretservice.gov/contact/field-offices) MPE kotambola na departema ya police municipale ya esika ofandi mpo na kozwa Numéro ya Rapport ya Incident ya Police ya officiel (okozala na mposa ya nimero oyo ya likambo ya police mpo na ko déclencher congelation ya urgence na Binance, OKX, to Tether).
  • Commission ya commerce ya ba futurs ya biloko (CFTC) & SEC: Kosala toli ya mopesi sango/ya bokosi na cftc.gov/complaint mpe sec.gov/tcr.

2. Bato oyo bazwaki mpasi na Royaume-Uni, Canada, Union européenne, mpe Australie

  • Royaume-Uni: Kosala rapport ya mbala moko na Action Fraud (actionfraud.police.uk to kobenga 0300 123 2040) mpe kosenga Numéro ya Référence ya mbeba ya NFRC (Buree nationale ya renseignements na fraude). Soki ba transferts bancaires esalemaki na kati ya Royaume-Uni, benga mibeko ya Modèle ya kozongisa mbongo na bokosi / Modèle ya kozongisa mbongo oyo ekoki kosalema na banque na yo mbala moko.
  • Canada: Kosala rapport ya police na Unité ya ba crimes financiers ya service ya police ya esika ofandi MPE tinda ba adresse nionso ya portefeuille na Centre anti-fraude canadien (antifraudcentre-centreantifraude.ca).
  • Australie: Pesa lapolo mbala moko na nzela ya ReportCyber ​​(cyber.gov.au) mpe Centre national anti-escroquerie (scamwatch.gov.au), and contact your bank's scam escalation team.
  • European Union: File a criminal complaint (Anzeige / . Plainte) at your local national police station to obtain a case reference number for Europol / national cyber units.

3. Direct Notification to Destination Exchanges & Stablecoin Issuers (With Your Police Case Number)

Once you have your Police Report Number and IC3 Confirmation Number, submit a direct Victim Freeze Support Ticket to the compliance department of the exchange where your traced funds landed (or to Chainalysis / TRM Labs public victim portals): - Binance Law Enforcement / Victim Freeze Request: Open a support chat at binance.com -> Report Stolen Funds -> provide the exact Deposit TxID, the Binance Deposit Address, and your Police Report + Officer Contact Email so Binance places a temporary 7-day courtesy compliance hold while awaiting the officer's formal request. - OKX / HTX / Bybit / Kraken / Coinbase: Email or submit a ticket through their official Law Enforcement / Fraud Report portal with your traced TxID chain and investigating officer email.

Step 4: Securing your devices, real accounts, and identity after the scam

During a Pig Butchering scam, victims often gave the scammer far more than just cryptocurrency:

  • Did you upload a photo of your Passport, Driver's License, or Social Security Number during "KYC Verification" on the fake trading site? If yes, the syndicate now holds a high-resolution scan of your government ID and will sell it or use it for identity fraud. Immediately freeze your credit files with Equifax, Experian, and TransUnion using our identity theft response guide.
  • Did you install an app on your iPhone using an "Enterprise Developer Profile," "WebClip," or Apple TestFlight? Go to Settings > General > VPN & Device Management on your iPhone right now, tap any listed Enterprise App / Configuration Profile, and tap Delete Profile / Delete App.
  • Did you download an .apk file onto your Android phone outside the Google Play Store? Uninstall the app immediately, turn on Google Play Protect, and if you granted the app Accessibility permissions, back up your photos and factory-reset the phone (see our stalkerware, spyware, and keylogger detection on phones kokamba).
  • Did the scammer ever ask you to install AnyDesk, TeamViewer, RustDesk, or screen-share your computer? Follow our tech support pop-up scam and remote desktop removal guide to purge unattended remote access agents, and rotate the passwords and 2FA on your real bank and email accounts.
  • Consult a licensed Certified Public Accountant (CPA) or tax attorney regarding Tax Deduction / Theft Loss Rules: In some jurisdictions (such as under IRS Internal Revenue Code Section 165©(2) in the United States for transactions entered into for profit, see IRS Chief Counsel Memorandum 202511015), documented victims of investment/Pig Butchering fraud where the taxpayer had a profit motive may qualify to claim a Theft Loss Deduction on their tax return if they kept their police report, IC3 filing, and transaction records.

How to recognize and block the "Fake Crypto Recovery Agent" (The Second Scam)

Within days or weeks of losing money to a Pig Butchering scam, you will be targeted by the Recovery Room Scam:

  1. How they find you:
  2. Direct Re-Targeting by the Original Syndicate: Three weeks after stealing your money, the exact same scam call center messages you on WhatsApp or email pretending to be "Interpol Cyber Division," "The Global Blockchain Asset Recovery Commission," "Tether Refund Bureau," or a "Law Firm / Cyber Forensics Company." They already know the exact dollar amount you lost and your wallet address (because they are the ones who stole it), which makes them sound magically convincing.
  3. Social Media Bot Swarms: If you comment on YouTube, Reddit, X (Twitter), or Facebook about being scammed, automated bots immediately reply: "I lost $90k too, but thank God @Cyber_Trace_Recovery_Official on Telegram/Instagram recovered 100% of my funds in 48 hours."
  4. How the Recovery Scam works:
  5. The "recovery specialist" shows you a fake screenshot claiming they "located and froze your stolen funds inside a smart contract / darknet escrow wallet," and asks you to pay $1,500 to $5,000 upfront for "smart-contract activation software," "bridging liquidity," or "legal bond insurance", or asks you to import a "recovery wallet" seed phrase and deposit 2,000 dollars of ETH for gas fees (which an automated sweeper bot steals in 0.5 seconds).
  6. Mobeko oyo ekoki kobukana te:
  7. No private hacker, recovery company, or forensic firm on Earth has the technical capability to reverse a blockchain transaction or hack a scammer's private key.
  8. Law enforcement agencies (FBI, Secret Service, Action Fraud, Europol) and Tether/Circle NEVER charge victims a fee, tax, or cryptocurrency gas deposit to return seized funds.

Mituna oyo batunaka mingi

My scammer says that if I don't pay the 20% withdrawal tax within 48 hours, the platform will freeze my account permanently, charge me a 5% daily late fee, and report me to the IRS / credit bureaus for tax evasion or money laundering. Can they ruin my credit or have me arrested?

No, every word of that threat is a complete fabrication designed to induce panic so you wire them one last payment before you think clearly. The fake trading website has zero connection to the IRS, HMRC, FinCEN, or any credit bureau (Equifax, Experian, TransUnion). You do not owe taxes on fabricated profits that never existed on a fake website, and a criminal syndicate operating out of an illegal compound cannot file a credit report or lawsuit against you. Block them after exporting your chat logs and do not send a single cent more.

The person who introduced me to the platform video-called me on FaceTime/WhatsApp every day for two months, she was a real person I saw on camera, so how could she be a scammer?

Modern Pig Butchering compounds do not rely only on stolen static photos. Syndicates employ human models ("camera hosts") kept specifically in staged luxury apartment sets to conduct live 5-minute video calls and send personalized daily cooking or gym videos to hundreds of victims simultaneously while a team of keyboard operators handles the text chats, or they use real-time GPU **Deepfake Face-Swap and Voice-Cloning software** over OBS Virtual Camera. Even if you saw a real face on a live video call, the investment platform they directed you to is 100 percent controlled by the syndicate. See our [deepfake voice clone and AI impersonation scams](../digital-and-tech/deepfake-voice-clone-and-ai-impersonation-scams.md) guide.

The scammer offered to pay "half" of my $30,000 tax/unfreeze fee out of their own pocket if I come up with the other $15,000. Doesn't that prove they are really trying to help me?

No, this is known in fraud investigations as the **"Co-Payment / Half-Share Trap"** and is Stage 4 of every standard Pig Butchering manual. Because the scammer's coworkers run the fake trading website, typing "+$15,000" into your on-screen tax balance costs the scammer **zero real dollars**, they simply edit a number in their database (or send USDT from one of their own wallets back to another one of their own wallets) to make you think they generously chipped in $15,000 for you, guilting you into wiring your last real $15,000.

I bought the cryptocurrency on Coinbase/Kraken and sent it to the scammer myself, will Coinbase or my bank reimburse me like a stolen credit card?

When you personally log into your bank or cryptocurrency exchange, pass 2FA, and authorize an outbound wire or crypto withdrawal (even under the psychological manipulation of a scammer), banks classify the transaction as an **"Authorized Push Payment (APP)"** rather than an unauthorized account hack. In the United States, Regulation E and the Electronic Fund Transfer Act generally cover *unauthorized* transfers (where a hacker broke into your account), not authorized scam transfers, though you should still file a formal bank fraud report and law enforcement asset-freeze request immediately. In the United Kingdom, however, mandatory **Payment Systems Regulator (PSR) APP Fraud Reimbursement rules** require UK banks to reimburse victims of Faster Payments / CHAPS authorized push payment scams up to statutory limits unless the customer acted with gross negligence.

Ba guides oyo etali yango

Ba sources e vérifié

  • Federal Bureau of Investigation (FBI) Internet Crime Complaint Center (IC3) (United States): Cryptocurrency Investment Fraud ("Pig Butchering") Public Service Announcements, Recovery Asset Team (RAT) Procedures, and Fake Crypto Recovery Schemes Warning.
  • Financial Crimes Enforcement Network (FinCEN) (United States Department of the Treasury): FinCEN Alert FIN-2023-Alert005: Prevalent Virtual Currency Investment Scam Commonly Known as "Pig Butchering" (Red Flags and Rapid Response Program).
  • Commodity Futures Trading Commission (CFTC) & Securities and Exchange Commission (SEC) (United States): Office of Investor Education and Advocacy Alert: Relationship Investment Scams and Fraudulent Asset Recovery Firms.
  • National Cyber Security Centre (NCSC) & Payment Systems Regulator (PSR) (United Kingdom): Authorized Push Payment (APP) Fraud Reimbursement Rules and Romance/Investment Scam Guidance.
  • United Nations Office on Drugs and Crime (UNODC) & INTERPOL: Transnational Organized Crime and Casinos, Cyber Fraud, and Fake Investment Compound Operations Analysis.