Skip to content

Ditsietso tsa Peeletso ya Crypto ('Go Bolaya Dikolobe') le Tsietso ya Moemedi wa Pusetso ya Bofora

Dinomoro tsa tshoganyetso di farologana go ya ka dinaga. Tsebe eno e dirisa 911, e leng nomoro ya United States le Canada. Dinaga tse dingwe tse dintsi di dirisa 112, 999 kgotsa nomoro e nngwe. Batla nomoro ya naga ya gaeno.

Go lemoga gore cryptocurrency ya inthanete, di-futures tsa gauta, phapanyetsano ya dinaga di sele (Forex), kgotsa polatefomo ya go epa madi a a sa tlhomamang (DeFi) e o beeleditseng madi a gago mo go yone tota ke boferefere jwa **Sha Zhu Pan ("Pig Butchering") ** ke nngwe ya mathata a a senyang thata a madi le a maikutlo a motho a ka a itemogelang. E tsamaisiwa ke ditlhopha tsa bokebekwa jo bo rulagantsweng jwa dinaga di sele go ralala Borwabotlhaba jwa Asia le lefatshe ka bophara, ditsietso tseno di fetsa dibeke kgotsa dikgwedi di aga kgolagano e e ikanyegang ya lorato, botsalano, kgotsa ya go gakolola ka WhatsApp, Thelekeramo, LinkedIn, Instagram, Ditiriso tsa go Intsha, kgotsa "mokwalo o o botlhale wa dinomoro tse di fosagetseng ka phoso" pele di go kaela mo tirisong ya Web3 e e sa siamang.

Motsotso o o tlhalosang wa tsietso ya Pig Butchering o diragala fa o leka go goga madi a a setseng mo akhaontong ya gago e e bontshitsweng, gantsi e bontsha makgolo a diketekete tsa didolara tsa dipoelo tse di itlhametsweng, mme polatefomo e gatsetsa go goga ga gago, e batla gore o romele pele diperesente di le 15 go ya go di le 30 tsa "makgetho a lotseno lwa motho ka namana," ditlhabololo tsa maduo"** go golola madi a gago. Kaedi eno e go naya ditaelo tsa go tlhopha ka bonako, tse di tlhapileng sentle go emisa go tswa madi ga madi, go phimola ditetlelelo tsa go ntsha metsi a a tshelang a konteraka e e botlhale mo sepatšheng sa gago sa go itlhokomela, go tsenya dikopo tsa go gatsetsa tsa blockchain tse di ka dirisiwang le ba tiragatso ya molao le batlhagisi ba stablecoin (Tether le Circle), le go itshireletsa mo go ** F Entco Ag Scam")** diphokojwe tse di lebang batswasetlhabelo malatsi moragonyana.

Dira se jaanong

  1. EMISA go romela madi ape a mangwe, le ka motlha o se ka wa duela "lekgetho," "tuelo ya go goga madi," "dipositi ya tshireletso ya AML," "tuelo ya gase," kgotsa "tuelo ya go gatsetsa akhaonto" go lotlolola tekatekano e e gatseditsweng. Mo diperesenteng di le 100 tsa di-brokerage tse di laolwang semolao le diphapanyetsano tsa cryptocurrency tse di ka dirisiwang (jaaka Coinbase, Broker, Kraken, dituelo tsa kgwebisano kgotsa ditshwaro tsa lekgetho di gogwa ka tlhamalalo mo balanseng e e mo teng ga akhaonto ya gago. Polatefomo nngwe le nngwe e e batlang gore o romele madi a mašwa a a tswang mo kgetsaneng go tswa kwa bankeng ya gago kgotsa kwa sepatšheng sa kwa ntle go "lotlolola" tekatekano e e leng teng ke go etsisa ga tsietso ga diperesente di le 100. Dimilione tsa didolara tse di bontshiwang mo sekirining sa gago ke dinomoro tsa HTML tsa maaka tse di laolwang ke polokelotshedimosetso ya backend ya motsietsi; go duela "lekgetho la diperesente di le 20" go tla felela fela ka seipato sa sešwa ("tuelo ya boruni jwa go kgabaganya melelwane") go fitlha o setse ka didolara tsa lefela.
  2. Fa o golagantse sepatšhe sa go itlhokomela (Sepatšhe sa Coinbase, MetaMask, Sepatšhe sa Terasete, Phantom, Rabby, kgotsa Ledger) le DApp ya "Meepo ya Madi / Noutu ya Thobo ya AI", ka bonako phimola Ditumelelo tsotlhe tsa Dithokene tse di sa Lekanyediwang (Approve / Permit2) KGOTSA sutisetsa madi a a setseng mo sepatšheng sa gago kwa polelong e ntšha ya peo. Ditsietso tse dintsi tsa go Bolaya Dikolobe di go bolelela gore madi a gago a "bolokesegile ka gonne ga a ke a tswa mo Sepatšheng sa gago sa Coinbase kgotsa sa Trust Wallet." Tota e bile, go tobetsa "Tsenela Letamo la Meepo" kgotsa "Amogela Boutšhara" go dirile gore o saene ERC-20 / TRC-20 e e kotsi increaseAllowance kgotsa Approve(Unlimited) tetla ya konteraka e e botlhale e e letlang konteraka ya motsietsi go gogola diperesente di le 100 tsa USDT/USDC e e ntseng mo teng ga sepatšhe sa gago nako le nako fa ba tlhopha. Eta revoke.cash ka bonako kgotsa latela rona go tswa ga sepatšhe sa cryptocurrency le go sa dumalane ga polelo ya peo guide.
  3. Boloka Hash nngwe le nngwe ya Kgwebisano ya blockchain (TxID), Aterese ya Sepatšhe sa Peeletso, URL, le rekoto ya puisano ya WhatsApp/Telegram PELE ga o lebana le kgotsa o thibela motsietsi. Motsotso o o latofatsang motsietsi ka tsietso, ba tla tobetsa "Phimola Puisano ya Matlhakore ka Bobedi" mo Telegram kgotsa WhatsApp mme ba tswale webosaete ya kgwebisano ya maaka e o tlhokang go dira lekgetho ka yone, ba phimola bosupi jo bo seng boammaaruri dikgogo. Dirisa founo ya bobedi kgotsa khomphiutha go tsaya senepe le go romela ntle hisitori yotlhe ya motlotlo, tsaya senepe sa hisitori ya gago ya dipeeletso se se bontshang ditlhaka di le 42 tse di tlhomameng (0x...), ditlhaka di le 34 (T...), kgotsa bc1... destination wallet addresses, and copy every 64-character Transaction Hash (TxID) from your real exchange (Coinbase, Kraken, Binance, Crypto.com).
  4. If you sent a bank wire transfer, ACH transfer, or credit/debit card payment within the last 24 to 72 hours, call your bank's Wire Fraud Department immediately to request an emergency SWIFT Recall / FinCEN Rapid Response freeze. While irreversible blockchain transactions cannot be undone by your bank, bank-to-bank wire transfers to shell company accounts (often disguised as "import/export," "jewelry," or "consulting" LLCs in Hong Kong, New York, London, or Singapore) can sometimes be intercepted in correspondent banking queues if recalled within 24 to 48 hours. See our bank account breach and wire recall guide.
  5. NEVER hire any "Crypto Recovery Agency," "Blockchain Ethical Hacker," or "Cyber Refund Law Firm" that advertises on Google, YouTube comments, Reddit, Telegram, or Instagram. Every single private company or individual claiming they can "hack the scammer's wallet" or "recover your stolen USDT for an upfront fee or retainer" is running a Recovery Room Scam (often operated by the exact same syndicate that stole your money in the first place). Only sworn government law enforcement agencies with judicial seizure warrants can instruct Tether (USDT), Circle (USDC), or centralized exchanges to freeze and burn/reissue stolen funds.
  6. Prioritize your mental health and personal safety right now. Transnational scam syndicates employ teams of psychological manipulators trained to induce shame, isolation, and acute financial despair. Remember that doctors, software engineers, attorneys, bank CEOs, and retirees fall victim to this industrial-scale crime every single day. If you or a loved one are experiencing overwhelming despair or thoughts of self-harm, reach out to a trusted family member immediately and call your local crisis line (in the United States and Canada, call or text 988 for the Suicide & Crisis Lifeline; in the United Kingdom, call 111 or Samaritans at 116 123; or call your local emergency number at 911, 112, or 999, see all dinomoro tsa tshoganyetso).

Goreng 'Go Goga Madi a Teko e Nnye' go dirile kwa tshimologong ya tsietso

Mo e ka nnang motswasetlhabelo mongwe le mongwe wa tsietso ya Pig Butchering o botsa jaana: "Polatefomo e ka tswa e le ya maaka jang fa e ne e ntetla go goga didolara di le 500 kgotsa didolara di le 2 000 go boela kwa akhaontong ya me ya mmatota ya banka mo bekeng ya ntlha?" Go goga madi goo go sa le gale ke kgato ya "go tshwara" ka boomo ya sekwalwa sa tsietso. Fa o leka polatefomo eno la ntlha ka didolara di le 1 000, batho ba ba tsietsang ba go romela didolara di le 1 200 tsa USDT ya mmatota ka seatla go tswa mo sepatšheng sa bone se se dirang sa madi a mannye go go tlhatswa pelo gore konopo ya go goga madi e a bereka le go go tlosa dipelaelo. Fa tuelo eo ya didolara di le 200 e setse e go tlhatswa pelo gore o fedise 401(k) ya gago, sekoloto sa gago sa tekatekano ya mo gae, kgotsa madi a o a bolokileng mo botshelong mme o tsenye didolara di le 50 000 kgotsa di le 250 000, serai seno se a tswalega mme ga go kitla go letlwa go goga madi a mangwe.

Boferefere jwa peeletso ya Crypto le setlhare sa tshwetso sa tshoganyetso sa DeFi

flowchart TD
    Root["Go Belaelwa Boferefere jwa Peeletso ya Crypto ('Go Bolaya Dikolobe') kgotsa Go Goga Madi go go Gatseditsweng"] --> StopPay["MOLAO 1: Emisa Diphetiso Tsotlhe ka Bonako, Le ka Motlha O Se Duele 'Makgetho', 'Gase', kgotsa 'Dituediso tsa Netefatso ya AML'."]

    StopPay --> ModeCheck{"Madi a Gago a ne a fetisiwa jang kgotsa a golaganngwa jang?"}

    ModeCheck -->|"Kgetho A: Sepatšhe sa go Itlhokomela se se Golagantsweng (Sepatšhe sa Coinbase, Sepatšhe sa Terasete, MetaMask) go DApp ya 'Meepo / Thobo'"| WalletRescue["1. Bula revoke.cash ka bonako mme o phimole Ditumelelo tsotlhe tsa Dithokene tsa USDT/USDC tse di sa Lekanyediwang<br/>2. Fa e le gore USDT e sa ntse e bonala mo atereseng ya gago ya sepatšhe, e fetisetse ka bonako mo sepatšheng se sešwa sa serweboleta/serweboleta pele ga motsietsi a se gogola ."]

    ModeCheck -->|"Kgetho B: E rometswe Crypto (BTC, ETH, USDT, USDC) ho Aterese ya Peeletso ho App / Webosaete ya Phapanyetsano ya Bofora"| TraceFreeze["1. Romela ntle di-hash tsotlhe tsa TxID le Diaterese tsa Dipositi tsa Motsietsi PELE ga o thibela motsietsi<br/>2. Latedisa di-hop mo Etherscan / Tronscan / Di-Breadcrumbs go bona Aterese ya Kopanyo ya Dipeeletso tsa Phapantsho<br/>3. Faela pegelo ya FBI IC3 (US) / Tiro ya Tsietso (UK) + itsise go Kobamela ga Tether/Circle le Phapantsho ya Boemo"]

    ModeCheck -->|"Tlhopho C: Mogala wa Banka o o Rometsweng (SWIFT / Fedwire / SEPA / Dituelo tse di Bofefo) mo Diureng di le 72 tsa Bofelo"| BankRecall["Leletsa Lefapha la Tsietso la Megala ya Banka ka bonako: Kopa SWIFT gpi ya Tshoganyetso ya go Ema-le-go-Gopola & Thomelo ya Tsibogo ya ka Bofefo ya FinCEN"]

    WalletRescue --> DeviceCheck["Khomphutha le Founo ya Boruni: Tlosa AnyDesk/TeamViewer, Phimola Diporofaele tsa TestFlight / tsa Kgwebo tsa iOS tsa Boferefere, Dikolosa Dikhunololamoraba tsa Phapanyetsano"]
    TraceFreeze --> DeviceCheck
    BankRecall --> DeviceCheck

Thulaganyo ya mmele ya mefuta e le 3 ya setegeniki ya dipolatefomo tsa "Go Bolaya Dikolobe"

Go tlhaloganya gore ke mokgwa ofe wa setegeniki o setlhopha se o dirisitseng kgatlhanong le wena go tlhomamisa gore a go na le madi ape a a santseng a ntse mo teng ga sepatšhe sa gago a emetse go namolwa gone jaanong:

Mofuta wa Boagi jwa Tsietso Kafa Motswasetlhabelo a E Itemogelang ka Gone Se Tota se Diragalang mo Blockchain A o ka Pholosa Madi a a Setseng Gone Jaanong?
1. Tiriswa ya Bofora ya Phapantsho / Kgwebisano (E laisitswe ka fa thoko ka Apple TestFlight, Porofaele ya Kgwebo ya iOS, WebClip ya maaka, kgotsa kgolagano ya dikhomphiutha e e tsietsang jaaka coin-pro-vip[.]com) O tlhama akhaonto mo webosaeteng e e borethe kgotsa mo app ya selulafouno, o kopolola aterese ya dipositi (0x... kgotsa T...), mme o romele crypto go tswa mo akhaontong ya gago ya mmatota ya Coinbase / Kraken. Mo sekirining, o lebelela ditšhate tsa kerese tse di tshelang mme o diragatse dikgwebo tsa "dinoutu / dikgetho tsa binary / di-futures tsa gauta" tsa metsotswana e le 60 tse di fenyang 20% ​​nako le nako. Ditšhate tsa kgwebisano le tekatekano ya akhaonto ya gago ya $300,000 ke ditsenngwa tsa polokelotshedimosetso tsa maaka tsa 100%. Mo metsotsong e le 3 ya dipositi ya gago ya mmatota e goroga kwa atereseng ya sepatšhe sa motsietsi, sekwalwa se se itirisang se ne sa gogola USDT/BTC ya gago ya mmatota go ya kwa sepatšheng sa bogareng sa go tlhatswa. Ga go kgonege go goga madi ka go ithusa go tswa mo tirisong ya maaka. O tshwanetse go latedisa di-hop tsa blockchain (TxID) go tswa kwa atereseng ya gago ya ntlha ya dipositi go ya kwa kananyong ya kwa ntle ga rampa mme o romele kopo ya go gatsetsa ya tiragatso ya molao.
2. Web3 DeFi e e kotsi "Meepo ya Madi / Letamo le le Botlhale" Drainer (E fitlhelelwa mo teng ga sebatli se se ageletsweng sa Sepatšhe sa Coinbase, Sepatšhe sa Terasete, MetaMask, kgotsa SafePal) Motsietsi o go bolelela jaana: "Ga o ke o tlhoka go romela madi kwa go ope. Boloka fela USDT ya gago mo teng ga Coinbase Wallet ya gago ya semmuso, bula sebatli sa DApp, ya kwa kgolaganong eno ya letamo la meepo, o bo o tobetsa 'Amogela Voucher / Join Node' go bona 1.5% letsatsi le letsatsi." Go tobetsa "Amogela Boutšhara" kgotsa "Tlhomamisa" go ne ga tlhagelela kgwebisano ya konteraka e e botlhale e tota e neng e le Approve(Spender: ScammerContract, Amount: Unlimited USDT). Kwa tshimologong, motsietsi o tlogela USDT ya gago mo sepatšheng sa gago mme a go romelele dituelo tse dinnye tsa letsatsi le letsatsi gore o oketse madi a mangwe; fa madi a a setseng mo sepatšheng sa gago a fitlha kwa setlhoeng, konteraka ya bone e a bitsa transferFrom() mme e ntsha 100% ya USDT ya gago mo motsotswaneng o le 1. EE, FA ba ise ba goge setlhotlheletsi: Fa e le gore USDT ya gago ya mmatota e santse e ntse mo atereseng ya gago ya Coinbase Wallet / Trust Wallet gone jaanong, ka bonako ya kwa revoke.cash go phimola tumelelo ya letshwao, KGOTSA romela USDT ya gago ka bonako go tswa mo sepatšheng seo kwa akhaontong ya gago ya mmatota ya Coinbase Exchange pele ga motsietsi a lemoga.
3. Banka/Phapantsho e e Thusiwang ke Phitlhelelo e e Kgakala (Motsietsi o go kaela ka go abelana sekerini kgotsa Tafole epe fela / Sebogedi sa Setlhopha / Zoom) "Mogakolodi" kgotsa "motsamaisi wa akhaonto ya VIP" o go thusa go rulaganya Kraken ya gago, Coinbase, kgotsa thapo ya banka mo godimo ga kabelano ya sekerini, kgotsa o tsenya sedirisiwa sa tshegetso se se kgakala mo laptop/founong ya gago. Motsietsi o tshwara dikhuki tsa gago tsa nako, dinotlolo tsa API, kgotsa dikhoutu tsa 2FA, kgotsa o lebelela sekerini sa gago fa a ntse a kwala aterese ya bone ya go goga madi mo lenaaneng le lesweu mo akhaontong ya gago ya kananyo e e kafa molaong. Ka bonako fela kgaola khomphiutha mo Wi-Fi, ntsha didirisiwa tse di kgakala (bona tsietso ya tshegetso ya thekenoloji le kaedi ya go tlosa AnyDesk), mme o notlele akhaonto ya gago ya mmatota ya kananyo.

Kgato 1: Go boloka bosupi jwa forensiki (Dira seno PELE ga o lebana le motsietsi)

Phoso e le nngwe e kgolo e batswasetlhabelo ba e dirang ke go romela molaetsa ka founo mo motsietsing "Ke a itse gore o motsietsi, mpusetse madi a me kgotsa ke leletsa FBI." Ka bonako fela fa o romela molaetsa oo, modirisi wa sendikete o tobetsa konopo e le nngwe e e phimolang tlhale ya Telegram/WhatsApp mo megaleng ka bobedi le go thibela go tsena mo saeteng ya gago.

Pele ga o bua lefoko le motsietsi, dira jaaka e kete o "dira le banka ya gago go kokoanya madi a lekgetho/netefatso" metsotso e le 30 fa o ntse o ntsha sephuthelwana seno sa bosupi:

  1. Romela ntle Hash nngwe le nngwe ya Kgwebisano ya Blockchain (TxID) le Aterese ya Sepatšhe go tswa mo kananyong ya gago ya BOAMMAARURI:
  2. Tsena mo phapanyetsanong ya madi a sephiri e e kafa molaong kgotsa sepatšhe se o se dirisitseng go reka le go romela madi a sephiri (a a tshwanang le Coinbase, Kraken, Robinhood, Crypto.com, Gemini, Binance, App ya Madi, kgotsa PayPal).
  3. Open your Transaction / Withdrawal History for every transfer you sent to the scam platform.
  4. Copy and save as plain text (not just screenshots, because investigators need copy-pasteable alphanumeric strings):
    • Exact UTC Date, Time, and Dollar/Crypto Amount of each withdrawal.
    • Asset & Blockchain Network (e.g., USDT on Tron TRC-20, USDC on Ethereum ERC-20, kgotsa Bitcoin BTC).
    • Your Sending Wallet Address.
    • The Scammer's Receiving / Deposit Wallet Address (e.g., 0x71C... kgotsa TX9k...).
    • The 64-character hexadecimal Transaction Hash (TxID / TxHash) for every single transfer.
  5. Screenshot and screen-record the Fake Trading App / Website while you can still log in:
  6. Record a continuous smartphone video showing:
    • The exact URL / domain name of the fake platform in the browser address bar.
    • Your fake Account Dashboard / UID number, fake trade history, and the "Deposit" screen showing the wallet address the platform assigned to you.
    • The "Customer Service / VIP Support" chat window inside the platform where they demand the 15 to 30% tax or AML fee (especially any wallet address they provide for paying the "tax," as that wallet is actively monitored by the syndicate today).
  7. Export the entire WhatsApp, Telegram, or Signal chat archive:
  8. On WhatsApp: Open the chat with the scammer -> tap their profile name at the top -> scroll to the bottom and tap Export Chat -> Include Media -> save the .zip archive to your computer or Google Drive/iCloud. Also screenshot their phone number, profile photos, and any voice notes or video call recordings.
  9. On Telegram: Open Telegram Desktop on a computer -> open the chat -> click the three dots (⋮) in the top-right corner -> Export chat history -> check all boxes (Photos, Voice messages, Video messages) and export as HTML/JSON. Also click their profile to check if their numeric Telegram User ID is visible (unlike @usernames which scammers change daily, the numeric Telegram User ID is permanent).

Step 2: How to trace your stolen funds on the blockchain and request an emergency Tether (USDT) / Exchange freeze

Unlike physical cash stuffed in a suitcase, every Bitcoin (BTC), Ethereum (ETH / ERC-20), and Tron (TRX / TRC-20) transaction is permanently recorded on a public, immutable global ledger. Even sophisticated laundering syndicates must eventually move stolen funds through one of two chokepoints where assets can be frozen by law enforcement:

Ntlha ya Kgatelelo 1: Dikonteraka tse di Botlhale tsa Stablecoin tse di Kopantsweng (Tether USDT le Circle USDC)

Over 80 percent of Pig Butchering scams demand payment in USDT (Tether) on the Tron (TRC-20) or Ethereum (ERC-20) blockchain, or USDC (Circle). - Se bontsi jwa batswasetlhabelo ba sa se itseng ke gore bobedi Tether (USDT) and Circle (USDC) dikonteraka tse di botlhale di na le tiro ya tsamaiso e e ageletsweng e e bidiwang addBlackList(address) / freeze(address). - When Tether Limited or Circle receives an urgent law enforcement freeze request showing that stolen USDT kgotsa USDC is sitting inside an unhosted syndicate wallet address (0x... kgotsa T...), Tether can cryptographically freeze that wallet address on the blockchain so the scammer can never move or spend the USDT, and upon court forfeiture order, Tether can burn (destroyBlackFunds) dithokene tse di gatsetse mo sepatšheng sa motsietsi le se se emisediwang ke minte USDT directly back to the victim.

Chokepoint 2: Centralized Exchange (CEX) Deposit Consolidation Wallets

To convert stolen BTC, ETH, kgotsa USDT into fiat currency (Chinese Yuan, US Dollars, Thai Baht, or UAE Dirhams), scammers transfer funds through 2 to 6 intermediate "hop" wallets before depositing them into a Deposit Address at a major Centralized Exchange (such as Binance, OKX, HTX/Huobi, Bybit, Gate.io, KuCoin, or Kraken).

How to trace your TxID in 5 minutes using free public block explorers

  1. Paste your Transaction Hash (TxID) into the official block explorer for that network:
  2. Ethereum (ETH, USDT-ERC20, USDC): Visit etherscan.io
  3. Tron (TRX, USDT-TRC20): Visit tronscan.org
  4. Bitcoin (BTC): Visit mempool.space or blockchair.com
  5. Visual Multi-Hop Graph Tracer (Free tier): Visit breadcrumbs.app or metasleuth.io and paste your scammer deposit address to generate an automatic visual flow diagram showing every hop.
  6. Follow the hops forward from your Deposit Address:
  7. Click on the Scammer's Deposit Address (To: field) in your original transaction, then click the Token Transfers (ERC-20 / TRC-20) tab to see where the scammer moved your tokens next.
  8. Follow the large outbound transfers 1 to 4 hops forward until you see either:
    • A high-balance "Holding / Piggybank" Wallet: An unlabelled wallet currently holding $50,000 to $10,000,000+ in static USDT kgotsa USDC (prime target for an immediate Tether / Circle Smart-Contract Freeze).
    • A Labeled Exchange Deposit Address: On Etherscan or Tronscan, the final destination address will suddenly show a public nametag like Binance 14, OKX 7, HTX 2, kgotsa Bybit. The wallet one step immediately before (From:) that labeled exchange hot wallet is the scammer's personal Customer Deposit Address at that exchange (which corresponds to an internal account with KYC documents, IP logs, and freezable funds).

Step 3: Official law enforcement & exchange reporting checklist (In exact priority order)

Law enforcement agencies receive thousands of vague complaints daily; complaints that merely say "I lost $80,000 to a girl named Sophia on WhatsApp" get queued for months. In contrast, a structured report titled "URGENT LIVE CRYPTO FREEZE REQUEST: $80,000 USDT-TRC20 Currently Sitting in Unhosted Wallet [Address] / Deposited to Binance via TxID [Hash]" gives cybercrime agents something they can freeze the same afternoon.

1. United States Victims

  • FBI Internet Crime Complaint Center (ic3.gov): Faela pegelo ka bonako kwa https://www.ic3.gov. Tsenya tsotlhe Dihashe tsa Kgwebisano (TxIDs), Diaterese tsa Sepatšhe sa Batsietsi, le Phapanyetsano epe e e Supilweng ya Bofelo (ka sekai, Binance/OKX/Tether) mo dikarolong tse di kgethegileng tsa kgwebisano ya matlole gore FBI ya Setlhopha sa Dithoto tsa Pusetso (RAT) le Yuniti ya Dithoto tsa Sebele (VAU) di dire tshupane ya sepatšhe ka go itirisa.
  • United States Secret Service (USSS) Field Office & Local Police Report: Call your regional U.S. Secret Service Cyber Fraud Task Force field office directly by phone (listed at secretservice.gov/contact/field-offices) AND walk into your local municipal police department to get a formal Police Incident Report Number (you will need this police case number to trigger an emergency freeze at Binance, OKX, or Tether).
  • Commodity Futures Trading Commission (CFTC) & SEC: File a whistleblower/fraud tip at cftc.gov/complaint le sec.gov/tcr.

2. United Kingdom, Canada, European Union, and Australia Victims

  • United Kingdom: File an immediate report with Action Fraud (actionfraud.police.uk or call 0300 123 2040) and request an NFRC (National Fraud Intelligence Bureau) Crime Reference Number. If bank transfers were involved within the UK, invoke the Authorized Push Payment (APP) Fraud Reimbursement / Contingent Reimbursement Model rules with your bank immediately.
  • Canada: File a police report with your local police service's Financial Crimes Unit AND submit all wallet addresses to the Canadian Anti-Fraud Centre (antifraudcentre-centreantifraude.ca).
  • Australia: Report immediately through ReportCyber (cyber.gov.au) and the National Anti-Scam Centre (scamwatch.gov.au), and contact your bank's scam escalation team.
  • European Union: File a criminal complaint (Anzeige / Plainte) at your local national police station to obtain a case reference number for Europol / national cyber units.

3. Direct Notification to Destination Exchanges & Stablecoin Issuers (With Your Police Case Number)

Once you have your Police Report Number and IC3 Confirmation Number, submit a direct Victim Freeze Support Ticket to the compliance department of the exchange where your traced funds landed (or to Chainalysis / TRM Labs public victim portals): - Binance Law Enforcement / Victim Freeze Request: Open a support chat at binance.com -> Report Stolen Funds -> provide the exact Deposit TxID, the Binance Deposit Address, and your Police Report + Officer Contact Email so Binance places a temporary 7-day courtesy compliance hold while awaiting the officer's formal request. - OKX / HTX / Bybit / Kraken / Coinbase: Email or submit a ticket through their official Law Enforcement / Fraud Report portal with your traced TxID chain and investigating officer email.

Step 4: Securing your devices, real accounts, and identity after the scam

During a Pig Butchering scam, victims often gave the scammer far more than just cryptocurrency:

  • Did you upload a photo of your Passport, Driver's License, or Social Security Number during "KYC Verification" on the fake trading site? If yes, the syndicate now holds a high-resolution scan of your government ID and will sell it or use it for identity fraud. Immediately freeze your credit files with Equifax, Experian, and TransUnion using our identity theft response guide.
  • Did you install an app on your iPhone using an "Enterprise Developer Profile," "WebClip," or Apple TestFlight? Go to Settings > General > VPN & Device Management on your iPhone right now, tap any listed Enterprise App / Configuration Profile, and tap Delete Profile / Delete App.
  • Did you download an .apk file onto your Android phone outside the Google Play Store? Uninstall the app immediately, turn on Google Play Protect, and if you granted the app Accessibility permissions, back up your photos and factory-reset the phone (see our stalkerware, spyware, and keylogger detection on phones kaela).
  • Did the scammer ever ask you to install AnyDesk, TeamViewer, RustDesk, or screen-share your computer? Follow our tech support pop-up scam and remote desktop removal guide to purge unattended remote access agents, and rotate the passwords and 2FA on your real bank and email accounts.
  • Consult a licensed Certified Public Accountant (CPA) or tax attorney regarding Tax Deduction / Theft Loss Rules: In some jurisdictions (such as under IRS Internal Revenue Code Section 165©(2) in the United States for transactions entered into for profit, see IRS Chief Counsel Memorandum 202511015), documented victims of investment/Pig Butchering fraud where the taxpayer had a profit motive may qualify to claim a Theft Loss Deduction on their tax return if they kept their police report, IC3 filing, and transaction records.

How to recognize and block the "Fake Crypto Recovery Agent" (The Second Scam)

Within days or weeks of losing money to a Pig Butchering scam, you will be targeted by the Recovery Room Scam:

  1. How they find you:
  2. Direct Re-Targeting by the Original Syndicate: Three weeks after stealing your money, the exact same scam call center messages you on WhatsApp or email pretending to be "Interpol Cyber Division," "The Global Blockchain Asset Recovery Commission," "Tether Refund Bureau," or a "Law Firm / Cyber Forensics Company." They already know the exact dollar amount you lost and your wallet address (because they are the ones who stole it), which makes them sound magically convincing.
  3. Social Media Bot Swarms: If you comment on YouTube, Reddit, X (Twitter), or Facebook about being scammed, automated bots immediately reply: "I lost $90k too, but thank God @Cyber_Trace_Recovery_Official on Telegram/Instagram recovered 100% of my funds in 48 hours."
  4. How the Recovery Scam works:
  5. The "recovery specialist" shows you a fake screenshot claiming they "located and froze your stolen funds inside a smart contract / darknet escrow wallet," and asks you to pay $1,500 to $5,000 upfront for "smart-contract activation software," "bridging liquidity," or "legal bond insurance", or asks you to import a "recovery wallet" seed phrase and deposit 2,000 dollars of ETH for gas fees (which an automated sweeper bot steals in 0.5 seconds).
  6. The Unbreakable Rule:
  7. No private hacker, recovery company, or forensic firm on Earth has the technical capability to reverse a blockchain transaction or hack a scammer's private key.
  8. Law enforcement agencies (FBI, Secret Service, Action Fraud, Europol) and Tether/Circle NEVER charge victims a fee, tax, or cryptocurrency gas deposit to return seized funds.

Dipotso tse di bodiwang kgapetsakgapetsa

My scammer says that if I don't pay the 20% withdrawal tax within 48 hours, the platform will freeze my account permanently, charge me a 5% daily late fee, and report me to the IRS / credit bureaus for tax evasion or money laundering. Can they ruin my credit or have me arrested?

No, every word of that threat is a complete fabrication designed to induce panic so you wire them one last payment before you think clearly. The fake trading website has zero connection to the IRS, HMRC, FinCEN, or any credit bureau (Equifax, Experian, TransUnion). You do not owe taxes on fabricated profits that never existed on a fake website, and a criminal syndicate operating out of an illegal compound cannot file a credit report or lawsuit against you. Block them after exporting your chat logs and do not send a single cent more.

The person who introduced me to the platform video-called me on FaceTime/WhatsApp every day for two months, she was a real person I saw on camera, so how could she be a scammer?

Modern Pig Butchering compounds do not rely only on stolen static photos. Syndicates employ human models ("camera hosts") kept specifically in staged luxury apartment sets to conduct live 5-minute video calls and send personalized daily cooking or gym videos to hundreds of victims simultaneously while a team of keyboard operators handles the text chats, or they use real-time GPU **Deepfake Face-Swap and Voice-Cloning software** over OBS Virtual Camera. Even if you saw a real face on a live video call, the investment platform they directed you to is 100 percent controlled by the syndicate. See our [deepfake voice clone and AI impersonation scams](../digital-and-tech/deepfake-voice-clone-and-ai-impersonation-scams.md) guide.

The scammer offered to pay "half" of my $30,000 tax/unfreeze fee out of their own pocket if I come up with the other $15,000. Doesn't that prove they are really trying to help me?

No, this is known in fraud investigations as the **"Co-Payment / Half-Share Trap"** and is Stage 4 of every standard Pig Butchering manual. Because the scammer's coworkers run the fake trading website, typing "+$15,000" into your on-screen tax balance costs the scammer **zero real dollars**, they simply edit a number in their database (or send USDT from one of their own wallets back to another one of their own wallets) to make you think they generously chipped in $15,000 for you, guilting you into wiring your last real $15,000.

I bought the cryptocurrency on Coinbase/Kraken and sent it to the scammer myself, will Coinbase or my bank reimburse me like a stolen credit card?

When you personally log into your bank or cryptocurrency exchange, pass 2FA, and authorize an outbound wire or crypto withdrawal (even under the psychological manipulation of a scammer), banks classify the transaction as an **"Authorized Push Payment (APP)"** rather than an unauthorized account hack. In the United States, Regulation E and the Electronic Fund Transfer Act generally cover *unauthorized* transfers (where a hacker broke into your account), not authorized scam transfers, though you should still file a formal bank fraud report and law enforcement asset-freeze request immediately. In the United Kingdom, however, mandatory **Payment Systems Regulator (PSR) APP Fraud Reimbursement rules** require UK banks to reimburse victims of Faster Payments / CHAPS authorized push payment scams up to statutory limits unless the customer acted with gross negligence.

Dikaedi tse di tsamaelanang

Metswedi e tlhotlhomisitswe

  • Federal Bureau of Investigation (FBI) Internet Crime Complaint Center (IC3) (United States): Cryptocurrency Investment Fraud ("Pig Butchering") Public Service Announcements, Recovery Asset Team (RAT) Procedures, and Fake Crypto Recovery Schemes Warning.
  • Neteweke ya Tiragatso ya Bosenyi jwa Ditšhelete (FinCEN) (Lefapha la Matlotlo la United States): Tlhagiso ya FinCEN FIN-2023-Alert005: Boferefere jo bo Atile jwa Peeletso ya Madi a Sebele jo bo Tlwaelegileng jaaka "Go Bolaya Dikolobe" (Difolaga tse Dikhibidu le Lenaneo la Tsibogo e e Potlakileng)
  • Commodity Futures Trading Commission (CFTC) & Securities and Exchange Commission (SEC) (United States): Office of Investor Education and Advocacy Alert: Relationship Investment Scams and Fraudulent Asset Recovery Firms.
  • Setsi sa Bosetšhaba sa Tshireletso ya Inthanete (NCSC) & Molaodi wa Ditsamaiso tsa Dituelo (PSR) (United Kingdom): Melao ya Pusetso ya Tsietso ya Tuelo ya Push e e Dumeletsweng (APP) le Kaelo ya Tsietso ya Lorato/Dipeeletso.
  • United Nations Office on Drugs and Crime (UNODC) & INTERPOL: Transnational Organized Crime and Casinos, Cyber Fraud, and Fake Investment Compound Operations Analysis.