UTyalo-mali lwe-Crypto ('Ukuxhelwa kweehagu') Ubuqhophololo kunye nobuqhophololo boBumenemene boBumenemene¶

Ukuqonda ukuba i-cryptocurrency ye-intanethi, ikamva legolide, utshintshiselwano lwangaphandle (i-Forex), okanye iqonga lezemali (i-DeFi) ye-liquidity-mining platform apho utyale imali yakho yokonga ngokwenene yi-Sha Zhu Pan ("I-Pig Butchering") i-scam yenye yezona ngxaki zibuhlungu kakhulu zemali kunye neemvakalelo umntu anokuzifumana. Isebenza ngamaqela amanyeneyo olwaphulo-mthetho olulungelelanisiweyo kuwo wonke uMzantsi-mpuma Asia nakwihlabathi jikelele, obu buqhophololo bachitha iiveki okanye iinyanga besakha ubudlelwane obuthembekileyo bothando, ubuhlobo, okanye ingcebiso nge-WhatsApp, iTelegram, i-LinkedIn, i-Instagram, ii-Apps zokuDating, okanye "isicatshulwa esinenombolo engalunganga ngengozi" ngaphambi kokukukhokelela kwi-app yokuthengisa yomgunyathi okanye ikhontrakthi ekhohlakeleyo yeWeb3.

Umzuzu ochazayo we-Pig Butchering scam yenzeka xa uzama ukurhoxisa ibhalansi yeakhawunti yakho ebonisiweyo, idla ngokubonisa amakhulu amawaka eedola kwinzuzo eyenziweyo, kwaye iqonga linqanda ukurhoxiswa kwakho, lifuna ukuba uqale ucingo **15 ukuya kwi-30 ekhulwini yangaphandle "irhafu yengeniso yomntu," "idiphozithi zokuqinisekisa i-AML," "i-blockchain gas clearance" * intlawulo yokukhutshwa kwegesi okanye i-credit . Esi sikhokelo sikunika ngokukhawuleza, imiyalelo ecacileyo yekristale yokumisa ukopha kwezemali, ukurhoxisa iimvumelwano ze-smart-contract drain bukhoma kwi-wallet yakho yokuzimela, ifayile ye-blockchain yokumisa izicelo zokumisa kunye nokunyanzeliswa komthetho kunye nabanikezeli be-stablecoin (I-Tether kunye ne-Circle), kwaye uzikhusele kwi-*I-Fake Crypto Recovery Agent ("Iintsuku zeSibini ezijoliswe kuzo")

Yenza oku ngoku¶

1. YEKA ukuthumela nayiphi na imali engakumbi, ungaze uhlawule "irhafu," "imali yokurhoxisa," "idipozithi yokhuseleko ye-AML," "imali yegesi," okanye "imali yokumisa i-akhawunti" ukuvula ibhalansi enomkhenkce. Kwi-100 ekhulwini lee-brokers ezisemthethweni ezilawulwayo kunye notshintshiselwano lwe-cryptocurrency (ezifana ne-Coinbase, i-Kraken, i-Gemini, i-Brokerctions esebenzayo okanye i-Interactive tax, okanye i-Interactive tax itsalwe ngokuthe ngqo kwimali eseleyo kwiakhawunti yakho. Naliphi na iqonga elifuna ukuba uthumele imali entsha ephuma epokothweni kwibhanki yakho okanye kwi-wallet yangaphandle ukuze "uvule" ibhalansi ekhoyo yi-100 yepesenti yobuqhetseba yokulinganisa. Izigidi zeerandi ezibonisiweyo kwiscreen sakho ngamanani angeyonyani e-HTML alawulwa yidatabase ye-backend ye-scammer; ukuhlawula "i-20 yepesenti yerhafu" kuya kukhokelela kwisizathu esitsha ("umrhumo wophicotho-zincwadi owela umda") de ube unoziro weedola eziseleyo.
2. ** Ukuba uqhagamshele i-wallet yokuzimela (i-Coinbase Wallet, i-MetaMask, i-Trust Wallet, i-Phantom, i-Rabby, okanye i-Ledger) kwi-"Liquidity Mining / AI Yield Node" DApp, ngokukhawuleza urhoxise zonke iiMvume zeMbonakaliso ezingenamkhawulo (Approve / Permit2) OKANYE uhambise imali eshiyekileyo kwisipaji sakho uye kwibinzana lembewu elitsha kraca.** Uninzi lwezobuqhophololo zokuxhela iiHagu zikuxelela ukuba iimali zakho "zikhuselekile kuba aziyishiyi eyakho i-Coinbase Wallet okanye iTrust Wallet." Enyanisweni, ukucofa u-"Join Mining Pool" okanye "Receive Voucher" ikwenze watyikitya into embi ERC-20 / TRC-20 increaseAllowance okanye Approve(Unlimited) smart contract permission that lets the scammer's contract sweep 100 percent of the USDT/USDC sitting inside your wallet whenever they choose. Visit revoke.cash immediately or follow our cryptocurrency wallet drain and seed phrase compromise isikhokelo.
3. Preserve every single blockchain Transaction Hash (TxID), Deposit Wallet Address, URL, and WhatsApp/Telegram chat log BEFORE you confront or block the scammer. The moment you accuse the scammer of fraud, they will click "Delete Chat for Both Sides" on Telegram or WhatsApp and shut down the fake trading website, erasing the evidence you need for law enforcement and tax casualty loss deductions. Use a second phone or computer to photograph and export the entire chat history, screenshot your deposit history showing the exact 42-character (0x...), 34-character (T...), or bc1... destination wallet addresses, and copy every 64-character Transaction Hash (TxID) from your real exchange (Coinbase, Kraken, Binance, Crypto.com).
4. If you sent a bank wire transfer, ACH transfer, or credit/debit card payment within the last 24 to 72 hours, call your bank's Wire Fraud Department immediately to request an emergency SWIFT Recall / FinCEN Rapid Response freeze. While irreversible blockchain transactions cannot be undone by your bank, bank-to-bank wire transfers to shell company accounts (often disguised as "import/export," "jewelry," or "consulting" LLCs in Hong Kong, New York, London, or Singapore) can sometimes be intercepted in correspondent banking queues if recalled within 24 to 48 hours. See our bank account breach and wire recall guide.
5. NEVER hire any "Crypto Recovery Agency," "Blockchain Ethical Hacker," or "Cyber Refund Law Firm" that advertises on Google, YouTube comments, Reddit, Telegram, or Instagram. Every single private company or individual claiming they can "hack the scammer's wallet" or "recover your stolen USDT for an upfront fee or retainer" is running a Recovery Room Scam (often operated by the exact same syndicate that stole your money in the first place). Only sworn government law enforcement agencies with judicial seizure warrants can instruct Tether (USDT), Circle (USDC), or centralized exchanges to freeze and burn/reissue stolen funds.
6. Prioritize your mental health and personal safety right now. Transnational scam syndicates employ teams of psychological manipulators trained to induce shame, isolation, and acute financial despair. Remember that doctors, software engineers, attorneys, bank CEOs, and retirees fall victim to this industrial-scale crime every single day. If you or a loved one are experiencing overwhelming despair or thoughts of self-harm, reach out to a trusted family member immediately and call your local crisis line (in the United States and Canada, call or text 988 for the Suicide & Crisis Lifeline; in the United Kingdom, call 111 or Samaritans at 116 123; or call your local emergency number at 911, 112, or 999, see all amanani kaxakeka).

I-Crypto investment scam & DeFi drain emergency triage decision tree¶

flowchart TD
    Root["I-Crypto Investment Scam erhanelwayo ('I-Pig Butchering') okanye Ukuhoxiswa kweFrozen"] --> StopPay["UMTHETHO 1: Misa zonke iiNguqulelo ngoko nangoko, ungaze uhlawule 'iRhafu', 'iGesi', okanye 'iMirhumo yokuQinisekisa i-AML'"]

    StopPay --> ModeCheck{"Ingaba iiNgxowa-mali zakho zigqithiselwe okanye ziqhagamshelwe njani?"}

    ModeCheck -->|"UKhetho A: I-Wallet ye-Self-Custody eQinisekisiweyo (i-Coinbase Wallet, i-Trust Wallet, i-MetaMask) kwi-'Mining / Yield' DApp"| WalletRescue["1. Vula i-revoke.cash ngoko nangoko kwaye urhoxise yonke i-USDT engenamkhawulo/i-USDC yeToken eVunyiweyo<br/>2. Ukuba i-USDT isabonisa kwidilesi ye-wallet yakho, yigqithisele kwangoko kwi-hardware entsha/i-software wallet phambi kokuba umkhohlisi ayitshayele."]

    ModeCheck -->|"Ukhetho B: I-Crypto ethunyelwe (i-BTC, i-ETH, i-USDT, i-USDC) kwidilesi yeDiphozithi kwi-Fake Exchange App/Website"| TraceFreeze["1. Thumela ngaphandle zonke i-TxID hashes & ne-Scammer Deposit Address NGAPHAMBI kokuvalela umqhathi<br/>2. Landela i-hops kwi-Etherscan / Tronscan / Breadcrumbs ukuze ufumane idilesi yoTshintsho lweDiphozithi yoNxibelelwano <br/>3. Ifayile ye-FBI IC3 (US) / ingxelo yobuqhophololo (e-UK) + yazisa iTether/Circle & Destination Exchange Compliance"]

    ModeCheck -->|"UKhetho C: Ucingo lweBhanki oluThunyelweyo (i-SWIFT / Fedwire / SEPA / iiNtlawulo eziKhawulezayo) kwiiyure ezingama-72 ezidlulileyo"| BankRecall["Fowunela iSebe leBhanki yobuqhophololo ngoko nangoko: Cela i-SWIFT kaNgxamiseko gpi Yima-kwaye-Ukhumbule & ne-FinCEN iReferensi yokuPhendula ngokukhawuleza"]

    WalletRescue --> DeviceCheck["Uphicotho lweKhompyutha kunye neFowuni: Khipha i-AnyDesk/TeamViewer, Cima iRogue iOS TestFlight / iiProfayili zeShishini, Jikelezisa iiPasswords"]
    TraceFreeze --> DeviceCheck
    BankRecall --> DeviceCheck

I-Anatomy yeentlobo ezi-3 zobuchwephesha zamaqonga ee-"Pig Butchering".¶

Ukuqonda ukuba yeyiphi indlela yobugcisa esetyenziswa ngokuchasene nawe kugqiba ukuba kukho naziphi na iimali ezisahleli kwiwalethi yakho zilindele ukuhlangulwa ngoku:

Step 1: Forensic evidence preservation (Do this BEFORE confronting the scammer)¶

The single biggest mistake victims make is texting the scammer "I know you are a scammer, give me my money back or I am calling the FBI." The instant you send that message, the syndicate operator clicks a single button that wipes the Telegram/WhatsApp thread on both phones and disables your login on the fake trading site.

Before saying a word to the scammer, pretend you are "working with your bank to gather the tax/verification funds" for 30 minutes while you extract this exact evidence package:

1. Export every Blockchain Transaction Hash (TxID) and Wallet Address from your REAL exchange:
2. Log into the legitimate cryptocurrency exchange or wallet you used to buy and send the crypto (such as Coinbase, Kraken, Robinhood, Crypto.com, Gemini, Binance, Cash App, or PayPal).
3. Vula iNtengiselwano / iMbali yokurhoxa kulo lonke ugqithiselo oluthumele kwiqonga lomkhonyovu.
4. Khuphela kwaye ugcine njengokubhaliweyo okucacileyo (kungekhona nje imifanekiso yesikrini, kuba abaphandi bafuna imitya enokukopishwa yealphanumeric):
   • Umhla ochanekileyo we-UTC, Ixesha, kunye neDola/Isixa seCrypto sokurhoxiswa ngakunye.
   • Asethi kunye neBlockchain Network (umzekelo, USDT on Tron TRC-20, USDC on Ethereum ERC-20, okanye Bitcoin BTC).
   • Idilesi yakho yeWalethi yokuThumela.
   • Idilesi yeSipaji yokuFumana / iDiphozithi yoMkhohlisi (umzekelo, 0x71C... okanye TX9k...).
   • I-64-hexadecimal Transaction Transaction eneempawu ezingama-64 (TxID / TxHash) kulo lonke ugqithiselo olunye.
5. **Iskrini kunye nesikrini-rekhoda iFake Trading App / Iwebhusayithi ngelixa usenako ukungena **:
6. Rekhoda ividiyo eqhubekayo ye-smartphone ebonisa:
   • I-*URL echanekileyo / igama lesizinda ** yeqonga lobuxoki kwibha yedilesi yesikhangeli.
   • Umgunyathi wakho **I-akhawunti yeDashboard / inombolo ye-UID **, imbali yorhwebo yobuxoki, kunye ne- "Idiphozithi" isikrini esibonisa idilesi yesipaji kwiqonga elinikezelwe kuwe.
   • ** "Inkonzo yoMthengi / iNkxaso ye-VIP" yengxoxo yefestile ** ngaphakathi kweqonga apho bafuna i-15 ukuya kwi-30% yerhafu yerhafu okanye i-AML (ngokukodwa nayiphi na idilesi ye-wallet abayibonelela ngokuhlawula "irhafu," njengoko eso sikhwama sibekwe esweni ngokunyanisekileyo yi-syndicate namhlanje).
7. Thumela ngaphandle yonke i-WhatsApp, iTelegram, okanye iSiginali yengxoxo yokugcina:
8. ** Kwi-WhatsApp **: Vula incoko kunye ne-scammer -> cofa igama labo leprofayili phezulu -> skrolela ezantsi kwaye ucofe ** Incoko yokuthumela ngaphandle -> Bandakanya iMedia ** -> gcina .zip ugcino kwikhompyuter yakho okanye kuGoogle Drive/iCloud. Kwakhona screenshot zabo ** inombolo yefowuni, iifoto iprofayile, kunye nawaphi na amanqaku ilizwi okanye ushicilelo lwefowuni yevidiyo **.
9. KwiTelegram: Vula ** iDesktop yeTelegram** ekhompyutheni -> vula incoko -> cofa i **amachaphaza amathathu (⋮) kwikona ephezulu ekunene -> Thumela imbali yengxoxo ** -> khangela zonke iibhokisi (Iifoto, Imiyalezo yelizwi, imiyalezo yevidiyo) kwaye uthumele njenge HTML/JSON. Kwakhona cofa iprofayile yabo ukujonga ukuba inombolo yabo Isazisi soMsebenzisi weTelegram siyabonakala (ngokungafaniyo @usernames abaqhatha abatshintsha yonke imihla, inombolo ye-ID yoMsebenzisi weTelegram isisigxina).

Inyathelo 2: Ungayilanda njani imali yakho ebiweyo kwi-blockchain kwaye ucele iTether kaxakeka (USDT) / Utshintshiselwano ngumkhenkce¶

Ngokungafaniyo nemali ebonakalayo efakwe kwisutikheyisi, yonke iBitcoin (BTCEthereum (ETH / ERC-20), kunye neTron (TRX / TRC-20) intengiselwano irekhodwa ngokusisigxina kwileja yoluntu engenakuguquleka. Kwanamashishini amdaka aphucukileyo kufuneka ekugqibeleni ahambise iimali ezibiweyo ngenye yeendawo ezimbini apho i-asethi inokugcinwa ngumkhenkce ngokuthotyelwa komthetho:

I-Chokepoint 1: I-Centralized Stablecoin Iikhontrakthi ze-Smart (Tether USDT kwaye Circle USDC)¶

Ngaphezulu kwe-80 yepesenti ye-Pig Butchering scams ifuna intlawulo nge-USDT (Tether)* kwi-Tron (TRC-20okanye Ethereum (ERC-20) blockchain, okanye USDC (isangqa). - Yintoni amaxhoba amaninzi angayaziyo kukuba zombini i-Tether (USDT)* kunye Yenza isangqa (USDC) iikhontrakthi ze-smart ziqulethe umsebenzi wolawulo owakhelwe ngaphakathi obizwa ngokuba addBlackList(address) / freeze(address). - Xa iTether Limited okanye iSangqa ifumana isicelo sokumisa umthetho ongxamisekileyo esibonisa ukuba ibiwe USDT okanye USDC uhleli ngaphakathi kwedilesi yesipaji ye-syndicate engabanjwanga (0x... okanye T...), Tether can cryptographically freeze that wallet address on the blockchain so the scammer can never move or spend the USDT, and upon court forfeiture order, Tether can burn (destroyBlackFunds) the frozen tokens in the scammer's wallet and mint replacement USDT ubuyele ngqo kwixhoba.

I-Chokepoint 2: I-Centralized Exchange (CEX) i-Deposit Consolidation Wallets¶

Ukuguqula ibiwe BTC, ETH, okanye USDT kwimali ye-fiat (i-Yuan yaseTshayina, i-US Dollars, i-Thai Baht, okanye i-UAE Dirhams), ama-scammers adlulisa imali nge-2 ukuya kwi-6 ye-wallet ephakathi "yehop" ngaphambi kokuba ifakwe kwi- Idiphozithi yeDiphozithi kwi-Centralised Exchange (efana ne-Binance, i-OKX, i-HTX / i-Huobi, i-Bybit, i-Gate.io, i-Krain, i-Krain, i-Krain, i-Krain, i-Krain, i-Krain, i-Krain, i-Krain, i-Krain).

Indlela yokulandelela eyakho TxID kwimizuzu emi-5 usebenzisa abahloli basimahla bebhloko yoluntu¶

1. Ncamathisela iHash yakho yeNtengiselwano (TxID) kumhloli webhloko osemthethweni wothungelwano:
2. Ethereum (ETH, USDT-ERC20, USDC): Ndwendwela etherscan.io
3. Tron (TRX, USDT-TRC20): Ndwendwela tronscan.org
4. ** bitcoin (BTC)**: Ndwendwela mempool.space okanye blockchair.com
5. I-Visual Multi-Hop Graph Tracer (inqanaba lasimahla): Tyelela breadcrumbs.app okanye metasleuth.io kwaye uncamathisele idilesi yediphozithi yakho ye-scammer ukuvelisa idayagram ebonakalayo ebonakalayo ebonisa yonke i-hop.
6. Landela i-hops ukuya phambili kwidilesi yakho yeDiphozithi:
7. Cofa kwi Idilesi yediphozithi yeScammer's (To: umhlaba) kwintengiselwano yakho yoqobo, emva koko ucofe i Token Transfers (ERC-20 / TRC-20) ithebhu yokubona apho umkhohlisi ahambise khona iithokheni zakho ngokulandelayo.
8. Landela ukhutshelo olukhulu oluphumayo 1 ukuya 4 utsibela phambili ude ubone nokuba:
   • I-Wallet ephezulu "Ukubamba / i-Piggybank": Isipaji esingabhalwanga okwangoku sibambe i-\(50,000 ukuya kwi-\)10,000,000+ kwi-static USDT okanye USDC (ithagethi ephambili ye-Tether / Circle Smart-Contract Freeze).
   • Idilesi yeDiphozithi yoTshintsho oluphawulweyo: Kwi-Etherscan okanye iTronscan, idilesi yokugqibela yendawo iya kubonisa ngequbuliso i-nametag yoluntu njenge Binance 14, OKX 7, HTX 2, okanye Bybit. Iwallet inyathelo elinye kwangoko ngaphambili (From:) ebhalwe exchange hot wallet yi-scammer's personalIdilesi yeDiphozithi yoMthengi* kolo tshintshiselwano (olungqamana neakhawunti yangaphakathi enamaxwebhu e-KYC, iilog ze-IP, kunye neemali ezinokuqalwa).

Inyathelo lesi-3: Unyanzeliso lomthetho olusemthethweni kunye noluhlu lokunika ingxelo ngotshintshiselwano (Ngomyalelo ophambili ngqo)¶

Ii-arhente zogcino-mthetho zifumana amawaka ezikhalazo ezingacacanga mihla le; Izikhalazo ezithi nje "Ndiphulukene needola ezingama-80,000 kwintombazana egama linguSophia kuWhatsApp" zibekwe emgceni kangangeenyanga. Ngokwahlukileyo koko, ingxelo ecwangcisiweyo enesihloko esithi "ISICELO ESIXAMISEKILEYO SE-CRYPTO SIMANZI: $80,000 USDT-TRC20 Okwangoku ihleli kwi-Wallet engabanjwanga [Idilesi] / iGcinywe kwi-Binance nge-TxID [Hash]" inika ii-arhente zolwaphulo-mthetho lwe-cyberime into abanokuyimisa ngenjikalanga efanayo.

1. EUnited States Amaxhoba¶

• Iziko le-FBI le-Intanethi yesikhalazo soLwaphulo-mthetho (ic3.gov): Fakela ingxelo ngoko nangoko apha https://www.ic3.gov. Beka zonke IiHashes zentengiselwano (TxIDs), Iidilesi zesingxobo seScammer, kunye nayo nayiphi na Iidentified Destination Exchange (umzekelo, iBinance/OKX/Tether) kwimiba yentengiselwano yezemali ezinikeleyo ukuze iFBI's Recovery Asset Team (RAT) kunye Virtual Asset Unit (VAU) automated parsers isalathisi ngokukhawuleza iidilesi zesipaji.
• United States Secret Service (USSS) Field Office & Local Police Report: Call your regional U.S. Secret Service Cyber Fraud Task Force field office directly by phone (listed at secretservice.gov/contact/field-offices) AND walk into your local municipal police department to get a formal Police Incident Report Number (you will need this police case number to trigger an emergency freeze at Binance, OKX, or Tether).
• Commodity Futures Trading Commission (CFTC) & SEC: File a whistleblower/fraud tip at cftc.gov/complaint kwaye sec.gov/tcr.

2. United Kingdom, Canada, European Union, and Australia Victims¶

• United Kingdom: File an immediate report with Action Fraud (actionfraud.police.uk or call 0300 123 2040) and request an NFRC (National Fraud Intelligence Bureau) Crime Reference Number. If bank transfers were involved within the UK, invoke the Authorized Push Payment (APP) Fraud Reimbursement / Contingent Reimbursement Model rules with your bank immediately.
• Canada: File a police report with your local police service's Financial Crimes Unit AND submit all wallet addresses to the Canadian Anti-Fraud Centre (antifraudcentre-centreantifraude.ca).
• Australia: Report immediately through ReportCyber (cyber.gov.au) and the National Anti-Scam Centre (scamwatch.gov.au), and contact your bank's scam escalation team.
• European Union: File a criminal complaint (Anzeige / Plainte) at your local national police station to obtain a case reference number for Europol / national cyber units.

3. Direct Notification to Destination Exchanges & Stablecoin Issuers (With Your Police Case Number)¶

Once you have your Police Report Number and IC3 Confirmation Number, submit a direct Victim Freeze Support Ticket to the compliance department of the exchange where your traced funds landed (or to Chainalysis / TRM Labs public victim portals): - Binance Law Enforcement / Victim Freeze Request: Open a support chat at binance.com -> Report Stolen Funds -> provide the exact Deposit TxID, the Binance Deposit Address, and your Police Report + Officer Contact Email so Binance places a temporary 7-day courtesy compliance hold while awaiting the officer's formal request. - OKX / HTX / Bybit / Kraken / Coinbase: Email or submit a ticket through their official Law Enforcement / Fraud Report portal with your traced TxID chain and investigating officer email.

Step 4: Securing your devices, real accounts, and identity after the scam¶

During a Pig Butchering scam, victims often gave the scammer far more than just cryptocurrency:

• Did you upload a photo of your Passport, Driver's License, or Social Security Number during "KYC Verification" on the fake trading site? If yes, the syndicate now holds a high-resolution scan of your government ID and will sell it or use it for identity fraud. Immediately freeze your credit files with Equifax, Experian, and TransUnion using our identity theft response guide.
• Did you install an app on your iPhone using an "Enterprise Developer Profile," "WebClip," or Apple TestFlight? Go to Settings > General > VPN & Device Management on your iPhone right now, tap any listed Enterprise App / Configuration Profile, and tap Delete Profile / Delete App.
• Did you download an .apk file onto your Android phone outside the Google Play Store? Uninstall the app immediately, turn on Google Play Protect, and if you granted the app Accessibility permissions, back up your photos and factory-reset the phone (see our stalkerware, spyware, and keylogger detection on phones isikhokelo).
• Did the scammer ever ask you to install AnyDesk, TeamViewer, RustDesk, or screen-share your computer? Follow our tech support pop-up scam and remote desktop removal guide to purge unattended remote access agents, and rotate the passwords and 2FA on your real bank and email accounts.
• Consult a licensed Certified Public Accountant (CPA) or tax attorney regarding Tax Deduction / Theft Loss Rules: In some jurisdictions (such as under IRS Internal Revenue Code Section 165©(2) in the United States for transactions entered into for profit, see IRS Chief Counsel Memorandum 202511015), documented victims of investment/Pig Butchering fraud where the taxpayer had a profit motive may qualify to claim a Theft Loss Deduction on their tax return if they kept their police report, IC3 filing, and transaction records.

How to recognize and block the "Fake Crypto Recovery Agent" (The Second Scam)¶

Within days or weeks of losing money to a Pig Butchering scam, you will be targeted by the Recovery Room Scam:

1. How they find you:
2. Direct Re-Targeting by the Original Syndicate: Three weeks after stealing your money, the exact same scam call center messages you on WhatsApp or email pretending to be "Interpol Cyber Division," "The Global Blockchain Asset Recovery Commission," "Tether Refund Bureau," or a "Law Firm / Cyber Forensics Company." They already know the exact dollar amount you lost and your wallet address (because they are the ones who stole it), which makes them sound magically convincing.
3. Social Media Bot Swarms: If you comment on YouTube, Reddit, X (Twitter), or Facebook about being scammed, automated bots immediately reply: "I lost $90k too, but thank God @Cyber_Trace_Recovery_Official on Telegram/Instagram recovered 100% of my funds in 48 hours."
4. How the Recovery Scam works:
5. The "recovery specialist" shows you a fake screenshot claiming they "located and froze your stolen funds inside a smart contract / darknet escrow wallet," and asks you to pay $1,500 to $5,000 upfront for "smart-contract activation software," "bridging liquidity," or "legal bond insurance", or asks you to import a "recovery wallet" seed phrase and deposit 2,000 dollars of ETH for gas fees (which an automated sweeper bot steals in 0.5 seconds).
6. Umthetho ongaqhawukiyo:
7. Ayikho i-hacker yabucala, inkampani yokubuyisela, okanye ifem yophando eMhlabeni inamandla obuchule okubuyisela umva intengiselwano ye-blockchain okanye iqhekeze isitshixo sabucala somkhohlisi.
8. Amaziko omthetho (i-FBI, iNkonzo yeMfihlo, i-Action fraud, i-Europol) kunye neTether/Circle UNGAZE uhlawulise amaxhoba umrhumo, irhafu, okanye idiphozithi yegesi ye-cryptocurrency ukubuyisela iimali ezithinjiweyo.

Imibuzo edla ngokubuzwa¶

Izikhokelo ezinxulumeneyo¶

• I-Cryptocurrency wallet drain kunye nebinzana lembewu yokulalanisa
• Ukophulwa kweakhawunti yebhanki kunye nokudluliselwa kwefowuni okungagunyaziswanga
• I-deepfake voice clone kunye ne-AI yokulinganisa inkohliso
• Ukubiwa kwesazisi kunye nokubuyiswa kwetyala
• Inkxaso yeTech-up scam kunye nokususwa kwedesktop ekude
• I-Sextortion kunye ne-blackmail kwi-intanethi
• Uluhlu lweenombolo zexesha likaxakeka

Imithombo ijongiwe¶

• I-Federal Bureau of Investigation (FBI) Iziko le-Intanethi yesikhalazo soLwaphulo-mthetho (IC3) (eUnited States): * I-Cryptocurrency Investment Fraud ("I-Pig Butchering") Izaziso zeNkonzo kaRhulumente, Iinkqubo zeQela lokuBuyisa (i-RAT), kunye ne-Fake Crypto Recovery Schemes Isilumkiso *.
• Uthungelwano loNyanzeliso loLwaphulo-mthetho lwezeMali (i-FinCEN) (iSebe lase-United States likaNondyebo): I-FinCEN Alert FIN-2023-Alert005: Ubuqhophololo boTyalo-mali obuNgqongileyo obuNgqongileyo boTyalo-mali oluQhelekileyo eyaziwa ngokuba yi "Pig Butchering" (Iiflegi eziBomvu kunye neNkqubo yokuPhendula ngokukhawuleza).
• IKomishoni yoRhwebo lweXesha loRhwebo (CFTC) kunye neKomishoni yoKhuseleko kunye noTshintshiselwano (SEC) (eUnited States): I-Ofisi yeMfundo yabaTyali-mali kunye neSilumkiso seNkxaso: UBuqhetseba boTyalo-mali loBudlelwane kunye neeFirms zoBuqhophololo zokuBuyisa i-Asethi.
• IZiko leSizwe loKhuseleko lwe-Cyber ​​(NCSC) kunye noMlawuli weeNkqubo zeNtlawulo (PSR) (eUnited Kingdom): *Intlawulo eGunyaziweyo yokuPhuhliswa (i-APP) yeMithetho yokuBuyiselwa koBuqhophololo kunye neSikhokelo soBuqhophololo boTyalo-mali *.
• I-Ofisi yeZizwe eziManyeneyo ejongene neZiyobisi kunye noLwaphulo-mthetho (i-UNODC) kunye ne-INTERPOL: ULwaphulo-mthetho oluQuquzelweyo lweZizwe eziManyeneyo kunye neeCasinos, ubuqhophololo be-Cyber, kunye noHlahlelo lweMisebenzi yoTyalo-mali olungeyonyani.