Crypto pig-butchering scam activity is accelerating into what researchers and law enforcement call a national security concern, as organized networks groom victims online and route funds through tightly controlled crypto wallets. A new analysis shows the model expanding rapidly even while average payments shrink—signaling a broader victim pool and more resilient operations.
Key Points
According to Chainalysis, crypto scams sent close to $10 billion on-chain in 2024. Within that total, pig-butchering revenue rose nearly 40% year over year, deposits into these schemes climbed more than 200%, and average deposit size fell roughly 55%. The data points to a playbook that targets many more people for smaller amounts, making the crypto pig-butchering scam both lucrative and harder to trace.
The numbers also suggest the networks are adapting. With lower average deposits spread across a larger number of victims, the scams can blend into normal on-chain activity while still generating sizable flows for operators.
The data behind a fast-changing fraud
Chain analysts and investigators say the crypto pig-butchering scam has matured beyond isolated actors. The 2024 on-chain picture indicates industrial-scale execution: more deposits, more frequent transfers, and a design that deliberately obscures the size of any single payment.
Those shifts complicate tracing and recovery. Even as average deposits shrink, the sheer volume of transactions sustains overall revenue growth. That pattern helps explain why the crypto pig-butchering scam continues to expand despite increased public awareness.
How the networks operate
Investigators report that these are organized criminal enterprises, not solo fraudsters. Some networks reportedly use trafficked workers inside compounds to call, message, and manage victims at scale. Victim grooming can last weeks or months, converting emotional manipulation into a steady revenue stream that feeds the crypto pig-butchering scam.
Research and reporting have tied parts of the activity to regions in Southeast Asia, with funds often moving through concentrated wallets controlled by the groups. That concentration allows operators to centralize proceeds even as they distribute outreach and intake across many accounts.
Inside the crypto pig-butchering scam playbook
The model relies on trust-building before the sales pitch. Fraud teams cultivate relationships on social platforms and messaging apps, then steer targets to “investment” sites that mimic legitimate offerings. By the time the ask arrives, victims often believe they’re dealing with a friendly advisor rather than a scammer.
Because the approach stretches over time, the crypto pig-butchering scam can convert smaller, repeated deposits rather than one large transfer—precisely the pattern showing up in the latest data.
AI and dark service markets supercharge scale
Law enforcement and analysts warn that generative AI and service marketplaces are making the pig-butchering machine cheaper and faster to run. AI tools create convincing chatbots, voice clones, and fake profiles. Online markets sell domain services and hosting that let operators spin up lifelike investment websites at speed.
Together, these tools allow a single team to engage more targets at once, sustain longer conversations, and iterate scripts that convert. The result is a wider funnel feeding the crypto pig-butchering scam while keeping per-victim amounts relatively small.
Sanctions target infrastructure behind the crypto pig-butchering scam
Authorities have begun striking at the enabling infrastructure. The U.S. Treasury’s Office of Foreign Assets Control (OFAC) sanctioned a Philippines-based firm, Funnull Technology Inc., and its alleged administrator for supplying internet infrastructure and tools used by fraud networks.
Chainalysis and other researchers tied Funnull’s services to sites used in pig-butchering, and U.S. losses linked to those operations were said to exceed $200 million in some investigations. The sanctions are designed to cut off access to web services scammers use to appear legitimate, disrupting the backbone that supports the crypto pig-butchering scam.
Exchanges and issuers help freeze illicit funds
Private-sector collaboration has produced tangible blocks. In coordination with Asia-Pacific law enforcement, Chainalysis, exchanges, and stablecoin issuers helped trace and freeze nearly $47 million in USDT that scammers had consolidated into a few wallets. Earlier actions in other cases have led to much larger freezes, showing how industry cooperation can interrupt cash-outs before criminals convert crypto to fiat.
These freezes also underscore a key insight: even as intake happens in many small amounts, the proceeds often converge into centralized wallets—creating choke points where the crypto pig-butchering scam can be disrupted.
Why is the risk escalating
Officials and analysts view the crypto pig-butchering scam as a multi-front threat. It exploits human relationships online, relies on coerced labor in some reported cases, and leverages cross-border infrastructure. The combination strains traditional enforcement and raises the stakes from consumer protection to national security.
The operational evolution—more victims, smaller deposits, higher aggregate volume—complicates detection. At the same time, better coordination among researchers, exchanges, and stablecoin issuers is demonstrating that targeted freezes and infrastructure sanctions can meaningfully raise costs for operators.
Reactions and ongoing actions
- Chain analysts: Data indicates the crypto pig-butchering scam is scaling via many small deposits, with revenue still rising despite lower average amounts per victim.
- Law enforcement: Emphasis on dismantling support infrastructure, as shown by OFAC’s action against Funnull Technology Inc. and its alleged administrator.
- Industry partners: Exchanges and stablecoin issuers are working with investigators to trace funds, consolidate intelligence, and execute freezes like the nearly $47 million in USDT blocked with APAC agencies.
These responses reflect a broader strategy: pressure the tooling, pressure the money flows, and pressure the consolidation points that keep the networks profitable.
What the trendline implies
The most recent figures paint a clear picture. The crypto pig-butchering scam is moving toward a high-volume, low-ticket model that spreads risk and camouflages activity. AI lowers the cost of outreach and deception. Service marketplaces shrink the time it takes to stand up convincing sites. And centralized wallets remain the Achilles’ heel that investigators aim to exploit.
Continued sanctions, targeted freezes, and cross-border coordination will be central to slowing the model. The trajectory will be measured in whether deposit counts plateau, whether average deposit sizes stabilize, and how frequently investigators can identify and choke off the consolidation of funds.
Conclusion
The crypto pig-butchering scam has evolved into an organized, scalable enterprise that investigators now link to national security risk. Chainalysis estimates show close to $10 billion sent to scams on-chain in 2024, with pig-butchering revenue up nearly 40%, deposits up more than 200%, and average deposits down roughly 55%—a signature of many victims paying smaller amounts.
Authorities are answering with infrastructure sanctions and coordinated freezes, including the OFAC designation of Funnull Technology Inc. and a multi-agency effort that blocked nearly $47 million in USDT. As organized networks lean on AI and service markets to expand, the countermeasure playbook—sanction enablers, trace flows, and freeze funds—will define the next phase in containing the crypto pig-butchering scam.
FAQ’s
What is the crypto pig-butchering scam, and how does it work?
It’s a long‑con investment fraud where scammers groom victims on social/messaging apps, then steer them to fake trading sites. Victims make repeated deposits and are blocked from withdrawing.
How big is the problem right now?
Chainalysis estimates close to $10B sent to crypto scams on‑chain in 2024. Pig‑butchering revenue rose ~40% YoY, deposits jumped 200%, and average deposit size fell ~55%.
Why is it viewed as a national security risk?
Investigators link it to organized networks—sometimes using trafficked workers—operating across borders. The U.S. sanctioned Philippines‑based Funnull Technology Inc. for supplying enabling infrastructure.
What are authorities and companies doing, and how can I protect myself?
OFAC sanctions and industry coordination have frozen funds (e.g., $47M USDT). Avoid unsolicited investment pitches, verify domains/apps, don’t move funds off trusted platforms, and report to law enforcement and your exchange immediately.
