Pig Butchering Scams: Structure and Investigation
3 min read · Last updated
Relationship investment fraud — widely known as pig butchering — combines sustained social engineering with a fabricated trading platform.
The financial component is only the final stage of a structured, industrialised process.
- 1Cold contact
- 2Relationship building
- 3Test deposit
- 4Simulated returns
- 5Capital escalation
- 6Exit
Contact and cultivation
Initial contact appears accidental: a mistaken message, a professional connection, a dating match. Weeks of ordinary conversation precede any mention of investment.
The demonstration cycle
A small deposit is followed by a visible profit and a successful small withdrawal. This single event converts scepticism into confidence and drives the subsequent escalation.
- ›Small initial deposit
- ›Displayed gain on the dashboard
- ›One genuine small withdrawal
- ›Rapid escalation of deposit size
The exit
When deposits stop growing, withdrawal is blocked behind fees, taxes or compliance deposits. Contact ends once the victim stops paying.
Secondary fraud
Victims are frequently approached afterwards by a supposed recovery service promising guaranteed restitution. This is a second fraud targeting the same person.
Investigative approach
Investigation combines on-chain clustering of deposit addresses with infrastructure mapping and preserved communications, which links individual victims into one documented network.
Case intake is confidential and handled by email at cybersec@securida.info.
Frequently asked questions
- Why do the early withdrawals succeed?
- They are a deliberate investment by the operator. A small genuine payout produces the trust needed for much larger deposits.
- Are these operations run by individuals?
- Usually not. They are organised networks with separate teams for contact, platform operation and laundering.
- Cyber Intelligence
- Blockchain Investigations
- Digital Forensics
The SEQRIA Research Team is the investigative research unit of SEQRIA, specialising in cyber intelligence, blockchain investigations and digital forensics.
Its work focuses on digital asset investigations, blockchain transaction analysis, cyber incident investigations and technical evidence collection. Published material is reviewed internally before release.
About the research teamRelated briefings
Request Confidential Consultation
SEQRIA provides technical investigation, forensic analysis and recovery assistance. Outcomes are never guaranteed. Case intake is confidential and handled by email.
cybersec@securida.info