Crypto Romance Scams ('Pig Butchering'): The 9-Stage Playbook

It starts with a low-stakes opening: a wrong-number text, a friendly reply on a dating app, a professional connection request, a comment on a post. The profile is attractive, successful, and slightly aspirational, travel, food, a dog, a gym. Within days you're moved off the original platform to WhatsApp, Telegram, or Signal, because platforms detect scam patterns and private apps don't. Then comes weeks of genuinely pleasant conversation with no ask at all. Good morning messages, voice notes, interest in your life. This stage exists to make stage five feel like a favour between friends.

Money enters as scenery, not a proposal. An offhand mention of a good month, a screenshot of gains "my uncle manages", a comment that they trade a little on the side. If you show curiosity, they retreat, which makes you push. Then the offer arrives shaped as reluctance: they'd rather not mix money with something personal, but if you're interested they'll walk you through it. You are never sold to. You are permitted in. That inversion is the single most reliable marker of this scam.

You're sent to a slick trading app or site, often an unlisted web app, a "beta" link, or something requiring a configuration profile to install. It looks professional: charts, order books, a support chat, a referral code they give you. The numbers on your screen are simply written by the operator. Tell-tale details: the app is not in the official app store, the domain was registered recently, the company name matches no regulator's register, support is only reachable inside the app, and the deposit path is crypto sent to an address they provide rather than a regulated on-ramp in your name.

You deposit a small amount. It "grows". You withdraw a modest sum and it genuinely arrives, this is the hinge of the whole operation, and it is paid out of your own or another victim's deposits. Now trust is evidence-backed and you scale up, often with savings, a loan, or a remortgage. When you try to withdraw the large balance, the walls appear: a tax to release funds, a "verification fee", an account upgrade, a frozen account requiring a deposit to unlock, a compliance officer demanding a percentage. Every payment unlocks the next demand. Nothing is ever released.

After the loss, a "recovery" service contacts you: a blockchain investigator, a law firm, a fund promising to claw the money back for an upfront fee. These are frequently run by the same networks using leaked victim lists. Legitimate recovery goes through your bank, your national fraud reporting body, and law enforcement, never through an upfront fee to a stranger who found you.

Act in this order, today. Stop all payments, including any fee that supposedly releases your balance. Screenshot everything: the chat, the profile, the platform, the wallet addresses, the transaction hashes. Contact your bank and the exchange you bought crypto through, funds occasionally can be frozen if the report is fast. Report to your national fraud line (in the US, the FBI's IC3 and the FTC; in the UK, Action Fraud; elsewhere, your police cybercrime unit) with those wallet addresses and hashes, which are the evidence investigators can actually use. Then tell one person you trust. The isolation is part of the mechanism, and breaking it is what stops stage nine.