In the first four months of 2026, authorities took more action against “pig-butchering” scams than they had in the previous ten years combined. By April 29th, a large operation led by Dubai Police resulted in 275 arrests at nine locations. And, in the same period, the U.S. Department of Justice announced two other major crackdowns on this type of fraud.
Along with the $15 billion in Bitcoin seized from Cambodia’s Prince Group in October 2025, these efforts mark the biggest, most consistent crackdown law enforcement has ever launched against investment scams that use romantic connections to trick people.
What is Pig-Butchering, and why does it thrive in crypto
“Pig-butchering,” originally a Chinese term meaning *sha zhu pan*, has evolved from a few separate scams into a large-scale, organized psychological operation. Instead of quick, typical cybercrimes, these scams are carefully planned to build a victim’s trust over time before ultimately stealing their money. They’re designed to slowly “fatten up” the victim emotionally and financially before the final betrayal.
In 2026, this follows a sophisticated, three-tier operational playbook:
- The Grooming (The Approach): Scammers deploy AI-enhanced personas across dating apps, LinkedIn, or encrypted messaging platforms. They don’t pitch immediately; they build emotional or professional leverage over weeks, often using deepfake audio or video to verify their “identity.”
- The Fattening (The Manipulation): The “trap” is a fraudulent investment platform that mimics real-time market data. Victims are encouraged to deposit crypto and are often shown massive, fabricated gains. To cement the illusion, syndicates often allow victims to withdraw small amounts of “profit” early on, triggering the psychological “sunk-cost” trap that leads to life-savings-level deposits.
- The Slaughter (The Exit): When a victim attempts to liquidate their position, the platform snaps shut. The organization demands “taxes,” “security fees,” or “KYC deposits” to release the funds, a final squeeze before the scammers vanish and the site goes dark.
This shows a deceptive economic system that’s growing and becoming more complex quicker than authorities can shut it down.
This map provides a complete overview of the enforcement actions taken in 2026, showing what areas were targeted, what areas were overlooked, and what future actions are planned.
March 16: Operation Atlantic and the approval-phishing pivot
In early 2026, authorities took down a new type of crypto scam. On March 16th, the U.S. Secret Service, along with police and financial agencies in the UK and Canada, began Operation Atlantic. This week-long effort aimed to find and protect people who were losing money – or were about to lose it – through a scam called “approval phishing,” where criminals trick users into giving them access to their cryptocurrency.
As an analyst, I’m seeing a concerning shift in crypto scams. We’re moving beyond the traditional ‘pig butchering’ method where victims send funds to fake exchanges. Now, scammers are increasingly using what I call ‘approval phishing.’ Instead of directly requesting a transfer, they’re tricking people into authorizing wallet permissions – essentially giving the scammer control to spend their crypto. The really insidious part is they often wait weeks, even months, to drain the wallet, making it difficult for victims to connect the initial interaction to the loss. It’s a clever way to bypass immediate red flags and make detection much harder.
Investigators uncovered a large-scale fraud operation impacting victims in over 30 countries. They tracked down over 20,000 cryptocurrency wallets connected to the fraud, successfully froze $12 million in stolen money, and identified an additional $33 million tied to investment scams. They also shut down over 120 websites used in the operation. Blockchain analysis firm Chainalysis helped by providing instant tracking of cryptocurrency transactions, working alongside investigators at the National Crime Agency in London.
April 23: The Scam Center Strike Force hits Shunda
Just last month, the Department of Justice took its strongest action yet against a complex cryptocurrency scam known as “pig butchering.” A special task force created in 2025 by the DOJ, FBI, and Secret Service—focused on these types of scams originating in Southeast Asia—filed criminal charges against two Chinese citizens, Huang Xingshan (also known as “Ah Zhe”) and Jiang Wen Jie (also known as “Jiang Nan”). They are accused of running a scam operation from a compound in Min Let Pan, Burma.
The amount of evidence found revealed just how large and organized these criminal operations had become. Investigators examined over 8,000 phones and 1,500 computers taken from the Shunda compound after it was seized by the Karen National Liberation Army in November 2025. Jiang was in charge of the team that targeted Americans, and one of his team members successfully scammed a single American out of more than $3 million using a fake investment website. This theft was seen as a major accomplishment within the organization.
On April 23th, authorities announced a major crackdown on illegal activity. They shut down 503 fraudulent investment websites and froze over $701.96 million in cryptocurrency used for money laundering. In an unprecedented move, they also seized a Telegram channel with over 6,000 members that was being used to trick people into forced labor in Cambodia by falsely advertising high-paying jobs.
April 29: The Dubai 276, and what the headline number misses
As a researcher following this case, I was particularly struck by the rapid follow-up to the Shunda announcement. Just six days later, the Department of Justice revealed an incredible level of international collaboration. The FBI worked alongside Dubai Police and China’s Ministry of Public Security to take down a significant operation, resulting in at least 276 arrests and the closure of at least nine scam centers. The vast majority of those arrested – 275 individuals – were apprehended by Dubai Police, with Thailand’s Royal Thai Police contributing by arresting one additional fugitive.
Six people – Thet Min Nyi (also known as “Pixy”), an individual from Myanmar, along with three Indonesian citizens named Wiliang Awang, Andreas Chandra, and Lisa Mariam – have been charged with fraud and money laundering in California. Two additional people involved in the scheme are still at large. The charges relate to three companies: Ko Thet Company, Sanduo Group, and Giant Company, which were allegedly used to carry out the scams.
The results of Operation Level Up, a program started in January 2024 by the FBI and Secret Service, are particularly striking. By March 2026, the program had alerted 8,935 people who had been defrauded in cryptocurrency investments. Importantly, 77% of these individuals didn’t realize they were being scammed, and the initiative is credited with preventing an estimated $562 million in losses. Sadly, the emotional toll of these scams has been severe, leading to 93 victims being connected with FBI specialists for suicide prevention support.
That last number is the one that should appear in every coverage of pig-butchering and rarely does.
The laundering machine: Why arrests don’t stop flow of Pig Butchering scams
Here’s the structural problem these operations don’t solve.
A recent report from Chainalysis shows that money laundering networks using Chinese languages significantly increased their activity in 2025, handling around $16.1 billion – roughly $44 million each day – through over 1,799 digital wallets. These networks now consistently process more than 10% of the funds stolen in romance scams (often called ‘pig butchering’). This rise coincides with a decrease in the use of traditional cryptocurrency exchanges, likely because exchanges have the ability to freeze suspicious funds.
The real power behind these networks was the infrastructure built by Huione Group, a Cambodian financial company. Over four and a half years, they handled over $98 billion in cryptocurrency, but also laundered at least $4 billion from illegal activities. This included $37 million stolen by North Korean hackers, $36 million from cryptocurrency investment scams, and $300 million from other cyber fraud. In October 2025, the U.S. government cut them off from the American financial system under the USA PATRIOT Act.
Shutting down Huione had an impact, but Chainalysis found that those using it quickly moved elsewhere. After the U.S. Treasury imposed sanctions, Telegram removed some of Huione’s channels, and Cambodia canceled its license, the people offering services through the exchange simply started advertising on different platforms.
The vendors are the network. The platforms are interchangeable.
The Prince Group precedent: $15 billion and still operating
The Prince Group’s work in October 2025 was a key starting point, and its lasting impact throughout 2026 clearly demonstrates just how strong and adaptable this system is.
The Justice Department has initiated its largest-ever asset seizure, targeting around $15 billion in Bitcoin held by the U.S. government. This action coincides with the indictment of Chen Zhi, a Cambodian national and head of Prince Holding Group, on charges of conspiracy to commit wire fraud and money laundering. These charges stem from a large-scale scam involving forced labor in Cambodia. At its busiest, Prince Group reportedly made over $30 million each day through fraudulent cryptocurrency investments, with individual call centers earning hundreds of millions, and even billions, of dollars per year.
Investigators have seized a Bitcoin stash worth about $15 billion – 127,271 coins – that hadn’t been moved since December 2020. The Justice Department tracked the coins to 25 digital wallets and discovered they had been moved through a network of businesses used to hide the source of the funds. These businesses converted the Bitcoin and stablecoins gained from scams into traditional money, then used that money to buy new cryptocurrency, which was then funneled through fake companies, gambling sites, and cryptocurrency mining operations to disguise its origins.
Chen Zhi is still out of reach for U.S. authorities. He was arrested in Cambodia on January 6, 2026, and quickly stripped of his Cambodian citizenship by order of the king. He was then sent to Beijing, preventing the U.S. from bringing him to face charges here.
As a crypto investor, it’s really disturbing to see reports that scam operations are *still* thriving in Cambodia. Apparently, there are over 250 of these factories running, holding over 100,000 people against their will and making billions. What’s even more concerning is that the people protecting these scams don’t seem to be stopping anytime soon. It’s also worrying to see that some crypto projects, like World Liberty Financial, have had to explain their connections to groups linked to these shady networks. It makes you think twice about where your money is actually going.
The seized funds pipeline: Where the money goes next
Often missed in discussions of these enforcement actions is what happens to the seized assets. For example, in January 2026, the U.S. government sent $225 million in USDT—funds taken from a romance scam—directly to Tether. This transaction, completed on the Ethereum network without using a cryptocurrency exchange, was one of the largest of its kind involving federal law enforcement.
I’m seeing a new trend in how the government handles seized stablecoins. Instead of going through exchanges, they’re dealing directly with the companies that issued them. It looks like this is becoming the standard process, and we’ll probably see it play out a lot more as the $701.96 million they froze back in April gets processed. Basically, they’re cutting out the middleman and going straight to the source.
The 2026 evolution: AI personas and decentralized off-ramps
Things are changing in how crypto scams work. Chainalysis now estimates these scams caused over $17 billion in losses in 2025. One major trend is a huge increase – over 1,400% – in impersonation scams, partly fueled by artificial intelligence. Scams using AI are proving much more profitable, earning 4.5 times more money per scam than traditional methods. The average amount stolen in a scam also jumped significantly, rising from $782 to $2,764 in 2025 – a 253% increase.
The numbers reveal a significant rise in cryptocurrency scams. In 2025, Americans lost a total of $11.37 billion to these scams, a 22% increase from the previous year. A particularly vulnerable group, those aged 60 and over, suffered $4.35 billion in losses – about 38% of the total. Overall, internet crimes targeting seniors jumped a dramatic 59% in just one year. Scams using artificial intelligence were especially damaging, causing $893 million in losses through methods like voice cloning, fake celebrity promotions, and elaborate romance schemes.
Artificial intelligence is increasingly being used to get around security checks on cryptocurrency exchanges. Some services are employing AI to create fake IDs, produce realistic video of identity verification, and even conduct fake video calls using deepfake technology to pass ‘Know Your Customer’ checks.
Scammers are changing their tactics. They’re moving away from traditional cryptocurrency exchanges and increasingly using decentralized finance platforms – like DEXs, DeFi bridges, and various protocols – to hide money and make it harder to track, taking advantage of the open access these platforms offer.
The bottom line for the industry
New regulations coming in 2026 will hold cryptocurrency exchanges accountable for actively monitoring transactions. Claiming ignorance won’t be enough. The ‘Operation Atlantic’ plan requires exchanges to immediately analyze blockchain data, rather than just reviewing past activity. Those that don’t implement systems to detect scam attempts and suspicious transaction patterns will likely face legal requests for information very soon.
DeFi is seeing a shift in impersonation scams towards decentralized exchanges and bridges, which will likely trigger stricter regulations that the industry isn’t ready for. Expect the first major regulatory crackdown to focus on ways to move funds off of these platforms.
The situation remains the same for people being targeted by scams: a recent analysis showed that 77% of those warned about “pig butchering” scams didn’t even realize they were being scammed. Scammers constantly change their tactics and create more believable fake identities. The best way to protect yourself is to assume any unexpected investment offer – no matter how convincing it seems – is a scam until you can prove it’s legitimate.
Read More
- Last Furry: Survival redeem codes and how to use them (April 2026)
- Gear Defenders redeem codes and how to use them (April 2026)
- Clash Royale Season 83 May 2026 Update and Balance Changes
- Clash of Clans “Clash vs Skeleton” Event for May 2026: Details, How to Progress, Rewards and more
- Neverness to Everness Hotori Build Guide: Kit, Best Arcs, Console, Teams and more
- Clash of Clans May 2026: List of Weekly Events, Challenges, and Rewards
- Brawl Stars Damian Guide: Attacks, Star Power, Gadgets, Hypercharge, Gears and more
- Brawl Stars x My Hero Academia Skins: All Cosmetics And How to Unlock Them
- Total Football free codes and how to redeem them (March 2026)
- Neverness to Everness City Tycoon Guide: How to Unlock, Level Up, Rewards, and Benefits
2026-05-04 22:32