The sha zhu pan playbook: how a 'wrong number' becomes a drained bank account

The name is grimly literal. Sha zhu pan translates as pig-butchering plate: the victim is the pig, fattened with attention before the kill. The FBI's Internet Crime Complaint Center logged more than 69,000 cryptocurrency-investment-fraud complaints in 2023 with losses topping $5.6 billion, figures cited by Chainalysis, which says it has traced tens of billions of dollars in pig-butchering proceeds through cryptocurrency networks.

Find the pig, then fatten it

Contact almost always arrives unsolicited, a dating-app match, a LinkedIn or Tinder message, or a wrong-number text that turns friendly, Proofpoint and Chainalysis both document. The persona is an attractive, successful stranger who mentions owning a small business such as a restaurant or salon. After a few days of rapport the conversation migrates to WhatsApp or Telegram, and a supposed mentor or uncle is introduced to teach the mark about trading. Video calls are refused with excuses or faked with deepfakes; the courtship can run for weeks or months.

The app, then the slaughter

Victims are told to buy a small amount of Tether on a real exchange such as Coinbase or Crypto.com, then move it to a slick fake platform introduced by the scammer, Proofpoint reports. Early deposits, often under $1,000, appear to earn 10 to 20 percent almost instantly, what Proofpoint calls classical conditioning, training the victim to trust the machine. Then the asks escalate: larger sums, personal loans, refinanced homes, liquidated retirement accounts. When the victim tries to withdraw, the platform blocks it behind demands for taxes, fees, insurance or compliance deposits until the money and the mentor both vanish.

The damage is severe and skewed. The Global Anti-Scam Organization estimates the average victim loses almost $122,000, with roughly two-thirds of victims women between 25 and 40, per Proofpoint. And the crews are rarely lone grifters; they are staff inside industrial scam compounds in Southeast Asia, working from shared scripts and playbooks.

The script has tells at every stage: - An online-only contact who steers a warm conversation toward crypto trading. - A push to move to WhatsApp or Telegram, plus persistent refusal to appear on a live video call. - An investing app only your new friend uses, absent from official app stores. - Visible profits you can watch grow but cannot withdraw without paying more. - Pressure to borrow, refinance or invest retirement savings so you don't miss out.

One rule collapses the entire con: no legitimate investment ever requires you to pay money in order to take your money out. If a withdrawal triggers a new fee, you are not an investor, you are the pig.

— Sources: [Chainalysis](https://www.chainalysis.com/glossary/pig-butchering/) · [Proofpoint](https://www.proofpoint.com/us/blog/threat-insight/broken-dreams-and-piggy-banks-pig-butchering-crypto-fraud-growing-online)