Loading story…
Authorities and researchers warned that pig-butchering operations have grown into a global criminal enterprise that combines online relationship and investment fraud with human trafficking. INTERPOL said victims from 66 countries had been trafficked into scam centres by March 2025, with most taken to Southeast Asia and additional activity emerging in the Middle East, West Africa, and Central America. The centres reportedly recruit workers through fake job ads, then detain and coerce them into running social-engineering scams under debt bondage and severe abuse, while criminals increasingly use AI-generated job postings, deepfake profiles, and other synthetic content to scale the fraud.
The scams typically target victims on social media and messaging platforms, steering them into fraudulent cryptocurrency investments and draining funds over time. California regulators have urged consumers to recognize and report the schemes, while legal analysis in the United States found at least 81 federal civil forfeiture actions tied to pig-butchering by March 2026. Those seizures have disrupted some networks and recovered stolen crypto, but often only a small share of losses, and victim repayment remains difficult because cases depend heavily on foreign exchanges, stablecoin issuers, and complex claims processes; one exceptional case involving Chen Zhi and the Prince Group reportedly led to the seizure of about $15 billion in cryptocurrency.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
15 events from the most recent confirmed update back to the earliest known activity.
The U.S. Department of Justice announced that the Scam Center Strike Force had taken major actions against Southeast Asian scam centers targeting Americans. This marks a new enforcement step beyond the force's initial launch.
By March 2026, the study cited by Lawfare had identified 81 federal civil forfeiture actions targeting assets connected to pig-butchering schemes.
On 2025-11-12, the U.S. Attorney for the District of Columbia, together with the FBI and Secret Service, launched a dedicated Scam Center Strike Force. The initiative was created to pursue the most egregious Southeast Asian scam centers and their leaders.
On 2025-10-14, the U.S. Department of Justice unsealed an indictment against Chen Zhi, founder of Cambodia's Prince Holding Group, alleging he ran forced-labor scam-center compounds that used trafficked workers to conduct online fraud. The case included a $15 billion bitcoin seizure that Treasury described as its largest action ever taken against cybercriminal networks in Southeast Asia.
On 2025-06-30, INTERPOL released a crime trend update saying trafficking-fueled scam centres had expanded beyond Southeast Asia into regions including the Middle East, West Africa, and Central America, and warning of growing AI use in recruitment and fraud.
As of March 2025, INTERPOL said victims from 66 countries had been trafficked into online scam centres, with 74 percent taken to centres in Southeast Asia.
Lawfare's cited study found 81 federal civil forfeiture actions tied to pig-butchering schemes by March 2026, with more than half of those cases filed in 2025 across 33 federal district courts.
Lawfare says the FBI reported in 2025 that cryptocurrency investment fraud caused $7.2 billion in reported losses to Americans and was the largest source of financial losses to Americans.
A 2025 United Nations report estimated that at least 300,000 people were involved in the forced scam workforce tied to pig-butchering and related scam compounds.
In 2024, an INTERPOL-linked operation led police to dismantle a scam centre in Namibia, where authorities found 88 youths had been forced to conduct scams.
During the 2024 INTERPOL-coordinated operation, national police officers raided an industrial-scale scam centre in the Philippines.
In 2024, an INTERPOL-coordinated global operation uncovered dozens of cases in which trafficking victims were deceived and coerced into committing fraud in scam centres.
The FBI's Operation Level Up began notifying potential pig-butchering victims in January 2024. Lawfare says the effort continued through the end of 2025 and reportedly prevented an estimated $500 million in additional losses.
INTERPOL reported that since 2023 it has documented the evolution of human-trafficking-fueled scam centres from a Southeast Asia-focused phenomenon toward a broader international threat.
INTERPOL issued an Orange Notice warning of the serious and imminent public-safety threat posed by trafficking-fueled online scam centres.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
8 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcenattothoughts.com
Open sourcelawfaremedia.org
Open sourcejustice.gov
Open sourceinterpol.int
Open sourcejustice.gov
Open sourcedfpi.ca.gov
Open sourceohchr.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Pig butchering scams, a form of crypto romance and investment fraud, are increasingly targeting victims through unconventional platforms such as matrimonial websites. Scammers exploit the high-trust environment of these platforms, engaging in prolonged, convincing conversations before introducing cryptocurrency investment opportunities. The approach is highly personalized, often involving real-time voice communication and cultural familiarity, making detection difficult for both users and platform operators. These scams are not limited to dating apps but are now leveraging the unique trust models of matrimonial services, broadening their reach and impact. Simultaneously, Chinese-speaking darknet markets hosted on Telegram, such as Tudou Guarantee and Xinbi Guarantee, have become central hubs for facilitating pig butchering operations. These markets enable billions of dollars in money laundering and provide scam-related services, including stolen data, fake investment websites, and AI deepfake tools. The scale of these operations is immense, with the FBI estimating that pig butchering scams generate around $10 billion annually from US victims alone. The convergence of social engineering tactics and robust darknet infrastructure has made pig butchering the most lucrative form of cybercrime globally.
Jun 29, 2026
The U.S. Department of Justice said a coordinated **"Disruption Week"** operation under its Scam Center Strike Force disrupted cyber-enabled fraud and cryptocurrency investment scam networks targeting Americans, including so-called **pig butchering** operations tied to compounds in Cambodia, Laos, and Burma near the Thailand border. Working with U.S. agencies, foreign law enforcement, major technology firms, and blockchain companies, the effort disrupted more than **1.4 million** social media and email accounts, interrupted malicious network activity, decommissioned scam infrastructure, and froze more than **$3.8 million** in cryptocurrency allegedly used to launder victim funds. Authorities said the networks are linked to transnational organized crime, including Chinese syndicates, and often rely on trafficked workers forced to run fraud schemes under threat of violence. The operation also led to the arrest of **seven** suspected scammers in Thailand, additional cases opened by the Royal Thai Police Anti Cyber Scam Center, and referrals for further U.S. investigation. DOJ said reported U.S. losses from cryptocurrency investment fraud continued to surge, rising from **$3.96 billion** in 2023 to **$5.8 billion** in 2024 and more than **$7.2 billion** in 2025.
Jun 29, 2026
Cybersecurity researchers have uncovered the role of specialized service providers in enabling large-scale pig butchering scams, also known as romance baiting or investment fraud, particularly in Southeast Asia. These providers, such as the Penguin Account Store (also known as Heavenly Alliance and Overseas Alliance), operate under a crimeware-as-a-service (CaaS) model, supplying turnkey scam platforms, fraud kits, stolen identities, and infrastructure that dramatically lower the barrier to entry for criminal groups. The scam operations are often run from compounds in special economic zones, where victims of human trafficking are forced to conduct fraudulent activities under threat of violence, and the infrastructure is designed to facilitate rapid laundering of stolen funds and cryptocurrencies beyond the reach of law enforcement. The industrialization of pig butchering-as-a-service (PBaaS) has transformed the landscape of online fraud, with ready-made applications and templates now available for purchase, enabling scalable and efficient scam operations. The Penguin group exemplifies this trend, providing comprehensive packages that allow even non-technical actors to launch sophisticated social engineering campaigns. This development has contributed to the proliferation of global fraud, with law enforcement agencies and organizations like INTERPOL highlighting the intersection of cybercrime and human trafficking in these operations.
Jun 29, 2026