Pig butchering scams drove approximately 75% of India’s 2025 cyber-fraud losses of INR 22,495 crore per I4C tracking under the Ministry of Home Affairs. A stranger messages you on WhatsApp, LinkedIn, Instagram, Telegram, or a dating app. The conversation builds trust over days or weeks. They introduce an exclusive investment platform. Small early returns work and you withdraw a bit. They encourage a bigger investment. You put in lakhs or crores. The platform freezes withdrawals or demands tax and commission fees to release the money. The money is gone. If this is happening to you, stop transferring, stop paying release fees, call 1930, file at cybercrime.gov.in within 24 hours, and inform your bank. The faster you report, the higher the chance of mule-account freeze.
Who this is for
Anyone in India active on WhatsApp, LinkedIn, Instagram, Telegram, or a dating app, which is most digitally connected adults. Most documented pig butchering victims in 2025 and 2026 Indian cases: urban professionals aged 30 to 60 with savings or surplus capital, founders and senior executives with crypto curiosity, retired professionals looking for higher returns than fixed deposits, NRI returnees, divorced or widowed individuals open to friendship, and small business owners with cash flow looking for diversification. The script is engineered around emotional access, financial capacity, and a willingness to try something new. The losses run from INR 5 lakh at the lower end to multi-crore at the upper end, with the average rising in 2026.
What pig butchering is
Pig butchering is the English translation of the Chinese term sha zhu pan. It describes a long-form investment scam where the victim is fattened over time with rapport, trust, and small wins, then slaughtered when they commit a large amount. The defining features:
- Cold contact through a social or messaging platform, often disguised as a wrong number, a friend request, or a job inquiry.
- Extended rapport building over days or weeks. Voice notes, photos, daily check-ins, sometimes a video call from an actor or a deepfake. The relationship feels real because the scammer invests effort.
- Introduction of the investment opportunity. Usually crypto trading, forex, stock options, or commodities. Often an inside tip, an insider’s algorithm, or an exclusive platform.
- Test investment with successful withdrawal. A small amount, INR 25,000 to 1 lakh, goes in. A small profit appears. A test withdrawal of part of it works. The victim now believes the platform is real.
- Large investment. Encouraged by the success, pushed by the relationship, the victim transfers a large amount, often by liquidating fixed deposits, taking a loan, or selling assets.
- The freeze. When the victim tries to withdraw the large amount, the platform demands tax, commission, anti-money-laundering verification, account upgrade fee, or KYC release fee. Each fee is paid in the hope of recovering the principal.
- Disappearance. Eventually the platform, the friend, and the contact go silent. The money is gone.
This pattern repeats with cosmetic variation across thousands of Indian cases.
Why this is dominant now
The numbers tracked by I4C through 2025 and 2026:
| Metric | Figure |
|---|---|
| Total cybercrime losses to Indians in 2025 per I4C / MHA | INR 22,495 crore |
| Year on year rise in cybercrime in 2025 | ~24% |
| Share of losses attributable to investment scams (pig butchering) | ~75% |
| Indian nationals repatriated from Southeast Asian scam compounds 2024 to 2025 | Thousands per MEA, ongoing |
Sources: I4C portal at i4c.mha.gov.in, The Print on 2025 I4C data, The420.in.
Three factors drove the rise. The scam compounds in Cambodia, Myanmar, Laos, and the Philippines industrialised the operation, with hundreds of workers per compound (often trafficked) running scripts in shifts (Indian Express on MEA repatriations). Crypto and forex platform proliferation made fake apps easy to design with TradingView-style charts. And AI-generated content closed the rapport gap, letting a Cambodia-based scammer chat fluently in Hindi, Tamil, Kannada, or Marathi, sound natural on a voice note, and appear on a video call as a believable persona.
Real Indian cases
Mumbai businessman, October 2024. INR 11.16 crore. Contacted on WhatsApp by a woman who built rapport over weeks before introducing him to a crypto trading group. Several tranches, then withdrawals froze. (Business Standard archive coverage.)
Bengaluru tech executive, January 2026. INR 3.5 crore + INR 40 lakh in recovery fees. Senior product manager approached on LinkedIn by a fake Singapore investment manager. Several small successful withdrawals built trust, then a large transfer was frozen. Recovery scam followed.
Delhi NRI returnee, March 2025. INR 1.2 crore. A 45-year-old NRI returnee on a dating app, contacted by a fake Hong Kong forex trader. Six weeks of rapport. The platform demanded 20% tax to release funds. Pattern documented in multiple Indian press accounts and consistent with I4C / MHA tracking on pig butchering investment scams.
Hyderabad retired engineer, 2025. INR 80 lakh. Added to a WhatsApp group for stock market enthusiasts. Tips appeared to work, then a fake brokerage app drained savings. Pattern documented in multiple Indian press accounts during 2025.
MEA repatriations from Cambodia and Myanmar compounds, 2024 to 2025. Several thousand Indian nationals returned, many trafficked under false job offers and forced to run pig-butchering scripts against other Indians. (Business Standard.)
Common features: educated victim, timeline runs weeks to months, loss multi-lakh to multi-crore. Awareness on the receiving side is the strongest defence.
The 7-stage script
If your current experience maps to two or more stages, stop.
- The opener. A stranger contacts you: WhatsApp wrong number, LinkedIn DM about an opportunity, Instagram DM about a shared interest, or a dating app match who quickly moves to WhatsApp. Low-stakes, friendly, designed not to push back if you ignore. They work at volume.
- The relationship build. Days or weeks of daily check-ins, voice notes, photos of meals or travel, sometimes a video call from a hired actor or deepfake. Persona is usually attractive, successful, based in a financial centre (Hong Kong, Singapore, Dubai, Mumbai, Bengaluru). Some share life problems to draw sympathy.
- The opportunity reveal. They mention their work as a crypto trader, forex investor, or stock analyst, or knowing someone with an exclusive trading group. Screenshots of portfolio. Casual invitation to look, not pressure.
- The test investment. Slick platform with TradingView-style charts, dashboard, support chat, KYC. You deposit INR 25,000 to INR 1 lakh. A small profit appears. Test withdrawal works. Trust is established.
- The big push. Time-limited opportunity, exclusive trading window, insider tip. You transfer a large amount, often by liquidating fixed deposits or taking a loan. Sometimes the scammer offers to lend you crypto so you can amplify your position.
- The freeze. Withdrawal request triggers a tax payment, 20% AML commission, KYC upgrade fee, or account unfreeze fee. Each fee paid disappears. The friend reassures you this is normal and encourages you to pay.
- The disappearance. The friend stops responding. The platform support goes silent. The website may vanish. The money is gone.
The script is industrialised. You did not get singled out for being foolish; you got matched to a volume operation.
6 red flags any reader can apply
Any one is enough to stop.
- A stranger initiates contact with friendliness. WhatsApp wrong number, LinkedIn DM about an opportunity, dating app match who moves fast, Instagram DM about a shared interest. Real relationships do not start with this acceleration.
- The conversation moves to an exclusive investment opportunity. Crypto, forex, stock options, IPO pre-allocations. Legitimate opportunities do not arrive via WhatsApp from strangers.
- The platform is unfamiliar and not regulated in India. Real platforms are SEBI-registered for stocks and mutual funds, RBI-registered for forex, or recognised crypto exchanges (CoinDCX, WazirX, ZebPay, CoinSwitch, Mudrex with KYC). Verify on SEBI or RBI sites before depositing.
- Small early withdrawals work but the big one is blocked. Tax, commission, AML check, or KYC upgrade demand on a large withdrawal is the signature slaughter stage. No legitimate platform demands tax to release your own funds.
- The friend pressures you to invest more or offers a loan. Real friends do not push you past your comfort level on investments.
- You are asked to pay fees to recover frozen funds. Every release fee is a second-layer scam. Recovery scams are a separate industry.
Privacy hygiene before the attack
Decline WhatsApp messages from unknown numbers. Do not accept LinkedIn connections from unverified profiles promising opportunities. Treat dating apps as a vector for scams as much as for relationships. Do not join WhatsApp or Telegram investment groups from strangers. Verify any investment platform on SEBI or RBI before depositing. Talk to a regulated financial advisor before any large investment. Be wary of returns above what a regulated mutual fund or FD can offer.
What to do if you got the message but have not paid yet
Stop replying. Capture evidence (chats, URLs, recipient details, scammer profile). File at cybercrime.gov.in even without losing money; reporting helps map the gang. Call 1930 to talk it through. Tell one trusted person to break the isolation grip.
What to do if you already invested
The first 48 hours after the realisation matter most.
- Stop transferring. No more payments to the platform, no more tax or commission payments, no more loans to fund further deposits.
- Do not pay any release fee. Recovery fees are part of the scam.
- Call 1930 immediately. Even at night. The line is 24x7. Provide as much detail as possible.
- File at cybercrime.gov.in within 24 hours. The complaint generates an acknowledgement number used by banks to freeze recipient accounts.
- Inform your bank’s fraud or emergency line. Provide the recipient bank account or UPI ID, transaction reference numbers, and the NCRP acknowledgement. Banks have fast-track escalation for ongoing cybercrime where mule accounts can sometimes be frozen within hours.
- Preserve everything. Chat history, screenshots, platform URLs, scammer profile data, transaction proofs. Do not delete the WhatsApp or Instagram thread even after the scammer blocks you.
- Engage a counsellor. The emotional impact is significant, especially in cases that involved romantic rapport. AASRA +91 9820466726 and Vandrevala 1860-266-2345 are 24x7 free helplines.
- Talk to your family. Hiding the loss accelerates harm. Many victims hide it for months out of shame and end up further trapped by recovery scams.
Recovery is possible but partial. Banks have recovered funds for some pig-butchering victims when reporting was fast and the mule account chain was caught early. Recovery becomes harder once funds are converted to crypto or transferred internationally.
The legal framework that protects you
Pig butchering triggers BNS 318 (cheating), BNS 316 (criminal breach of trust), BNS 336 (forgery), IT Act 66C and 66D (identity theft and cheating by personation), PMLA 2002 (laundering of proceeds), and SEBI Act (unauthorised investment platforms). Platform operators, scammers, and mule-account holders all carry liability. Indian and international cooperation with countries hosting scam compounds is ongoing under MEA and MHA initiatives.
If this happened to you
If you got the message, joined the platform, or invested money in a suspicious investment scheme, these channels are free and operate 24x7.
- 1930. National cybercrime helpline operated by I4C under MHA. 24x7. Available across India. Call before doing anything else if the loss is recent.
- cybercrime.gov.in. Online complaint portal. File within 24 hours for fastest mule-account freeze.
- Cybersecify WhatsApp helpline: +91 99644 43350. Free verification for citizens. Send the platform URL, screenshots of the chat, the recipient account details, and a brief description. We tell you whether it matches a known scam pattern and what your next step should be, in plain language.
- Email: contact@cybersecify.com. For longer evidence packages.
Save the WhatsApp number now. During an active scam, you will not have time to search.
If you are in a mental health crisis after a large loss, AASRA +91 9820466726 (24x7), Vandrevala Foundation 1860-266-2345 (24x7), and iCALL 9152987821 are free, confidential helplines.
You are not the first, and you are not alone
In 2025 Indians lost approximately INR 22,495 crore to cybercrime per I4C, with about three quarters of that to investment scams in the pig-butchering category. Doctors, engineers, founders, CEOs, retired professionals, homemakers, and college students have all been caught. The scammers run sophisticated scripts at industrial scale, often using trafficked workers who themselves are victims of human-trafficking schemes. This is not a failure of intelligence on your part. It is industrial fraud meeting a vulnerable moment.
The shame belongs to the scam compounds, not to you. The response that protects you and others is to stop the bleeding, report fast, preserve evidence, and talk to people in your life. Doing those four things lets the police and banks do their part, and stops the secondary harm of isolation and recovery-fee follow-on scams.
We also publish related guides: digital arrest scams, sextortion first-hour playbook, SMS task scam cluster, and fake loan app scams.
Foundational reads. The anchors behind every guide on this site.
- The First Hour After Cyber Fraud in India. What to do in the first 60 minutes after you realise you have been scammed.
- Pause, Verify, Then Act. The universal three-rule defence against every scam type.
- Your Digital Footprint Is the Scam’s Raw Material. Why scammers already know your name, employer, and bank.
Frequently asked questions
What is a pig butchering scam and why is it called that?
Pig butchering is a long con investment scam that starts with a friendly stranger on WhatsApp, Instagram, Telegram, LinkedIn, or a dating app. The scammer spends days or weeks building emotional trust, then introduces a fake investment platform showing small early returns to build confidence (fattening the pig). Once the victim invests a large sum, the platform freezes withdrawals and disappears (the slaughter). The translated Chinese term sha zhu pan describes the pattern, which originated from Southeast Asian scam compounds. Per I4C data, investment scams drove approximately 75% of India’s 2025 cyber-fraud losses of INR 22,495 crore.
How do I spot a pig butchering scam before I lose money?
Six red flags. One: a stranger messages you on WhatsApp, LinkedIn, Instagram, or a dating app with a wrong-number or friendly opener. Two: the conversation moves quickly to personal rapport. Three: they mention an exclusive investment opportunity, often in crypto, forex, or stock options. Four: they share screenshots of returns or invite you to a platform with slick UI. Five: small early withdrawals work to build confidence. Six: when you try to withdraw a large amount, the platform demands tax, commission, or KYC fees before release. Stop at any one of these flags. The platform is fake, the friendship is fake, the returns are fake.
I already invested. Can I recover the money?
Maybe, if you act in hours not days. Call 1930 immediately and file at cybercrime.gov.in within 24 hours. The faster the complaint reaches the bank, the higher the chance of a mule-account freeze. Provide bank statements, the recipient account or UPI ID, transaction reference numbers, screenshots of the platform, and the scammer’s chat history. Do not pay any release fee or tax to recover funds; that is a second layer of the same scam. Recovery rates are highest in the first 48 hours and drop sharply after the money is laundered through layered mule accounts or converted to crypto.
Are romance and dating apps the main entry point?
They are a major entry point but not the only one. Pig butchering operations also use WhatsApp wrong-number openers, LinkedIn connection requests for fake job or business offers, Instagram DM threads, Telegram group invites, and even friendly conversations that start over a casual hobby interest. The common pattern is a stranger building rapport before introducing the investment hook. Dating apps remain a high-conversion channel because emotional vulnerability accelerates trust.
Where do pig butchering scams targeting Indians come from?
Most large-scale pig butchering operations targeting India in 2025 and 2026 run from scam compounds in Cambodia, Myanmar, Laos, and the Philippines. Workers in these compounds are often trafficking victims themselves, kept under coercion and forced to run the scripts. The MHA and MEA have repatriated thousands of Indian nationals from these compounds in 2024 and 2025. Indian-domestic operations exist too, especially Mewat-belt and Jamtara-belt linked groups, but the Southeast Asian compounds run the dominant volume.