Anatomy of the scam
A "professor," "analyst," or "mentor" runs a WhatsApp, Telegram, or Discord group with dozens of "students." Most of the students are fake accounts controlled by the same operation. They post screenshots of profitable trades, congratulate each other, and reinforce the mentor's calls. The signal is overwhelming social proof.
You're recruited into the group by a stranger who befriended you on a dating app, social media, or even a wrong-number SMS. Initial deposits onto the "platform" (a custom website mimicking a real exchange) appear to grow. When you try to withdraw, fees, taxes, "anti-money-laundering deposits," or "VIP upgrade" payments stack until you stop paying.
This is the social-proof variant of the pig-butchering playbook — designed for people who would never trust a single stranger but will trust a "group."
The script you will see
A stranger reaches out via SMS, WhatsApp, dating app, or social DM. Often the opener is a wrong-number message:
"Hi James, are we still on for lunch Saturday?"
You reply "wrong number." They apologize, strike up small talk, and gradually become friendly over days or weeks. Eventually:
"My uncle runs a trading group on WhatsApp — he's been getting 4–7% weekly. He's opening a small allocation to friends. Want me to add you?"
You're added to a group of 30–80 "members." A "professor" posts calls — currency pairs, crypto pairs, sometimes options. The "students" reply with screenshots of their P&L. The professor's calls "win" 80%+ of the time. You deposit a small amount on the recommended platform. It grows. You deposit more. When you try to withdraw, you hit a fee wall.
Red flags
- Group chat with one expert and many students who all confirm gains.
- Trading platform is not a major regulated exchange. Often the name closely mirrors a real one (e.g., "Binance Pro," "Coinbase Plus").
- You were introduced via a stranger who built rapport over weeks.
- Returns are unusually consistent — real markets don't deliver 4–7% weekly without major losses.
- Withdrawals require new payments before release.
- Pressure to deposit "before the window closes."
- The professor's photo reverse-image-searches to a real (unrelated) finance executive or actor.
- All "student" accounts joined the group within days of each other.
Variants
- Forex / crypto the most common. Daily "signals" call entries and exits.
- Stock picks. Real US stocks, but the brokerage is fake (a clone of Robinhood or Charles Schwab).
- Pre-IPO allocation. You're "selected" to invest in a hot pre-IPO at a discount. The "share certificates" are PDFs.
- Liquidity mining / DeFi yield. You "stake" into a "pool" via a wallet-connect link. The link drains your wallet instead.
- Quant arbitrage. A "team" pretends to run market-neutral arbitrage with "guaranteed" weekly returns.
- Sports-betting tipster version — same playbook applied to fixed-odds betting.
How to verify safely
- Look up the exchange or brokerage on the SEC EDGAR system, FINRA BrokerCheck, and the CFTC RED list. Unregistered platforms are an immediate disqualifier for US persons.
- Reverse-image-search the professor and the introducer. Most are stolen photos of real people.
- Open a separate test wallet or account, and try to withdraw $5 immediately after your first deposit. Real platforms allow this. Fake ones don't.
- No legitimate exchange requires upfront tax payments to release withdrawals. Treat that as the definitional red flag.
- Talk to one person outside the group chat — a friend, family member, or attorney — before sending any additional money. Scammers thrive on isolated decision-making.
- Search the exact phrasing of the professor's calls. Often you'll find the same calls repeated verbatim in other scam groups.
If you already deposited
- Stop depositing. Do not pay any "release fee," "tax," or "AML fee." There is no balance to release.
- Capture transaction IDs and wallet addresses. Report them to your exchange. Some exchanges flag and freeze inbound deposits from known scam wallets.
- Report to the FTC, IC3, and — for losses over $100,000 — request that your IC3 report be referred to the FBI Virtual Asset Unit.
- Block all contacts in the group chat. Leave the group.
- Expect follow-on recovery scams within weeks. Pre-decide that you will not engage with them.
- Talk to a counselor or trusted friend. Pig-butchering losses often come with significant emotional trauma; the recovery is not just financial.
What not to do
- Do not send a "release payment" hoping to unlock the balance. The balance is a number on a screen, not money.
- Do not let group members convince you the platform is "almost ready" or "going through audit."
- Do not share screen-sharing access (TeamViewer, AnyDesk) or wallet seed phrases with anyone.
- Do not continue to monitor the group out of curiosity — they will continue to target you.
Where to report
- FTC: reportfraud.ftc.gov — the broadest US fraud intake; reports flow to thousands of law-enforcement agencies.
- FBI IC3: ic3.gov — the right destination when the scam is internet-enabled (phishing, BEC, romance, crypto).
- CFPB: consumerfinance.gov/complaint — for complaints about banks, money transmitters, payment apps, credit cards, debt collection.
- IdentityTheft.gov — if any identity information (SSN, driver's license, account credentials) was shared.
- Your bank or payment platform. Call the number on the back of your card or use the app's in-product help. Time matters — wires can sometimes be recalled within hours; ACH and Zelle are harder but worth trying.
FAQ
The dashboard shows my balance is now $80,000. Why can't I just walk away with the original $5,000 deposit? Because the dashboard is a webpage controlled entirely by the scammer. There is no $80,000. There is no $5,000. Both were taken out of your real bank account or exchange and sent to the scammer's wallet. The dashboard is theater.
Can I sue the scammer? You can file civil claims, but the scammers are usually operating out of compounds in Southeast Asia (Cambodia, Myanmar, Laos), often using victims of human trafficking. Practical recovery is extremely rare. Your best move is reporting through IC3 so investigators can pursue the broader operation.
Why is this called "pig butchering"? The Mandarin original term, shā zhū pán (杀猪盘), literally means "killing-pig plate." It refers to the scammer's process of "fattening" a victim with rapport and small wins before "slaughtering" them with a large extraction.