Table of Contents
Fetching ...

An Explorative Study of Pig Butchering Scams

Bhupendra Acharya, Thorsten Holz

TL;DR

This paper provides the first large-scale, multi-source examination of pig-butchering scams by integrating data from social media, public abuse reports, and news articles, complemented by a crowdsourced user survey. It reveals a complex scam lifecycle driven by prolonged grooming, sophisticated social engineering, and multi-channel payment flows, culminating in substantial financial losses (over $521 million across 834 victims in the captured cases). The authors implement a three-module methodology (data collection, filtration, tracking) and perform detailed analyses of platform-specific victim experiences, abuse narratives, and crime infrastructure (fraudulent URLs, emails, and crypto addresses). They discuss ethical considerations, dataset limitations, and provide concrete recommendations for users, platforms, and policymakers to enable proactive detection and mitigation. Overall, the work advances understanding of pig-butchering scams and informs practical defenses against this evolving form of online fraud.

Abstract

In the recent past, so-called pig-butchering scams are on the rise. This term is based on a translation of the Chinese term "Sha Zhu Pan", where scammers refer to victims as "pig" which are to be "fattened up before slaughter" so that scammer can siphon off as much monetary value as possible. In this type of scam, attackers perform social engineering tricks on victims over an extended period to build credibility or relationships. After a certain period, when victims transfer larger amounts of money to scammers, the fraudsters' platforms or profiles go permanently offline and the victims' money is lost. In this work, we provide the first comprehensive study of pig-butchering scams from multiple vantage points. Our study analyzes the direct victims' narratives shared on multiple social media platforms, public abuse report databases, and case studies from news outlets. Between March 2024 to October 2024, we collected data related to pig butchering scams from (i) four social media platforms comprised of more than 430,000 social media accounts and 770,000 posts; (ii) more than 3,200 public abuse reports narratives, and (iii) about 1,000 news articles. Through automated and qualitative evaluation, we provide an evaluation of victims of pig-butchering scams, finding 146 social media scammed users, 2,570 abuse reports narratives, and 50 case studies of 834 souls from news outlets. In total, we approximated losses of over \$521 million related to such scams. To complement this analysis, we performed a survey on crowdsourcing platforms with 584 users to broaden the insights on comparative analysis of pig-butchering scams with other types of scams. Our research highlights that these attacks are sophisticated and often require multiple entities, including policymakers and law enforcement, to work together alongside user education to create a proactive detection of such scams.

An Explorative Study of Pig Butchering Scams

TL;DR

This paper provides the first large-scale, multi-source examination of pig-butchering scams by integrating data from social media, public abuse reports, and news articles, complemented by a crowdsourced user survey. It reveals a complex scam lifecycle driven by prolonged grooming, sophisticated social engineering, and multi-channel payment flows, culminating in substantial financial losses (over $521 million across 834 victims in the captured cases). The authors implement a three-module methodology (data collection, filtration, tracking) and perform detailed analyses of platform-specific victim experiences, abuse narratives, and crime infrastructure (fraudulent URLs, emails, and crypto addresses). They discuss ethical considerations, dataset limitations, and provide concrete recommendations for users, platforms, and policymakers to enable proactive detection and mitigation. Overall, the work advances understanding of pig-butchering scams and informs practical defenses against this evolving form of online fraud.

Abstract

In the recent past, so-called pig-butchering scams are on the rise. This term is based on a translation of the Chinese term "Sha Zhu Pan", where scammers refer to victims as "pig" which are to be "fattened up before slaughter" so that scammer can siphon off as much monetary value as possible. In this type of scam, attackers perform social engineering tricks on victims over an extended period to build credibility or relationships. After a certain period, when victims transfer larger amounts of money to scammers, the fraudsters' platforms or profiles go permanently offline and the victims' money is lost. In this work, we provide the first comprehensive study of pig-butchering scams from multiple vantage points. Our study analyzes the direct victims' narratives shared on multiple social media platforms, public abuse report databases, and case studies from news outlets. Between March 2024 to October 2024, we collected data related to pig butchering scams from (i) four social media platforms comprised of more than 430,000 social media accounts and 770,000 posts; (ii) more than 3,200 public abuse reports narratives, and (iii) about 1,000 news articles. Through automated and qualitative evaluation, we provide an evaluation of victims of pig-butchering scams, finding 146 social media scammed users, 2,570 abuse reports narratives, and 50 case studies of 834 souls from news outlets. In total, we approximated losses of over \$521 million related to such scams. To complement this analysis, we performed a survey on crowdsourcing platforms with 584 users to broaden the insights on comparative analysis of pig-butchering scams with other types of scams. Our research highlights that these attacks are sophisticated and often require multiple entities, including policymakers and law enforcement, to work together alongside user education to create a proactive detection of such scams.

Paper Structure

This paper contains 36 sections, 4 figures, 6 tables.

Figures (4)

  • Figure 1: Data Collection – Our system comprises three main modules. Based on our manual observations of direct victims of pig-butchering scams, we developed search keywords to collect data from various sources (➊). After collecting the data, we apply automated and manual filtration of data (➋). Additionally, we perform quantitative studies via survey on online scams (➌), and finally, we evaluate the collected data by tracking and profiling abusive elements and victims' narratives (➍).
  • Figure 2: Scam Techniques in Victim Reports on Social Media Platforms - The graph presents eight scam techniques used by scammers in social engineering tactics associated with pig-butchering scams. Our findings indicate that Crypto Schemes are the most prevalent, accounting for 43% of all victim reports, while Romance scams involving Identity and Coercion are among the least reported.
  • Figure 3: In this figure, we display X posts from a user describing the experience of a fraudulent cryptocurrency investment-based pig-butchering scam. The victim shares an experience of being scammed to raise awareness about fraudulent investment schemes.
  • Figure 4: Search keywords word composite: In this figure, we display the word composite used to perform queries for collecting data direct victims of pig-butchering scams. The figure shows that the word composition is higher in contexts related to investments, crypto, employment, quick wealth, romance, dating, love, and career.