The app shows profits but will not let you withdraw: how the scam works
Don't pay any additional "tax" or unlock fee: it never actually releases the funds. Stop contact with the person, but preserve the entire conversation as evidence.
Weeks of friendly conversation, then one investment app, then a balance you can never actually withdraw.
The victim typically meets someone through WhatsApp, Instagram, Telegram, or a dating app. The conversation grows friendly or romantic over time, and eventually the contact mentions an investment opportunity with exceptional profits. The platform shows convincing charts and a rising balance, and may even allow a small withdrawal early on to build trust, but once deposits grow larger, withdrawals suddenly fail and "support" starts demanding taxes or fees to release the funds. The FBI describes this as a confidence-based cryptocurrency investment fraud, widely known as pig butchering, and the SEC also uses the term "relationship investment scam" for the same pattern.
Why the app looks so real
The balance displayed inside the app may not represent any real assets at all: criminals fully control the interface a victim is looking at. In practice, the victim buys real cryptocurrency through a legitimate exchange, then sends it to a wallet address supplied by the scammer; from that point on, the funds have left any regulated, recoverable environment. A small, successful early withdrawal doesn't prove the platform is legitimate: it can simply be the scammer's cost of securing a much larger deposit later.
The name "pig butchering" itself comes directly from how the operation is structured internally: the relationship-building phase exists purely to increase how much a victim is willing to eventually deposit, the same way an animal might be fattened before slaughter. That framing matters because it reframes the entire romantic or friendly relationship as a cost the scammer is willing to pay – weeks of consistent, personalized messages are cheap compared to the size of the deposit they're building toward. Nothing about the warmth or consistency of the relationship says anything about the legitimacy of the investment being pitched inside it; the two are engineered completely independently of each other.
The grooming process
It typically starts with contact that seems entirely casual: a "wrong number" text or an unusually friendly opening message. Trust builds over days or weeks, often with photos and a personal success story woven in. A small first investment follows, guided step by step by the contact. Profits appear controlled, with a limited withdrawal allowed to reinforce confidence. Then comes escalation – talk of exclusive investment events, or gentle pressure to deposit more. Finally, a withdrawal block appears alongside a new fee, and every payment made to unlock it just produces another excuse for the next one.
Warning signs
- An unsolicited contact that eventually turns the conversation toward investing
- Returns that are high, constant, or described as risk-free
- A stranger directing exactly what and when to buy
- A platform absent from official financial regulator records
- An app installed from a private link rather than an official app store
- Funds directed to third-party wallet addresses
- "Support" that requires a payment before you can withdraw
- Requests for a loan, or advice to hide the investment from family or your bank
It's also worth noting that the specific use of cryptocurrency isn't incidental to the scam – it's structural. A transfer of crypto to a wallet the scammer controls settles quickly and, once confirmed, is effectively irreversible in the way a card chargeback or bank recall sometimes still can be. That single property is precisely why the entire narrative is engineered to end with "send crypto to this wallet" rather than any payment method that leaves the door open for a bank or platform to intervene after the fact.
How to check a platform before investing
Search relevant financial regulator databases for the platform's legal name and license, and don't stop at confirming a name exists, since criminals frequently clone a real, authorized firm's identity onto an entirely different domain. Compare the legal name, domain, license number, and jurisdiction carefully. Never install an investment app from a private link, and never grant remote access to your device for "help" setting one up.
What to do if you've already invested
Don't pay any additional "tax" or unlock fee – it's one of the most common excuses in this scam and paying it never actually releases the funds. Stop contact with the person, but preserve the entire conversation as evidence. Contact your bank or exchange immediately. Provide wallet addresses, transaction hashes, and any beneficiary account details you have. Report the fraud to local law enforcement and, in the US, to IC3.gov, along with the relevant financial regulator. Be suspicious of any "recovery" service that asks for an upfront payment to get your money back – that's frequently a second scam layered on the first.
Variants you'll run into
The core mechanics stay the same – manufactured relationship, controlled platform, blocked withdrawal – but the entry point varies a lot. Recognizing the opening move matters most, because that's the only stage where walking away costs you nothing.
- The wrong-number text. "Hi, is this the vet clinic?" or "Are we still on for Saturday?" The sender apologizes charmingly for the mistake and keeps chatting. The randomness is fake; the message went to thousands of numbers.
- The dating-app long con. A match who is attractive, attentive, and quickly wants to move the conversation to WhatsApp or Telegram, but always has a reason to avoid video calls or meeting in person. Investment talk surfaces weeks later, framed as sharing a secret to success.
- The trading-signals group. You're added to a Telegram or WhatsApp group where a "professor" or "analyst" posts winning trades and grateful members post screenshots of profits. Most of the members are the scammer's own accounts, and the group exists to funnel you to the fake platform.
- The hijacked friend. A real acquaintance's compromised social media account messages you about the crypto opportunity that "changed their life." The trust was earned by your friend; the message was written by whoever stole their account.
- The job-offer pivot. A recruiter offers flexible remote work, then the "training" gradually turns into depositing your own money into a work platform to unlock earnings. Different costume, same blocked withdrawal at the end.
How it plays out: a realistic example
David, 52, recently divorced, gets a text meant for "Jenny about the tennis lesson." He replies that they have the wrong number; the sender apologizes and jokes about her own clumsiness. The conversation drifts on for weeks – she's friendly, asks about his day, remembers details. She never asks for money. Eventually she mentions, almost reluctantly, that her aunt taught her to trade crypto and it paid for her apartment. David is curious. She walks him through installing a trading app from a link and helps him make a first deposit of $500. Within days the app shows $740. He withdraws $200 just to test it, and it arrives in his bank account.
That successful withdrawal does more damage than any sales pitch could. Over the next two months David deposits $48,000, some of it from a home equity line. When he tries to withdraw ahead of a family expense, the app shows a "tax clearance" requirement of 20 percent, payable up front. His contact urges him to pay it quickly. Instead, unsettled, he searches the platform's name in his state regulator's database and finds nothing. The relationship evaporates within a day of him refusing to pay. The lesson is the one this scam is built to hide: the early withdrawal, the warmth, and the rising balance were all part of the same product, and the only step that produced a true answer was checking a regulator's records, which he could have done before the first deposit.
Prevention that goes one level deeper
Because this scam works through relationships rather than technology, prevention is mostly about rules you set for yourself before anyone charming shows up. Decide these things now, while no one is flattering you.
- Adopt one absolute rule: people you've never met in person don't direct your money. No exceptions for how long you've talked or how well they seem to know you. A rule with no exceptions can't be negotiated by a skilled manipulator.
- Insist on a live video call early. Persistent, creative excuses to avoid showing their face in real time are one of the strongest signals available. Reverse image searching profile photos catches many stolen identities too.
- Never install financial apps from links. Official app stores only, and even then, verify the company behind the app against regulator records before funding anything.
- Keep investments discussable. Any pitch that comes with advice to keep it secret from your family, accountant, or bank is describing a scam. Real investments survive scrutiny; this one is allergic to it.
- Talk to the isolated people in your life. Recently bereaved, divorced, or lonely relatives are targeted deliberately. A judgment-free "if anyone online ever brings up investing, tell me about it" conversation now is worth more than any warning after the fact.
Quick checklist
- Treat an unsolicited contact that leads to investment talk as a warning sign
- Never let someone else direct your trades or deposits
- Verify any platform against official regulator records, not just a search result
- Never pay a "tax" or fee to unlock a withdrawal
- Never install an investment app from a private link
- Report quickly to your exchange, bank, and relevant authorities if you've already sent funds
Frequently asked questions
Are the profits shown inside the investment app real?
Why was I allowed to withdraw a small amount successfully?
Can a cryptocurrency transfer sent to a scammer be recovered?
Daniel A. and Óscar S. run Breachfolio, a small independent site about security and AI. This article was drafted with AI assistance and reviewed by a person before it went live. We write from documentation, vendor sources and published research rather than from original lab benchmarks, and we link a source in the sentence that relies on it. How we work · About us
