Cryptocurrency investment fraud, which the media commonly describes as “pig butchering,” is one of the most prevalent and damaging fraud schemes today. Scammers, through various means of manipulation, convince victims to deposit more and more money into financial “investments” using cryptocurrency. In truth, these investments are fake; all victim money is under the control of—and ultimately stolen by—criminal actors, usually overseas. As a result, victims typically lose all money they invested.

The Selection of the Victim: Scammers use a variety of methods to initially lure and contact victims. Here are some of the most common methods:

  • Social Media: Scammers use social media to reach out to victims directly—by messaging them—or indirectly through deceitful job advertisements or investment opportunities that can be found on all main social media platforms.
  • Texting: Scammers text victims pretending they misdialed a number, sending a photo of themselves, or saying they work for a company that is hiring for job opportunities.
  • Dating Sites: Scammers create thousands of fake dating profiles on all common dating sites and match with victims to establish a romantic relationship based on trust.

If you met someone through a method described above, and that person pitched an investment opportunity that involved cryptocurrency—beware: this is likely cryptocurrency investment fraud.

The Building of Trust: Once initial communication has been established, scammers seek to deceive victims about who they are (their “persona”) and what they want (their “desires”) to forge trust with the victim. Tactics vary, but below are common characteristics of cryptocurrency investment fraud scammer personas:

  • Excessive flattery
  • Empathizing with, and often suffering from, similar life events as the victim (e.g., if a victim is going through a divorce, then the scammer may be going through a divorce, too).
  • Suffering from a hardship that requires help from the victim.
  • Sharing pictures, often selfies, of themselves.
  • Offering to meet in person but making those meetings contingent upon the victim accomplishing a task (e.g., we can meet once you raise enough money).
  • Offering to meet in person, but always finding an excuse at the last minute for why they can’t.
  • Expressing a strong romantic interest in the victim.
  • Agreeing to some video conference calls but preferring instead to speak over text.

The Pitch: Once trust is established with victims, criminals introduce the topic of investing. It’s common for scammers to say they themselves—or people in their family or close network—are experts in such investments. They may promise they can bring the victim in on “the ground floor.” Types of investments can vary, however common ones include binary trading, liquidity mining, and gold futures.

The Initial Investment: Once the scammer convinces the victim to participate in their scheme, the scammer will instruct the victim how to invest the money, as follows:

  • Open a cryptocurrency account at a reputable exchange.
  • Transfer money from a traditional bank account to the new cryptocurrency account.
  • Convert the money—now hosted on the cryptocurrency exchange—to the cryptocurrency type the scammer specifies, e.g., Bitcoin, Ether, Tether.
  • Open an account on the “investment platform” provided by the scammer or an individual or group that the scammer directed the victim to.
  • Deposit the cryptocurrency to the investment platform either directly or through a private wallet.

Note that these “platforms” exist in the form of what appear to be traditional websites, either accessible via the web or through a specific browser only accessible via cryptocurrency applications. Common factors include:

  • Registration using an email address or phone number.
  • Two-factor authentication (e.g., a phone number + an email address) to log in.
  • A website name that closely mimics—or “spoofs”—a legitimate site.
  • A professional-looking site design that shows the portfolio in an appealing manner.
  • A customer support portal used to communicate about investments and withdrawals.

The “Growing” Investment: Once the victim starts to “invest,” returns shown on the investment platform will appear to be extremely lucrative, encouraging the victim to invest more and more. It is common in the early stages for the scammers to allow victims to withdraw not only the original deposit but the earnings as well. This is meant to trick victims—a means to reassure them that the platform is legitimate. Scammers use various means to “sweeten the pot,” or encourage further investing. Examples include:

  • “Matching”—Providing their own funds to the victim’s portfolio to help the victim reach an (arbitrary) investment goal.
  • “Scarcity”—Stating that returns or investment opportunities are only available in a short time period.

Taxes, Fees, and the End of the Scheme: Once the victim is ready to withdrawal all their earnings, they will find their account frozen and an arbitrary requirement will arise, usually in the form of paying “taxes” or “fees” to unlock their funds.

This is a trap: it is simply another method used by the scammers to try and convince victims to invest even more money. It can be a particularly devastating point in the scheme, as victims will often pay more money to unlock their funds than any amount they previously deposited. At this point, there is usually nothing the victim can do: the scammers will never unlock the funds and it’s likely they have already withdrawn those funds into criminally controlled cryptocurrency wallets inaccessible to the victim. In the end, the victim loses all the money they deposited into the scheme.

If you have been victimized, file a report with the FBI Internet Crime Complaint Center at IC3.gov.

Resource: https://www.fbi.gov/