The world of cryptocurrency, for all its revolutionary potential, has also become a fertile ground for sophisticated scams. Among the most insidious and financially devastating is the “pig butchering” scheme, a form of investment fraud that preys on human trust and emotional vulnerability. However, a recent operation led by the U.S. Secret Service, resulting in the seizure of over $225 million in cryptocurrency, marks a significant turning point in the global fight against these elaborate criminal enterprises. This landmark seizure of cryptocurrency, the largest in the Secret Service’s history, not only represents a massive financial blow to scammers but also highlights the critical role of collaboration between law enforcement and the crypto industry. 

Understanding the “Pig Butchering” Scam

“Pig butchering,” or “Sha Zhu Pan” in Chinese, is a long-con investment fraud where criminals build fake romantic or business relationships with their targets over weeks or even months. The “pig” refers to the victim, who is “fattened” with fabricated trust and promises of high returns before being “butchered,” or stripped of their assets. Once a relationship is established, the scammers subtly introduce the idea of a lucrative cryptocurrency investment, often directing victims to sophisticated, yet entirely fraudulent, trading platforms. Victims are initially encouraged to invest small amounts, which may even show fabricated profits, to build confidence. As trust deepens, victims are manipulated into investing increasingly larger sums, often their life savings, until suddenly, all access to their funds is cut off. These operations are often run out of “scam compounds” in Southeast Asia, where trafficked individuals are forced into cyber slavery to execute these frauds.

The devastating impact of these scams is evident in the staggering losses reported globally. In 2024 alone, cryptocurrency investment fraud, largely driven by pig butchering schemes, caused over $5.8 billion in reported losses in the U.S. The anonymity and cross-border nature of cryptocurrency transactions have historically made these scams incredibly challenging to investigate and prosecute, allowing criminal syndicates to operate with relative impunity.

The Historic Seizure: A Collaborative Effort

This recent $225 million asset seizure is a testament to the evolving capabilities of law enforcement and the crucial role that crypto companies are now playing in combating illicit activities. The operation involved a multi-pronged approach, leveraging advanced blockchain analysis and significant cooperation from major cryptocurrency players.

The investigation began in late 2023 when Tether, the issuer of the USDT stablecoin, proactively froze 39 wallet addresses containing $225 million in stolen USDT after detecting suspicious activity. This immediate action was critical in preventing further dispersion of the illicit funds. Paolo Ardoino, CEO of Tether, was quoted as saying, “Tether’s work with the Department of Justice underscores our commitment to transparency, proactive engagement with law enforcement, and the protection of users across the digital asset ecosystem.”

A unique aspect of this seizure involved Tether’s “burn and reissue” mechanism. After freezing the stolen USDT, Tether burned the original tokens on-chain, effectively removing them from circulation. An equivalent amount of new USDT was then minted and transferred to a wallet controlled by the U.S. Secret Service. This process, visible on the blockchain, provides a compelling real-time example of how blockchain’s inherent transparency can be leveraged to aid law enforcement operations and facilitate asset recovery.

Following Tether’s freeze, Coinbase played, in its words, a “key role” in the Secret Service’s investigation. Between February 26 and February 29, 2024, Coinbase’s team conducted extensive blockchain analysis to identify victims and trace the flow of millions in cryptocurrency transactions from illicit wallets back to their platform. Their efforts helped identify over 130 Coinbase customers who collectively lost at least $2.3 million to the scam.

The Secret Service’s investigation also involved collaboration with other cryptocurrency exchanges, including OKX. The seized funds were traced to over 140 accounts on the OKX exchange, many of which were held in the names of individuals allegedly operating from scam compounds in Southeast Asia.

This massive asset seizure carries significant legal ramifications and signals a growing trend in how law enforcement is approaching crypto-related crime.

The U.S. Attorney’s Office for the District of Columbia filed a civil forfeiture complaint against the $225.3 million in cryptocurrency, asserting that the funds are connected to the theft and laundering of money from victims of cryptocurrency investment fraud schemes. This legal mechanism allows authorities to seize assets linked to criminal activity, with the ultimate goal of returning them to the rightful owners.  Special Agent in Charge Shawn Bradstreet of the U.S. Secret Service’s San Francisco Field Office stated that this seizure “marks the largest cryptocurrency seizure in U.S. Secret Service history,” and represents a “major milestone in their ongoing efforts to combat crypto-related scams.”

The Department of Justice has emphasized its commitment to returning the seized funds to the victims. The FBI has established the Internet Crime Complaint Center (IC3) as a central hub for reporting cyber-enabled crimes. It provides a trustworthy and convenient reporting mechanism for the public to submit information about suspected internet-facilitated criminal activity. Victims of internet crimes can file a complaint at www.ic3.gov, where their complaints are analyzed and may be referred to law enforcement agencies for investigation.  This focus on victim restitution is crucial for rebuilding trust in the crypto ecosystem.

This case also underscores the transformative impact of blockchain analysis in law enforcement. While the pseudonymous nature of crypto transactions can pose challenges, the immutable and public ledger of the blockchain provides a wealth of data for forensic investigators. Tools that visualize complex transactions and identify patterns of illicit activity are becoming indispensable in tracing stolen funds across multiple exchanges and identifying “cash-out” points.

The success of this operation highlights the increasing necessity and effectiveness of collaboration between law enforcement agencies on the one hand and cryptocurrency exchanges and stablecoin issuers on the other. As crypto-related crimes continue to rise, such partnerships will be essential for identifying, disrupting, and prosecuting criminal networks. It also underscores the importance of clear federal regulations that encourage legitimate exchanges to share data with law enforcement while respecting user privacy.

The message that law enforcement wants to send with this landmark $225 million crypto seizure is clear: the days of operating illicit crypto schemes with impunity are numbered. As blockchain forensics tools become more sophisticated and cooperation between the private sector and law enforcement strengthens, the legal landscape for crypto-related crime will continue to evolve, offering greater protection to victims and posing significant challenges to those who seek to exploit the digital asset ecosystem for illicit gains.

Author

Email
David Zaslowsky has a degree in computer science and, before going to Yale Law School, was a computer programmer. His practice focuses on international litigation and arbitration. He has been involved in cases in trial and appellate courts across the United States and before arbitral institutions around the world. Many of David’s cases, including some patent cases, have related to technology. David has been included in Chambers for his expertise in international arbitration. He is the editor of the firm's blockchain blog.