276 Arrested in Unprecedented US-China Pig-Butchering Crackdown — Nine Crypto Fraud Centers Shut Down
276 suspects arrested and 9 cryptocurrency fraud centers dismantled in a joint US-China operation targeting pig-butchering scams that have cost American victims millions — the DOJ called it "unprecedented" bilateral cooperation.
A joint US-China operation has arrested 276 suspects and shut down nine cryptocurrency investment fraud centers in what the DOJ called an "unprecedented" international crackdown on pig-butchering scams that have cost American victims millions of dollars.
WASHINGTON, D.C. — The FBI, DOJ, and Chinese law enforcement agencies announced on April 29, 2026 the arrest of 276 individuals and the dismantling of nine cryptocurrency investment fraud centers in a joint operation targeting pig-butchering scams — a fraud methodology in which criminals pose as friends or romantic partners online, gradually build trust over weeks or months, then persuade victims to invest in fraudulent cryptocurrency platforms before stealing all deposited funds. The operation is notable both for its scale and for the US-China law enforcement cooperation it required — a rare instance of coordinated action between the two nations on cybercrime. Three of the 276 suspects have been charged in federal court in the Southern District of California. Six defendants face specific charges of running a pig-butchering scheme.
Operation Profile
How Pig-Butchering Scams Work
Pig-butchering (sha zhu pan in Mandarin — "slaughtering the pig") is a long-duration fraud operation with three distinct phases. In the first phase, attackers contact victims via social media, dating apps, or messaging platforms — often beginning with a "wrong number" text — and spend days or weeks building a genuine-seeming relationship. In the second phase, the attacker gradually introduces the topic of cryptocurrency investment, claims to have exclusive access to a profitable trading platform, and walks the victim through making their first deposit on what appears to be a legitimate exchange. Early "withdrawals" may actually succeed, reinforcing trust. In the third phase — the slaughter — the victim is encouraged to invest larger sums, often taking out loans or liquidating retirement accounts, before the platform disappears and all funds are stolen. The fraud centers dismantled in this operation housed operators working shifts to maintain these long-term relationships with hundreds of simultaneous victims. Many operators are themselves trafficking victims, forced to run scams under threat of violence. For context on the broader most common cybersecurity threats in 2026. All Cyber Crime coverage is tracked on The CyberSignal.
The US-China Cooperation Dimension
The joint US-China component of this operation is diplomatically significant. US-China law enforcement cooperation on cybercrime has been rare and strained — China has historically been reluctant to cooperate on cases with US jurisdictional implications, and the US has frequently attributed major cybercrime operations to Chinese state actors. This operation suggests that pig-butchering fraud — which operates out of fraud centers often located in Southeast Asia rather than mainland China, and which targets both US and Chinese victims — may represent a category where bilateral cooperation is achievable despite broader tensions. The fraud centers targeted in this operation are frequently located in Myanmar, Cambodia, and Laos, often in lawless border zones where local governments have limited ability to act.
What to do now
The FBI's guidance for potential pig-butchering victims is consistent: never invest in a cryptocurrency platform recommended by someone you met online, regardless of how long you have known them or how genuine the relationship seems. Legitimate investment platforms are never promoted through dating apps or social media cold contacts. If you have already transferred funds to a suspected pig-butchering platform, stop immediately — do not send additional funds even if the platform claims you need to pay "taxes" or "fees" to withdraw. Report to the FBI's IC3 at ic3.gov and contact your bank or crypto exchange immediately. If someone you know may be a victim, contact the Global Anti-Scam Organization at globalantiscam.org for support resources.
The CyberSignal Analysis
Signal 01 — Scale Alone Does Not Stop Pig-Butchering
276 arrests and 9 fraud centers dismantled is a significant operational success. It is also, in the context of global pig-butchering fraud, a rounding error. The FBI IC3 received reports of over $5.8 billion in cryptocurrency fraud losses in 2025 alone — the overwhelming majority from pig-butchering operations. The fraud centers operate at industrial scale with hundreds of operators per facility and dozens of facilities active at any given time. Law enforcement disruption creates friction and forces relocation, but the economic returns of pig-butchering are large enough that replacement operations open quickly.
Signal 02 — The Human Trafficking Dimension Makes This Harder to Solve
A significant portion of pig-butchering fraud operators are themselves victims — individuals trafficked into fraud compounds under false promises of legitimate employment, then forced to run scams under threat of violence, debt bondage, or confiscated documents. This creates a structural prosecution problem: many of the 276 people arrested may themselves be trafficking victims rather than willing criminal participants. Effective response requires simultaneous law enforcement, victim identification, and trafficking prosecution frameworks — a significantly more complex operation than a standard cybercrime takedown.
Signal 03 — Cryptocurrency Infrastructure Is the Enabler That Remains Unaddressed
Pig-butchering scams exist because cryptocurrency transfers are fast, pseudonymous, and largely irreversible. Every arrest operation targets the human operators. The underlying financial infrastructure — the fake exchanges, the money mule networks, the crypto mixing services used to launder proceeds — continues to operate. Until meaningful accountability is applied to cryptocurrency platforms that facilitate these transactions, arrest operations will remain a symptom-management tool rather than a structural solution.
