Incident Report

Pig-Butchering Scam: The Shell Company Laundering Case

Pig-butchering scams often start with a text that looks like a wrong number. This case shows where the money goes afterwards.

Updated October 11, 2026
TL;DR

In February 2026 the Justice Department announced that a 31-year-old California man was sentenced to 40 months for conspiracy to commit money laundering in a pig-butchering scheme. He and others opened shell companies and bank accounts to move the proceeds. He forfeited more than $2.3 million and was ordered to pay more than $2.8 million in restitution. The scam opens with a friendly stranger and ends with a fake platform that blocks withdrawals.

Scammers start with details that have already leaked. Is your email one of them?

Free · About 30 seconds · No sign-up · Email not stored

"Pig butchering" is the name for an investment scam in which the victim is fattened with attention and fake profits before the money disappears. It is usually described from the victim's phone. A February 2026 Justice Department release describes the less visible part: the shell companies and bank accounts that make the payments disappear.

What happened

The Justice Department said a 31-year-old man from San Gabriel, California, pleaded guilty to conspiracy to commit money laundering and was sentenced to 40 months in prison. He forfeited more than $2.3 million in seized currency and was ordered to pay more than $2.8 million in restitution. The US Secret Service investigated.

How the scam works

The release describes the pattern. Scammers make contact through dating services, social media, unsolicited messages or phone calls, sometimes pretending to have the wrong number. They build a relationship over days or weeks. Then they introduce a cryptocurrency investment.

A fake platform shows the victim steady gains, which encourages larger deposits. When the victim tries to withdraw, they cannot. That is the point at which the scammers may demand "fees" or "taxes" for release, or simply stop responding.

The part the victim never sees

The defendant's role was on the money side. According to the release, he and others opened shell companies and bank accounts to launder the proceeds. A shell company with a real bank account lets a transfer look like normal business payments. For the scammers, that is the difference between a stolen wire and a payment they can move onward.

This explains why law enforcement and banks pay attention to newly opened business accounts that receive many unrelated payments. It also explains why a victim's bank can sometimes help if you report quickly.

What was exposed

The scam does not depend on a breach. It uses whatever the scammer can learn: your name, your phone number, your interests and your stage of life. Many victims are first contacted through a number scraped from a list. Keeping your phone number and email out of public listings reduces how easily you can be targeted. See how scammers get your phone number and email.

Your best defence is knowing what scammers may already have. Check your email free.

Free · About 30 seconds · No sign-up · Email not stored

How it ended

For the investigation, this was a success: a sentence, a forfeiture and a restitution order. For victims, the release does not say how much has been returned, and restitution orders are only as good as the money that can be found. The seizure of over $2.3 million shows that some funds can be recovered when the laundering is caught.

What you can do

1Treat the wrong-number text as a warning

A stranger who turns a mistaken message into a friendship and then investment advice is following a known pattern.

2Test before you trust

Do not deposit more because early gains look good. Try a small withdrawal, and be suspicious if it is blocked or if new fees appear.

3Check the platform independently

Look the company up with your financial regulator rather than through links the contact sent.

4Report fast

If you have sent money, contact your bank, then report the scam to the FTC and the FBI's Internet Crime Complaint Center.

Key facts at a glance

  • Sentence: 40 months after a guilty plea to conspiracy to commit money laundering
  • Forfeiture: more than $2.3 million in seized currency
  • Restitution: more than $2.8 million
  • Method: shell companies and bank accounts used to launder proceeds
  • Announced: February 2026
  • Investigating agency: US Secret Service

Warning signs of a pig-butchering scam

The early signs are social. A message that begins "Is this Anna?" and then becomes a friendship, a contact who is always available to chat and quickly shifts the conversation to a private app. The later signs are financial: a platform you have never heard of, returns that look unusually steady, pressure to deposit more and a withdrawal that suddenly needs a fee. Any one of these should make you stop. Several together describe the scam in the release almost exactly.

What the release does not say

The release says the scheme took millions of dollars but does not give a victim count or a total loss figure, so we have not included one. It also does not say how much of the forfeited money will reach victims. For a related case about a different part of the laundering chain, see the romance scam money mule case in Texas.

Nothing here can be undone for the people involved, but you can prepare. See the guides on how scammers find your phone number and email, how to prevent identity theft and what strangers can find about you online. You can also try our free digital footprint check.

Sources

Frequently asked questions

What does "pig butchering" mean?

It is the name for a scam where a victim is gradually groomed and encouraged to invest in a fake platform before the scammers take the money.

How do these scams usually start?

The Justice Department says through dating services, social media, unsolicited messages or calls, sometimes posing as a wrong number.

Why do scammers use shell companies?

A business account makes victim payments look like routine commercial transfers and helps move the money onward.

Can victims get money back?

Sometimes, if funds are frozen or seized, but recovery is never certain. Report to your bank immediately.

Step 1 · Free

See if your email has already leaked

  • Checks your email against known data breaches
  • Shows which sites leaked it, when, and what leaked
  • We do not store the email you check
Check my email free →
Step 2 · Hear about the next leak

Get alerted when your email leaks

Every NordVPN plan includes Dark Web Monitor, which alerts you if your email appears in new leaks.

See NordVPN →

Affiliate link. We may earn a commission at no extra cost to you.

Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.

Digital Footprint Scan creates practical privacy guides designed to help people understand and reduce unnecessary online exposure. Information can vary by website and jurisdiction, so check the current policies of the service or site involved before taking action. This report summarizes a Justice Department release. The release says the scheme took "millions of dollars" but gives no victim count, so we do not give one.