Pig Butchering Scams: Inside FinCEN’s $13 Billion Alert

Pig butchering scams have become one of the largest sources of scam-related reporting in the U.S. financial system. On September 3, 2026, the Financial Crimes Enforcement Network (FinCEN) published a Financial Trend Analysis and an alert urging financial institutions to watch for digital asset investment scams run by overseas scam centers. The analysis tied nearly $13 billion in financial activity to these schemes.

For compliance teams, the release carries practical weight. It describes how scam operators find victims, how they launder proceeds, and what FinCEN expects from institutions in response. This article summarizes the key findings and outlines steps compliance teams can take.

Key Highlights

• FinCEN reviewed 33,904 Bank Secrecy Act (BSA) reports filed between September 8, 2023, and December 31, 2025, covering about $12.7 billion in suspected digital asset investment scam activity.
• Victims of all ages were targeted across all 50 states and several U.S. territories.
• Scam center operators buy illicit services on “guarantee marketplaces” and rely on professional money launderers to open accounts and move funds.
• Proceeds reach the formal financial system through money mules and stablecoin transfers to digital asset exchanges outside the United States.
• FinCEN encourages voluntary information sharing under Section 314(b) of the USA PATRIOT Act and detailed BSA reporting from institutions.

What Are Pig Butchering Scams?

Pig butchering scams, which FinCEN also calls romance baiting or cryptocurrency confidence schemes, are long-running frauds built on manufactured trust. Criminals adopt fake personas, often posing as a romantic partner, a new friend, or a business contact. They then use social engineering to persuade victims to send money to fraudulent digital asset investments.

Transnational criminal organizations based in Southeast Asia run most of these operations from industrial-scale scam compounds. Scammers frequently build websites and mobile applications that imitate legitimate investment services. Treasury official Gene Lange called them one of the most significant fraud threats facing Americans.

What FinCEN’s $13 Billion Analysis Found

The data comes from BSA reports that institutions filed on suspected digital asset investment scams. The figure reflects reported suspicious activity, and it shows that institutions across the sector already see this behavior in their customer bases.

FinCEN framed the release as part of Executive Order 14390, “Combatting Cybercrime, Fraud, and Predatory Schemes Against American Citizens.”

How Scam Centers Launder Proceeds

FinCEN describes an organized criminal supply chain. Guarantee marketplaces are online markets where scam center operators purchase illicit services such as account creation, phishing, and money laundering. Professional money launderers then establish financial accounts and shell companies and move the funds.

Those launderers integrate scam proceeds into the formal financial system through money mule networks and stablecoin transfers to digital asset exchanges outside the United States. The victim’s payment is only the first step. Mule and shell company accounts can sit at any institution, so both the sending side and the receiving side of a payment carry risk.

Detecting Digital Asset Investment Scam Activity

FinCEN’s alert lists red flags to help institutions detect, prevent, and report scam center activity, and compliance teams should review it in full. Alongside that list, several general monitoring approaches apply:

• Customer-side patterns: Transfers to new payees or digital asset exchanges that fall outside a customer’s normal behavior, especially in rising amounts.
• Recipient-side patterns: Accounts that receive many inbound payments and quickly forward them out, a common mule pattern.
• Exchange and stablecoin exposure: Outgoing transfers to offshore digital asset exchanges that follow a series of unusual deposits.
• Front-line escalation: Staff who hear a customer describe an online relationship or investment they cannot fully explain should escalate the conversation.

A transaction monitoring solution can apply these scenarios consistently across payment types and route alerts to investigators with the customer context they need. Teams building crypto-specific scenarios can also review common cryptocurrency red flags in AML compliance.

Reporting and Information Sharing Expectations

FinCEN states that BSA reporting is essential to law enforcement investigations and victim recovery. Well-documented suspicious activity reports that capture the relationship, the payment flow, and the destination of funds give investigators the detail they need.

FinCEN also strongly encourages voluntary information sharing under Section 314(b) of the USA PATRIOT Act, which provides safe harbor protection from liability for institutions that share information on possible money laundering. Through its Rapid Response Program, FinCEN shares financial intelligence with counterpart financial intelligence units abroad and encourages foreign authorities to stop and repatriate fraudulent transactions.

Victims should contact their financial institution immediately and file a complaint with the Federal Bureau of Investigation’s Internet Crime Complaint Center (IC3) or the nearest U.S. Secret Service field office. Front-line teams should know how to direct customers to these channels.

Strengthening Scam Detection in Your AML Program

The FinCEN release shows scam-related reporting at a scale that no institution can treat as an edge case. Programs that combine transaction monitoring, customer risk scoring, timely and detailed SARs, and information sharing are better positioned to interrupt the flow of funds from victims to scam center networks. Reviewing FinCEN’s alert against current monitoring scenarios is a practical place to start.