Pig Butchering Recovery Help
If you suspect you're being groomed into a fake investment platform — or you've already sent funds — Mythos analyzes the conversation, the platform, and the wallet, then helps you build a complaint that actually moves.
Pig butchering (shā zhū pán, 殺豬盤) is the deadliest scam pattern of the last decade — global losses exceed $75 billion since 2020 (United Nations 2024 estimate). The pattern is industrial: scam compounds in Southeast Asia run thousands of low-paid operators following a script (the 'fattening' phase, sometimes 8-12 weeks of relationship-building) before the victim is led to a fake trading platform that lets them 'profit' on paper, then drains everything when they try to withdraw. The good news: the pattern is so consistent that detection works, even mid-scam.
What we do is three-fold. First, we forensically analyze the WhatsApp / Telegram / Line conversation for the 9 grooming markers (warm pre-investment chatter, gradual financial probing, fake tax-free investment introduction, 'small win' to build trust, escalation, withdrawal block, escalating fee requests, recovery agent re-victimization). Second, we check the investment platform domain and the wallet addresses against international scam corpora. Third — if funds already moved — we produce a complaint dossier in the Swiss CPP + EU Daubert format that law enforcement actually opens. The recovery is never guaranteed, but the dossier quality determines whether your case sits at the top of the prosecutor's stack or at the bottom.
How it works
- 1
Bring the full chat history
Export the WhatsApp / Telegram chat (Settings → Export chat) and upload the .zip. The longer the history, the more reliable the grooming-marker detection. Even one screenshot helps for the most recent escalation phase.
- 2
Provide the trading platform URL and wallet
If they directed you to invest on a specific platform, give us the URL. If they gave you a deposit wallet, paste it. We'll cross-reference both against our scam corpus and on-chain behaviour databases.
- 3
Read the structured verdict
You'll get a phase-by-phase breakdown showing exactly which grooming marker triggered where in the conversation, with quoted citations. You'll see the platform domain assessment and the wallet reputation. And you'll get a recommended action sequence — most often: stop all further transfers immediately, preserve evidence, notify your bank, file the complaint.
- 4
Build the complaint dossier
The forensic dossier formats the evidence for filing with Polizia Postale (Italy), IC3 (US), Action Fraud (UK), Kantonspolizei (Switzerland), Bundeskriminalamt (Germany). Each format includes the case-number convention that jurisdiction expects, the methodology citation (NIST SP 800-86 + ISO/IEC 27037), and the hash chain of every exhibit.
What we detect
- 9-marker grooming sequence (warm-up → big ask)
- Fake trading platform domain fingerprints
- Wallet topology consistent with pig butchering pools
- Recovery-scam re-victimization patterns (corpus SW-RECOVERY-FEE)
- LLM-bot operation markers in the chat
- Cross-reference with SW-PIG-BUTCHERING + sibling entries
- Forwarded fake 'profit screenshot' detection
- Fake KYC / customer-service voice note synthesis
- Withdrawal-blocked tax-pretext fee sequences
- Cross-platform identity correlation (LinkedIn → WhatsApp pivot)
Frequently asked questions
Can you actually recover my money?
We are explicit: no service can guarantee crypto or wire recovery, and anyone who promises it for an upfront fee is part of the secondary 'recovery scam' that piles on top of pig butchering (SW-RECOVERY-FEE in our corpus). What we deliver is a forensic dossier with measurable impact on the recovery probability: it materially speeds up bank-side investigation under PSD2 / DSP3, raises the priority of your complaint with law enforcement, and provides what destination exchanges (Binance, Coinbase, Kraken, OKX) need to freeze KYC'd funds when reached fast enough (typically <72 hours).
I am still mid-conversation. Should I confront them?
No. Confrontation triggers the exit phase, where they vanish with all evidence. Instead: silently export the chat, run it through Mythos, and let the analysis confirm whether you're in a pig butchering script. If RED, the correct next step is to slow-roll the conversation (don't transfer more, don't agree to anything) while you preserve evidence and contact your bank's fraud team if money has already moved. We have a step-by-step guide in the dossier.
What if they're now offering to 'help me recover'?
Two-stage scam: the same operator (or a 'partner' from the same compound) pivots to a recovery agent persona, sometimes impersonating Interpol, FBI, SEC, or a Swiss law firm. They charge an upfront 'release fee' or 'tax payment' to unlock your 'frozen' assets. Our corpus has 14 documented variants. Block them. The legitimate recovery path is: complaint to your local cybercrime unit, complaint to the destination exchange (if KYC'd), civil action in some jurisdictions if the operator is identified. None of those legitimate paths charge upfront crypto fees.
Ready to start?
Open Mythos, describe the situation, upload the evidence. Free triage, court-grade dossier from CHF 29/month.
Start free analysisEncrypted. No training on your files. WORM audit chain. Trust hub.