In-Person Pig Butchering: The FBI Warning on Physical Cash Courier Crypto Scams

Pig butchering, or sha zhu pan, has been the highest-loss consumer fraud category in the United States and Australia for three consecutive years, with the FBI's Internet Crime Complaint Center attributing more than five billion dollars in losses to the typology in 2025 alone. Until recently the entire playbook was digital: victims were cultivated over weeks on dating apps or social platforms, transitioned to WhatsApp or Telegram, and ultimately steered onto a counterfeit trading dashboard where their deposited funds appeared to multiply. The scam relied entirely on the victim being able to send crypto from a regulated exchange to an attacker-controlled wallet — a chokepoint that banks, brokers and exchanges have spent two years hardening with behavioural fraud detection, transfer holds and outbound warnings.

The June 2026 FBI advisory documents the predictable response: syndicates have pivoted to in-person cash collection. Victims are instructed to withdraw four-, five- or six-figure sums in physical currency from their bank, then meet a courier in a public location — a coffee shop, parking lot or hotel lobby. The courier authenticates the handover using a pre-shared password whispered earlier by the "investment mentor," or by matching the serial numbers of the first and last bills in each strap against a list the victim was told to photograph and send. Once the cash is in the courier's hands it is converted to crypto at an OTC desk within hours, and the victim's fake dashboard is updated to show the new "deposit" — followed almost immediately by fresh demands for "tax," "AML clearance" or "liquidity unlock" fees before any withdrawal can be processed.

The courier-driven variant defeats the controls that protect online victims, but it introduces its own signatures. No legitimate broker, exchange, fund manager, government agency or romantic partner will ever ask you to withdraw physical cash and hand it to a stranger. No genuine tax authority — IRS, ATO, HMRC, CRA — collects payment in cash from a courier; all collect via official portals or bank transfer to publicly listed accounts. No real KYC or AML process requires you to photograph bank notes or memorise a password to release funds. If any of these requests are made, the operation is fraudulent, regardless of how long the relationship has lasted or how persuasive the supporting fake dashboard appears.

Anyone currently in contact with an "investment mentor," "crypto tutor" or online romantic partner pushing them toward a trading platform should run that platform's URL and the contact's stated employer through Scam AI before any further deposit, cash withdrawal or in-person meeting. The platform combines global regulator warnings, sanctions data, business-registry checks and domain intelligence with an AI reasoning layer to flag the precise indicators — newly registered domains, missing licences, unverifiable corporate identities — that characterise pig-butchering fronts. A free scan at scamai.org takes seconds and is the single fastest way to interrupt a courier handover before it happens.