Global Crackdown on "Pig Butchering" Crypto Scams Leads to 276 Arrests
In a coordinated international operation, the FBI and global law enforcement agencies dismantled nine scam centers linked to cryptocurrency investment fraud, resulting in the arrest of 276 individuals across the Middle East and Southeast Asia. The takedown targeted transnational fraud networks behind so-called "pig butchering" schemes elaborate scams that manipulate victims into fake crypto investments through romance or friendship ploys.
Of those arrested, 275 were detained by Dubai police, while Royal Thai Police apprehended one suspect. Among those charged in the U.S. were three Indonesian nationals, one Burmese national, and two unidentified co-conspirators still at large. The individuals face money laundering and wire fraud charges in the U.S. District Court for the Southern District of California, stemming from their roles in three fraudulent companies: Ko Thet Company, Sanduo Group, and Giant Company. These entities allegedly defrauded American victims of millions of dollars.
The operation, active since at least 2024, was uncovered after an FBI-led Homeland Security Task Force investigation identified the scam compounds. The fraudsters used fake identities sometimes stolen from models to build trust with victims via social media, dating apps, or direct messages. Once rapport was established, they convinced targets to invest in bogus crypto platforms, such as CoinswiftTrading and SwiftLedger, often pressuring them to borrow money for larger "investments." After siphoning funds, the scammers cut off contact and locked victims out of their accounts.
The scale of these scams is staggering. The FBI reported over $11.3 billion in crypto fraud losses in 2025, while research from Norton and McAfee found that nearly half of U.S. online daters have been targeted by dating scams, with 15% losing money. The operations have grown more sophisticated, employing deepfake videos and AI tools to appear legitimate.
The crackdown is part of a broader U.S. effort to combat transnational fraud. In November 2025, the Justice Department, FBI, Treasury, and Secret Service launched the Scam Center Strike Force, which has since seized over 503 fraudulent web domains and charged additional suspects, including two Chinese nationals linked to a Burmese scam compound. The Treasury Department also sanctioned Cambodian Senator Kok An and his network, freezing their U.S. assets and barring American entities from engaging with them. Investigators allege Kok An protects multiple scam compounds in Cambodia through political influence.
The arrests highlight the persistent threat of industrial-scale fraud operations, many of which exploit forced labor in Southeast Asia’s border regions. Victims are often lured with fake job offers, only to be trapped in compounds where they are coerced into running scams. The latest takedown underscores the growing collaboration between global agencies to disrupt these criminal networks.
Giant Group cybersecurity rating report: https://www.rankiteo.com/company/giant-group
"id": "GIA1777567091",
"linkid": "giant-group",
"type": "Cyber Attack",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'American victims',
'industry': 'Cryptocurrency/Scam Operations',
'name': 'Ko Thet Company',
'type': 'Fraudulent Company'},
{'customers_affected': 'American victims',
'industry': 'Cryptocurrency/Scam Operations',
'name': 'Sanduo Group',
'type': 'Fraudulent Company'},
{'customers_affected': 'American victims',
'industry': 'Cryptocurrency/Scam Operations',
'name': 'Giant Company',
'type': 'Fraudulent Company'},
{'customers_affected': 'Nearly half of U.S. online '
'daters targeted; 15% lost money',
'location': 'United States',
'name': 'Victims (General Public)',
'type': 'Individuals'}],
'attack_vector': ['Social Engineering',
'Fake Crypto Platforms',
'Romance/Friendship Scams'],
'customer_advisories': "Public warned about 'pig butchering' scams, urged to "
'verify crypto investment platforms, avoid sharing '
'personal or financial information with strangers '
'online.',
'data_breach': {'personally_identifiable_information': 'Stolen identities '
"(e.g., models' "
'photos)',
'sensitivity_of_data': 'High (stolen identities used for '
'fraud)',
'type_of_data_compromised': 'Personally Identifiable '
'Information (stolen identities)'},
'date_detected': '2024',
'date_publicly_disclosed': '2025',
'description': 'In a coordinated international operation, the FBI and global '
'law enforcement agencies dismantled nine scam centers linked '
'to cryptocurrency investment fraud, resulting in the arrest '
'of 276 individuals across the Middle East and Southeast Asia. '
'The takedown targeted transnational fraud networks behind '
"'pig butchering' schemes, which manipulate victims into fake "
'crypto investments through romance or friendship ploys.',
'impact': {'financial_loss': '$11.3 billion (2025 crypto fraud losses '
'reported by FBI)',
'identity_theft_risk': "Use of stolen identities (e.g., models' "
'photos)',
'legal_liabilities': ['Money Laundering Charges',
'Wire Fraud Charges'],
'operational_impact': 'Disruption of fraudulent scam operations',
'payment_information_risk': 'Cryptocurrency theft',
'revenue_loss': 'Millions of dollars defrauded from American '
'victims',
'systems_affected': ['Fake Crypto Platforms (e.g., '
'CoinswiftTrading, SwiftLedger)']},
'initial_access_broker': {'entry_point': ['Social Media',
'Dating Apps',
'Direct Messages'],
'high_value_targets': 'American victims with access '
'to cryptocurrency'},
'investigation_status': 'Ongoing (suspects still at large, additional charges '
'possible)',
'lessons_learned': 'Growing sophistication of scams (e.g., deepfake videos, '
'AI tools), need for international collaboration to combat '
'transnational fraud networks, exploitation of forced '
'labor in scam operations.',
'motivation': ['Financial Gain', 'Money Laundering'],
'post_incident_analysis': {'corrective_actions': ['International law '
'enforcement collaboration',
'Sanctions on entities '
'protecting scam operations',
'Public awareness campaigns',
'Seizure of fraudulent '
'domains'],
'root_causes': ['Exploitation of human trust',
'Lack of regulation in '
'cryptocurrency space',
'Forced labor in scam compounds',
'Use of AI/deepfake tools for '
'legitimacy']},
'recommendations': "Enhanced public awareness of 'pig butchering' scams, "
'stricter regulations on cryptocurrency platforms, '
'international cooperation to dismantle scam compounds, '
'sanctions on entities protecting fraud operations.',
'references': [{'source': 'FBI'},
{'source': 'Norton and McAfee Research'},
{'source': 'U.S. Department of Justice'},
{'source': 'U.S. Treasury Department'}],
'regulatory_compliance': {'legal_actions': ['Charges filed in U.S. District '
'Court for the Southern District '
'of California'],
'regulations_violated': ['Money Laundering',
'Wire Fraud']},
'response': {'containment_measures': 'Arrest of 276 individuals, dismantling '
'of nine scam centers',
'law_enforcement_notified': 'FBI, Dubai Police, Royal Thai '
'Police, U.S. Homeland Security Task '
'Force',
'remediation_measures': 'Seizure of 503 fraudulent web domains, '
'sanctions on Cambodian Senator Kok An '
'and network'},
'stakeholder_advisories': 'Law enforcement agencies, cryptocurrency '
'platforms, and financial institutions advised to '
'monitor for fraudulent activity and collaborate on '
'disrupting scam networks.',
'threat_actor': ['Transnational Fraud Networks',
'Ko Thet Company',
'Sanduo Group',
'Giant Company'],
'title': "Global Crackdown on 'Pig Butchering' Crypto Scams",
'type': 'Cryptocurrency Investment Fraud',
'vulnerability_exploited': 'Human Trust and Psychological Manipulation'}