Law enforcement in several countries arrested at least 276 people and froze about $702 million in crypto in a coordinated move against romance-baited investment fraud, the kind known as "pig butchering." The action was announced in late April 2026, and it is one of the larger joint strikes against these networks to date. If you take one thing from it, take the pattern the scammers use, because spotting it early is what actually protects your money.
What happened
On April 29, 2026, agencies including the FBI, the US Secret Service, the Department of Justice, Dubai Police, the UK National Crime Agency, the Ontario Provincial Police, China's Ministry of Public Security, and Thailand's Royal Thai Police announced results from a set of linked operations. Dubai Police made 275 of the arrests; the Royal Thai Police picked up one more, a fugitive. Together the actions dismantled at least nine scam centers.
A separate restraint action on April 23 froze about $701.96 million in crypto tied to money laundering, according to CryptoTimes. Six defendants were charged in the US District Court for the Southern District of California with wire fraud conspiracy and money laundering conspiracy.
Two methods came up by name. The first is pig butchering: a long con where a stranger builds a friendship or romance over weeks, then steers the target into a "sure thing" crypto investment that turns out to be a hole in the ground. The IRS describes it as fraud "where scammers gain a victim's trust over time, through friendship or romance, before persuading them to send money." The second is approval phishing, where the scammer talks you into signing a wallet permission that quietly hands them spending control over your tokens.
For scale on the human side, the FBI's Operation Level Up, a victim-notification effort, has saved targets an estimated $562 million by warning them before they sent more, a figure cited in both the IRS release and CryptoTimes.
How to spot the playbook before money moves
The arrests grab headlines, but the scammers who got away are running the same script tomorrow. It rarely changes, and that is the good news, because a fixed pattern is one you can learn to see.
It usually opens with a wrong-number text, a friendly DM, or a dating-app match that feels warm and a little too easy. The person is attentive. They ask about your day. There is no pitch, not yet. That patience is the tell, not the reassurance it is meant to be. Over days or weeks they mention an investment that has done well for them, often a crypto platform or a trading "tip" from an uncle or a mentor. They offer to show you. The first small deposit even pays out, so you can withdraw it and feel safe. Then the numbers on your dashboard climb, you put in more, and when you try to cash out the real balance there is a "tax," a "fee," or a frozen account. The money is already gone.
Two rules cut through almost every version of this.
Never act on an investment tip from someone who contacted you first. A stranger who slid into your messages, matched with you, or texted the "wrong number" is not your path to a good return. The relationship exists to move you toward a deposit. The slower and kinder the build, the more this rule matters, not less.
Never sign a wallet approval you do not understand. Approval phishing works because the malicious transaction looks routine. If a site or a new contact asks you to connect a wallet and approve a permission, stop and read exactly what you are granting. An unlimited spending approval to an address you cannot verify is how funds leave a self-custody wallet like MetaMask without a second prompt. When in doubt, reject it and revoke any approvals you are unsure about.
A few smaller signs that round out the picture: pressure to move the chat to WhatsApp or Telegram fast, a platform you cannot find in any independent review, guaranteed or unusually steady returns, and that small successful withdrawal early on that exists only to lower your guard. Any one of them is reason to slow down. Two together is reason to walk.
If you think you are in one, stop sending money immediately, keep every message and transaction record, and report it. The takedown shows these networks can be reached, but recovery after the fact is rare. The defense that works is the one you apply before the first transfer, and it starts with knowing the script. Our crypto safety guides go deeper on protecting a wallet and checking a platform before you fund it.