The slow-burn that empties the whole account

Pig butchering' (sha zhu pan) is a long-con investment scam. The fraudster builds a romantic or friendly relationship over weeks, introduces a too-good-to-be-true crypto or forex 'investment platform,' shows fake gains to lure bigger deposits, then drains the victim across escalating transfers to crypto on-ramps.

Because the victim is emotionally invested and believes they are winning, they push the payments through over any objection your front line raises.

• Each transfer is authorized by the customer, who actively defends it — there is no account takeover and no stolen credential.
• Early transfers are modest and clear easily; by the time the amounts escalate, the customer is fully under the scammer's influence and will reassure staff that everything is fine.

• Escalating transfers toward crypto exchanges or on-ramps, often a brand-new behavior for the customer.
• Funds increasingly sourced by liquidating savings or CDs, or taking loans and advances.
• References to an online relationship or an 'investment opportunity / advisor' met recently.
• Defensiveness or scripted reassurance when questioned; transfers timed to the scammer's prompts.

• Watch for a first-time-then-escalating flow of funds to crypto on-ramps, especially paired with savings liquidation.
• Train the front line to ask gently about the destination and the relationship — and to pause, not just process.
• Add a step-up review when transfers escalate in size toward the same off-ramp over days or weeks.