U.S. authorities seize $2.12M in USDT from Ethereum wallet tied to “pig butchering” scam
U.S. federal authorities have confiscated an Ethereum [ETH] wallet holding approximately $2.12 million in Tether (USDT), alleging that the funds are the proceeds of a large-scale investment fraud known as a “pig butchering” scam.
The seizure was carried out through a civil in rem forfeiture action, a type of lawsuit in which the government targets the property itself rather than bringing immediate criminal charges against a specific individual. In this case, the asset at the center of the proceeding was exactly 2,117,677.97 USDT held in a single crypto wallet.
How the “pig butchering” scheme worked
According to the complaint, the fraudsters did not rely on a single communication channel. They approached victims through dating apps, WhatsApp, mainstream social media platforms, and even fraudulent job offers. The goal of this initial contact was to build trust and establish what appeared to be either a personal or professional relationship.
Once communication was established, the scammers gradually steered victims toward supposed cryptocurrency “investment opportunities.” They touted exclusive access to high-yield trading strategies, insider knowledge, or special platforms that could generate guaranteed or unusually high returns with minimal risk. In many cases, scammers positioned themselves as successful traders or financial mentors offering to “help” the victim grow their savings.
Victims were then directed to fake cryptocurrency investment platforms controlled by the fraud network. These websites and apps were designed to look professional and legitimate, often mimicking the interface and branding style of real exchanges and trading platforms. When victims deposited funds, the dashboards on these sites showed impressive, but entirely fabricated, profits.
The psychological trap: why victims kept sending money
The scheme exploited classic psychological levers: trust, greed, fear of missing out, and sunk cost. As victims watched their supposed balances grow on the fake platforms, they felt increasingly confident. Scammers encouraged them to “add just a bit more” to maximize returns or to take advantage of a limited-time opportunity.
One victim from Tennessee, among others identified by investigators, lost a substantial amount of money in this way. After depositing funds, the victim saw fake profits accumulate and was eventually persuaded to invest even more to “unlock” higher tiers of returns.
The fraud reached a critical point when victims attempted to withdraw some or all of their funds. At this stage, the scammers claimed that a series of additional payments were required-often described as taxes, verification fees, or account upgrade charges. Victims were told that if they paid these extra amounts, their withdrawals would be processed promptly.
In reality, these demands were simply another layer of the scam. The so‑called tax and verification fees went straight into the criminals’ pockets. No withdrawals were ever processed because the platforms were fake and the money had already been moved elsewhere.
How the funds moved through the crypto ecosystem
Behind the scenes, the network did not leave the funds sitting in one place. To obscure the origin and ownership of the stolen assets, the fraudsters moved the USDT through a series of intermediary Ethereum wallets. This layering process is a common tactic in money laundering, designed to break the trail between the original victim deposits and the final destination of the funds.
Despite these efforts to conceal the flow of money, investigators used blockchain analysis tools to follow the on‑chain trail. Even though cryptocurrencies can be moved quickly and pseudonymously, every transaction on Ethereum is recorded publicly. By mapping the movement of funds and identifying repeating patterns, law enforcement was able to trace the stolen USDT back to a specific Ethereum wallet.
That wallet, now identified as holding proceeds from wire fraud and money laundering, ultimately became the target of the civil forfeiture action.
Legal basis for the seizure
The U.S. Department of Justice argued that the USDT in the wallet is subject to forfeiture under federal law because it represents the proceeds of wire fraud and was involved in money laundering activities. Under U.S. forfeiture statutes, property derived from or involved in certain criminal offenses can be seized, even if there is not yet a criminal conviction against any individual.
Since the tokens in question were Tether’s USDT, authorities coordinated with the issuer. Tether has the technical ability to freeze USDT held at specific wallet addresses. In cooperation with law enforcement, the company froze the 2.1 million USDT in the identified wallet, preventing the scammers from moving or cashing out the funds.
This step is crucial in crypto-related cases: unlike cash, which once withdrawn becomes very difficult to retrieve, many stablecoins include mechanisms that allow issuers to block or blacklist particular addresses in response to legal orders.
A snapshot of the broader crypto fraud landscape
The case comes against a backdrop of rapidly rising crypto‑related crime. The complaint highlighted the broader trend of cryptocurrency investment scams, noting that by 2024, the FBI had received more than 41,000 complaints about such schemes, with reported losses totaling $5.8 billion.
Alongside fraud, hacking and protocol exploits have also surged. In the first half of 2026 alone, the digital asset sector recorded 207 distinct hacking incidents-more than double the 85 hacks reported over the same period in 2025, based on industry analytics data. A significant portion of these attacks targeted decentralized finance (DeFi) protocols, with 126 incidents occurring in the second quarter of 2026 alone, reflecting growing vulnerabilities in smart contracts, cross‑chain bridges, and other on‑chain infrastructure.
The combination of social‑engineering scams like pig butchering and technical exploits on DeFi platforms underscores how both human psychology and code weaknesses are being weaponized against investors.
Why “pig butchering” scams are so effective
Pig butchering scams, named after the practice of “fattening up” a pig before slaughter, are built around long‑term grooming rather than quick theft. Unlike classic phishing attacks or one‑time frauds, these schemes often unfold over weeks or months.
Scammers invest significant time into building emotional or professional bonds with targets:
– They respond constantly, mirroring the victim’s schedule and interests.
– They share what appear to be personal stories, photos, or work details to seem authentic.
– They slowly introduce the idea of investing as a way to “build a future together” or “escape financial stress.”
By the time the fake investment opportunity is presented, the victim often feels they are dealing with a trusted partner, romantic interest, or mentor rather than a stranger. This sense of connection makes red flags easier to overlook-such as platforms that lack proper regulatory details, push for rapid deposits, or discourage independent verification.
Once a victim has sent the first deposit and sees fake profits, another psychological factor kicks in: the sunk cost fallacy. Having already “made money” on paper, victims feel compelled to keep going so as not to lose a seemingly winning opportunity.
Red flags investors should watch for
Cases like this one highlight several warning signs that can help investors avoid similar scams:
1. Guaranteed or unusually high returns
Any offer promising consistent, high returns with little or no risk should be treated with extreme skepticism. Legitimate investments carry volatility and uncertainty.
2. Pressure to move conversations off reputable platforms
When someone you barely know pushes you from a dating app, social network, or professional platform to private messaging and quickly introduces investment talk, that’s a major red flag.
3. Use of unregistered or obscure “investment platforms”
Fraudulent sites often lack clear ownership information, regulatory licenses, or verifiable company details. They may block you from withdrawing or require unexplained extra fees.
4. Demands for additional “taxes” or “verification fees” to withdraw
Real exchanges do not require users to pay taxes or arbitrary fees upfront just to access their own funds. Governments do not collect taxes through random crypto sites.
5. Reluctance to allow small test withdrawals
A legitimate platform will typically allow users to withdraw small amounts without issue. Scam sites often stall, create excuses, or inject new requirements as soon as withdrawal is attempted.
6. Emotional manipulation
When discussions of investing are tightly intertwined with romantic promises, emotional pressure, or appeals to guilt, caution is warranted. Financial decisions should not be driven by emotional blackmail or rushed ultimatums.
How law enforcement tracks crypto criminals
The seizure of the 2.12 million USDT wallet also demonstrates how law enforcement is evolving alongside the crypto industry. Contrary to a common misconception, cryptocurrency does not provide complete anonymity-especially on transparent blockchains like Ethereum.
Investigators can:
– Trace transaction flows: Every transfer between wallets is public, allowing analysts to map networks of addresses.
– Identify patterns: Clusters of wallets, repeated routing practices, and links to known exchanges or services can reveal the structure of a criminal operation.
– Cooperate with service providers: Exchanges, stablecoin issuers, and other intermediaries can, under legal orders, freeze assets, share relevant data, or block further transactions.
These tools do not eliminate crypto crime, but they give authorities more avenues to disrupt schemes, recover funds, and build cases against organizers and key participants.
Implications for investors and the crypto market
High‑profile seizures like this cut both ways for the broader crypto ecosystem. On one hand, they highlight real and growing risks, reinforcing the perception that digital assets are fertile ground for fraudsters. On the other hand, visible enforcement actions and successful asset freezes send an important signal that regulators and law enforcement are not powerless in the face of on‑chain crime.
For retail users, the message is twofold:
– Self‑protection is critical: No level of regulation can fully shield individuals who send funds to unknown parties or unverified platforms.
– Law enforcement can help, but recovery is not guaranteed: Even when authorities manage to freeze stolen assets, victims might not get all their money back, and legal processes can be lengthy and complex.
The incident underscores the ongoing tension in crypto between innovation and security. As new products, DeFi protocols, and cross‑border payment tools emerge, so do new attack surfaces and fraud opportunities.
Practical steps to stay safe in crypto investing
To reduce the risk of falling prey to pig butchering schemes or similar frauds, investors can adopt a few concrete practices:
– Verify platforms independently: Search for regulatory status, company registration, and a long track record. Avoid investing through links or apps sent by individuals you barely know.
– Keep personal and financial decisions separate: Be cautious when someone who has become close quickly pivots to discussing investments, trading, or business opportunities.
– Start small and test withdrawals: Before committing significant capital, send a small amount and confirm you can withdraw it without unexpected conditions.
– Don’t rely on screenshots or in‑app balances: On fake platforms, profits are just numbers on a screen. The real test is whether funds can be moved back to a wallet or account you control.
– Consult neutral third parties: Before making major financial moves based on advice from an online contact, talk to a qualified advisor or someone with no emotional stake in the relationship.
As the U.S. government continues to pursue the funds linked to the seized Ethereum wallet, the case stands as a reminder that while blockchain technology has introduced new forms of value transfer, it has not changed an old truth: if an investment sounds too good to be true-especially when presented by a stranger or new acquaintance-it almost certainly is.