Skip to main content

Analysis of a Cryptocurrency Investment Scam: Pig Butchering

Botha, Johannes George ; Singh, Kreaan ; Leenen, Louise (2025) — European Conference on Cyber Warfare and Security

View Original Source (opens in a new tab)

DOI: 10.34190/eccws.24.1.3558 (opens in a new tab)

Type:   Journal Article
Country:   Global
Tags:   AI-Enabled Fraud, Blockchain Analysis, Cross Cultural, Cryptocurrency Investment Fraud, Elite Bit, Money Mules, Offender Tactics, Osint, Pig Butchering, Platform Policy, Prevention, Risk Factors, Romance Crypto Scam, Social Engineering, Tinder, UK Victim, Victim Experience, Withdrawal Fees
What do these research terms mean?
Preprint
A manuscript shared before formal peer review and publication. Check whether a later published version is available.
Dataset
A collection of data or examples for others to inspect or reuse. It can appear in Library search and topic mapping, but RSRC does not use dataset records as evidence in Research Insights.
Dissertation or thesis
Research submitted for an academic degree. This describes its format, not its reliability.
Journal article
An article published in a journal. This label alone does not establish peer review, study quality, or how well the findings apply elsewhere.
Qualitative research
Examines experiences, meanings, or processes, often through interviews or observations. It can explain how something happens without estimating how common it is.
Quantitative research
Uses numerical measurements to describe patterns or test relationships. A relationship between two measurements does not by itself show that one causes the other.
Systematic review
Uses a planned, documented method to find and assess research addressing a question. Its conclusions still depend on the included studies and what the search covered.
Meta-analysis
Statistically combines results from multiple studies. Combining studies does not remove weaknesses in their design or make unlike populations interchangeable.
Not classified
This record has no recognized label in this filter. It does not mean the publication used no method, or that no research exists.

Definitions draw on DataCite resource types; Cochrane review methods; NLM: association and causation. RSRC’s dataset and classification rules are explained in our methodology.

Citation tools
Download RIS Download BibTeX 


              
              

            

          

        


      

      

    

        
Transparency

        
Evidence and review status

        
This page contains AI-generated content. No human content review or subject-matter-expert review is recorded.

    


    

                    

                
Source basis

                

                    Downloaded PDF
                

            

                    

                
Source updates

                

                    No notice found at last check
                

            

                    

                
AI-generated page content

                

                    Yes
                

            

                    

                
Automated checks

                

                    Passed
                

            

                    

                
Administrative approval

                

                    Yes
                

            

                    

                
Human content review

                

                    Not recorded
                

            

                    

                
Subject-matter-expert review

                

                    Not recorded
                

            

            


    

        
            How this was prepared
        
        

                            

                    
Source basis

                    

                    
RSRC downloaded and privately stored a copy of the paper for internal analysis. The PDF is not offered to viewers from this page.


                                            
    
                                                            
  • 
                                    PDF added to RSRC:
                                    
                                
    • 
                                                    

                    
                                        

                

                            

                    
Source updates

                    

                    
No incoming update notice was found in the dated Crossref response. Coverage is incomplete, particularly for corrections and expressions of concern; this is not a guarantee that the source is valid or unchanged.


                                            
    
                                                            
  • 
                                    Last source-status attempt:
                                    
                                
    • 
                                                    

                    
                                        

                

                            

                    
AI-generated page content

                    

                    
AI-generated research notes displayed on this page: Synopsis, Identified gaps, Methods, Limitations, Future work. The paper itself is not described as AI-generated.


                                            
    
                                                            
  • 
                                    Document analysis recorded:
                                    
                                
    • 
                                                            
  • 
                                    Page record updated:
                                    
                                
    • 
                                                    

                    
                                        

                

                            

                    
Automated checks

                    

                    
The current, source-bound synopsis passed the recorded versioned publication checks.


                                            
    
                                                            
  • 
                                    Checks completed:
                                    
                                
    • 
                                                    

                    
                                            

                            
                                View passed checks (3)
                            
                            
    
                                                                    
  • Length, completeness, repetition, refusal, boilerplate, and active-markup screening
    • 
                                                                    
  • Numerical claims checked against the available source text
    • 
                                                                    
  • English-source lexical grounding check
    • 
                                                            

                        

                                        

                

                            

                    
Administrative approval

                    

                    
The record is approved for public display, but a complete historical administrator action is not recorded.


                    
                                        

                

                            

                    
Human content review

                    

                    
No human review is recorded for the AI-generated content displayed on this page.


                    
                                        

                

                            

                    
Subject-matter-expert review

                    

                    
RSRC has not recorded review of this content by a subject-matter or methods expert.


                    
                                        

                

                    

    


    

        Review-state definitions

        Found a possible error?
        Request a correction.
    



    



              

        
                  

            
Synopsis

            
A qualitative single-case investigation examined a UK victim's Elite-Bit pig-butchering experience using interviews, correspondence, bank statements, platform login records, and victim-provided identifiers. The researchers evaluated platform red flags; conducted on-chain transaction tracing with Breadcrumbs; performed off-chain OSINT on the Tinder profile, phone number, domain, Gmail account, and platform records; and applied the 11P method and Maltego link analysis to map relationships among the victim, suspect, transactions, domain, and social-media entities. The authors conclude that enhanced regulation and public awareness are urgently needed in response to cryptocurrency scams. The on-chain analysis found that the victim and her friend transferred a total of 5.4910 ETH to Elite-Bit. The investigation was constrained by limited victim-provided inputs and few transactions between victim and scammer.

          

        
                  

            
Identified Gaps

            
The analysis lacked key attribution evidence: Binance subpoena results, Gmail headers, and subscriber information for the mobile number and protected domain registration. Transactions indicating additional victims were identified but were outside this paper’s scope. The authors also infer that other UK women may be targeted, but do not test this systematically. As a single victim case, the study does not establish the prevalence or generalisability of the identified scam pattern.

          

        
                  

            
Methods

            
A qualitative single-case investigation examined a UK victim’s Elite-Bit pig-butchering experience using interviews, correspondence, bank statements, platform login records, and victim-provided identifiers. The researchers evaluated platform red flags; conducted on-chain transaction tracing with Breadcrumbs; performed off-chain OSINT on the Tinder profile, phone number, domain, Gmail account, and platform records; and applied the 11P method and Maltego link analysis to map relationships among the victim, suspect, transactions, domain, and social-media entities.

          

        
                  

            
Limitations

            
The investigation was constrained by limited victim-provided inputs and few transactions between victim and scammer. Binance account-holder and outgoing-transaction data were unavailable because a subpoena required UK law-enforcement action and no response had been received. The victim could not provide the Gmail header, limiting IP/location analysis. Reverse-image and standard phone-number OSINT searches yielded no positive results. Evidence of other victims was identified but excluded from the study scope.

          

        
                  

            
Future Work

            
Obtain a UK law-enforcement subpoena to Binance, then use account-holder information and outgoing transactions for further off-chain analysis. UK law enforcement should use the on-chain and OSINT evidence promptly to assist this and other victims and potentially identify linked offenders. The victim may also seek support and cooperation through international agencies such as Interpol and Europol.

          

              

    
    

        
Related Research Insights

        

            See how this publication connects to RSRC's living evidence syntheses through current citations and research-topic mapping.