Inside ‘pig-butchering’: the most insidious scam on the internet

Romance “pig-butchering” scams are proliferating and becoming more lucrative and technologically sophisticated: the FTC logged more than 64,000 US romance-scam reports in 2023 (>$1.1bn losses) and 55,604 reports with $1.16bn lost in the first nine months of 2025. One victim, Beth Hyland, sent $26,000 via a Bitcoin ATM before recognizing the fraud; researchers warn scammers now deploy AI (translation, note-taking), deepfakes and SaaS scam kits run by organized gangs in West Africa and Southeast Asia, often exploiting trafficking victims. The trend heightens operational, reputational and regulatory risk for fintech and crypto platforms and underscores growing cybersecurity vulnerabilities tied to AI-enabled social-engineering attacks.

Analysis

Market structure: Pig-butchering and romance scams increase demand for fraud-detection, identity verification and endpoint/cloud security. Direct winners: enterprise cybersecurity and IAM vendors (CrowdStrike CRWD, Palo Alto PANW, Okta OKTA, Zscaler ZS) and AML/transaction monitoring vendors; losers: consumer-facing dating platforms (Match MTCH, Bumble BMBL) and retail crypto cash-out channels (Coinbase COIN exposure to reputational/regulatory risk). Expect platforms to face higher content-moderation and compliance costs that compress margins by mid-single-digit percentages over 2–4 quarters.

Risk assessment: Tail risks include bipartisan regulation making platforms legally liable for fraud (0–25% probability within 12–24 months), large class-action suits, or global crackdowns on crypto ATMs that could cut COIN revenue 5–15% annually. Near-term (days–weeks) risk is headline-driven user attrition; medium-term (quarters) risk is higher security capex and slower DAU monetization; long-term (years) is secular growth in cyber spend (~8–12% CAGR) offset by macro IT budget pressure.

Trade implications: Favor cybersecurity and AML fintech on 3–12 month horizons while tactically short consumer dating/platform exposure. Use concentrated, sized positions (see decisions) and hedge execution risk with options for event-driven headlines (earnings, FTC reports). Monitor FTC complaint volumes and congressional inquiries over next 30–90 days as primary catalysts.

Contrarian angles: The market may over-penalize MTCH/BMBL while underpricing monetization of “safety” features (pay-per-protection, subscription uplift) that incumbents can deploy in 1–3 quarters. Conversely, strict regulation could entrench large enterprise tech (MSFT) and security incumbents — consider modest asymmetric long exposure to regulated-capable firms.

Key Decisions for Investors

• Establish a 2.5% portfolio long in CrowdStrike (CRWD) over 3–12 months — accumulate on dips >8% and target 15–25% upside as enterprise security budgets reallocate to detection/response; hedge with a 6-month 25-delta OTM put at 0.5% notional.
• Initiate a 1.5% short position in Match Group (MTCH) using 3–6 month 10% OTM puts (or equivalent short equity) anticipating 5–12% downside from reputational churn and higher trust-moderation costs; size to limit exposure to earnings surprises and close into positive guidance or material product safety monetization.
• Pair trade: long Palo Alto Networks (PANW) 1.5% and short Bumble (BMBL) 0.75% — PANW benefits from enterprise security spend while BMBL faces user-growth/ARPU risk; rebalance after quarterly earnings or any FTC announcement within 90 days.
• Allocate 1% to Coinbase (COIN) tail-hedge (buy 6–12 month $/€-denominated puts or buy protective puts on COIN) to protect against incremental crypto regulatory action or ATM-related cash-out curbs that could reduce transactional volume by >10% in 6–12 months.
• Redeploy 2–4% from consumer internet exposure into AML/identity vendors (example: Okta OKTA 1–2%) over next 30–90 days; monitor FTC romance-scam filings (weekly) and any bipartisan legislative text — if platform-liability language appears, increase defensive/security longs by another 1–2%.