Darket Diaries
Darket Diaries

141: The Pig Butcher

The #1 crime which results in the biggest financial loss is BEC fraud. The #2 crime is pig butchering. Ronnie Tokazowski https://twitter.com/iHeartMalware walks us through this wild world. Sponsors Support for this episode comes from NetSuite. NetSuite gives you visibility and control of your financ

Featured Speakers

Jack Rhysider HostRonnie Tokazowski Guest

Topics Discussed

Episode Summary

Executive Summary: The episode examines online financial fraud, focusing on romance-linked crypto “pig butchering,” business email compromise (BEC), and pandemic benefit fraud. Expert Ronnie Tokazowski describes how scammers exploit trust, emotional vulnerability, and weak financial controls, sometimes causing catastrophic losses and severe psychological harm. The discussion also connects fraud networks across crime types and urges better prevention, victim support, and accountability.

Main Topics: Escrow and financial transaction fraud: The host opens with a listener’s account of a $250,000 home-purchase escrow payment allegedly diverted after scammers impersonated the seller. The buyer was left without the money or house, illustrating the risks when a trusted intermediary fails and the uncertainty of recovery. Romance-linked crypto pig-butchering scams: Scammers build relationships through dating platforms and messaging apps, then steer victims toward convincing fake investment platforms. Displayed profits, small successful withdrawals, time-limited bonuses, and demands for additional deposits encourage victims to invest savings or borrow money before the scammers disappear. Victim vulnerability, harm, and recovery: Tokazowski emphasizes that scammers exploit trust, loneliness, grief, and other vulnerable moments, isolate victims from friends and family, and create shame that discourages reporting. Losses can bring debt, lost homes and relationships, and suicidal distress. Support includes emotional care, reporting channels, law enforcement contacts, and efforts to trace or recover funds. Business email compromise and fraud networks: BEC typically tricks employees into sending money or valuables through impersonation and social engineering, often without malware. Scammers research company roles, imitate suppliers or executives, and use victims of romance scams as money mules. The episode links these schemes to longstanding Nigerian fraud operations. Scam infrastructure, detection, and Black Axe: The discussion describes scammers’ varied capabilities, including emotional manipulation, crypto operations, domain impersonation, and money laundering. It recommends checking domain age and detecting lookalike domains. It also explores reported links between BEC and Black Axe, a violent Nigerian criminal organization, while noting the group’s contested relationship with the Neo-Black Movement. Pandemic relief fraud and institutional responsibility: The episode describes how fraud groups exploited rapidly distributed unemployment and small-business relief funds, including through identity and email-account abuse. The host criticizes inadequate safeguards, while the guest stresses that fraud persists when institutions fail to acknowledge its scale and address systemic weaknesses.

Key Arguments: Pig-butchering scams are not simply bad investment decisions: scammers cultivate emotional intimacy, manufacture apparent proof of returns, and apply escalating pressure to induce larger deposits and borrowing. Financial totals alone understate the damage. Victims may also experience shame, isolation, debt, loss of housing and relationships, and suicidal distress; support should address emotional harm as well as fund recovery. BEC is a major financial crime because it relies on human manipulation rather than malware, allowing many messages to bypass security systems focused on malicious files or links. Romance-scam victims may be recruited, knowingly or unknowingly, into moving funds, connecting personal fraud to broader money-laundering and BEC operations. Organizations can improve defenses by identifying lookalike domains, checking domain reputation and age, and making suspicious-email warnings more informative to users. The episode argues that rapid public disbursements without adequate verification create openings for large-scale fraud; prevention and accountability should accompany emergency funding.

Data Points: Escrow payment in listener’s home-purchase story: $250,000 - The host says the buyer’s escrow funds were allegedly sent to a scammer impersonating the seller; the transcript gives no outcome. Loss reported in the Good Morning America pig-butchering story: More than $450,000 - The host cites a report about a woman who was scammed through a dating-app relationship and fake crypto investments. Loss by Tokazowski’s colleague: About $90,000; approximately $10,000 recovered - The colleague was drawn into a fake crypto investment and later persuaded the scammers to return some funds. Scammer-promised investment return: 20% per day, according to the scammer - The implausible daily return was used to entice the victim; it was a fraudulent claim, not a legitimate yield. Additional deposit demand to unlock an account: $40,000 within 96 hours - A reported pressure tactic claimed the account lacked funds to cover withdrawals and threatened the victim with losing access. Losses in other cases described by Tokazowski: More than $1.7 million; over $5 million; over $24 million - The first involved a person facing possible loss of homes after taking second mortgages; the second was linked to a suicide; the third victim reportedly lost a house, custody of children, a relationship, and a business. BEC ranking and period: Number one by reported financial losses for seven consecutive years, 2015–2021 - The episode says pig butchering ranked first in 2022 and BEC second. Pandemic relief fraud estimate: $100 billion confirmed; up to roughly $400 billion discussed as possible or under review - Tokazowski attributes the confirmed figure to the Secret Service and describes the larger figure as uncertain; the episode also cites estimates reaching $1 trillion, without establishing a definitive total. U.S. pandemic relief spending and reported share stolen: $5 trillion in spending; nearly $100 billion reportedly stolen, about 3% - Figures cited in the episode from a news report and a Pandemic Response Accountability Committee interview. States targeted in unemployment fraud activity: 14 states - Tokazowski says the group Scattered Canary was observed targeting unemployment systems across this many states at its peak.

Pivotal Quotes: "you have two factors at play here: you have the financial losses, and then you have the emotional hurt that goes along with it" — Ronnie Tokazowski: He explains why the impact of romance scams cannot be measured by money alone. "This is us getting hacked. This is you and me. This is each one of our neighbors." — Jack Resider: The host stresses that social-engineering fraud directly targets individuals, not just companies. "Fast money equals fast crime." — Roy Dotson, Secret Service agent, as quoted in the episode: A warning about the fraud risks created when large sums are distributed rapidly.

Implications: Listeners should treat fast, unusually high-return investments and relationship-driven money requests as serious warning signs, verify identities independently, and report scams without shame. Platforms, financial institutions, and governments need stronger fraud detection, safeguards for rapid payments, and support that addresses both financial and emotional losses.

🔓 Sign Up for Unlimited Episode Search

About Darket Diaries

Explore true stories of the dark side of the Internet with host Jack Rhysider as he takes you on a journey through the chilling world of hacking, data breaches, and cyber crime.

View all episodes from Darket Diaries