A California woman lost nearly $1 million. A Connecticut woman lost almost the same. A Bay Area widow only stopped because she ran her conversation through ChatGPT and the AI flagged it as fraud. None of these women were foolish. None were uneducated. They were targeted by professionalized criminal organizations running industrial-scale operations from compounds in Cambodia, Myanmar, and Dubai. In the first four months of 2026 alone, the US Department of Justice announced more enforcement actions against pig butchering than in the entire preceding decade combined.
If you are entering crypto in 2026, scam awareness is not optional. It is the single most important skill you can build, and it matters more than any investment strategy. This guide names the five scams that account for the majority of crypto losses targeting women, explains how each one works, and gives you the warning signs that catch 95% of them before they catch you.
Scam #1: Pig butchering, the romance investment scam
Pig butchering (sha zhu pan)
Pig butchering is the single largest source of crypto fraud losses in 2026. The name is a translation from Chinese (sha zhu pan), reflecting the criminal practice of "fattening up" a victim with trust and false profits before "slaughtering" them financially. Unlike traditional scams that ask for money directly, pig butchering is a slow-burn operation that can last weeks or months before the financial ask appears.
The pattern is consistent and well-documented. A stranger, usually presenting as an attractive, successful person of the opposite sex, contacts you on Facebook, Instagram, LinkedIn, a dating app, or even a wrong-number text. They appear warm, charming, and remarkably interested in your life. They quickly move the conversation to WhatsApp, Telegram, or Signal (away from the platform that might detect them). Over weeks, they build emotional intimacy. They never agree to meet in person. They never video call (or, in 2026, they use deepfake video).
Eventually, the topic of investing comes up. They mention their cryptocurrency successes. They offer to show you. They direct you to a legitimate-looking trading platform (which is fake, controlled by them, and designed to display fabricated returns). Your first small deposit shows a big profit within hours. You can even withdraw early profits (the criminals allow this to build confidence). They encourage you to invest more. Eventually, you cannot withdraw. Then they disappear, along with every dollar.
Red flags that identify pig butchering
- Unsolicited contact via social media, dating app, or "wrong number" text
- Rapid move to encrypted messaging apps (WhatsApp, Telegram, Signal)
- Romantic interest develops unusually quickly
- Refusal to meet in person; excuses for not video calling
- Introduces crypto or investment opportunity within weeks
- Trading platform you cannot find listed on CoinGecko or CoinMarketCap
- Early small profits to build confidence
- Pressure to invest larger amounts to "unlock" features
Scam #2: AI deepfake impersonation
AI deepfake video and voice impersonation
The most alarming evolution of 2025 and 2026. Generative AI has made it possible for scammers to create convincing fake video and voice content using publicly available material (your podcast appearances, your TikTok videos, your LinkedIn videos, your sister's wedding speech on Facebook). The FBI Norfolk Field Office confirmed in February 2026 that criminals now routinely use AI-generated voice messages and live deepfake video calls to make their schemes believable.
The two most common variants. First, the "family member emergency" scam: you receive a call (sometimes a video call) from someone who looks and sounds exactly like your daughter, your nephew, or your spouse, saying they have been arrested, kidnapped, or are in a medical emergency and need cryptocurrency wired immediately. Second, the "celebrity endorsement" scam: a deepfake video of a financial expert or celebrity (Suze Orman, Warren Buffett, Elon Musk) appears in your Facebook or YouTube feed promoting a "guaranteed" crypto opportunity.
The technology is now good enough that visual and audio cues alone cannot reliably distinguish real from fake. What does work is procedural verification.
Red flags that identify deepfakes
- Any urgent financial request from a family member, even on video call
- Pressure to act immediately, before you "have time to verify"
- Celebrity or expert promoting a specific crypto investment
- Requests to keep the situation secret from other family members
- Video has slight audio-visual desync, unnatural eye movement, or odd blinking patterns
- The "celebrity" cannot answer real-time, off-script questions naturally
Scam #3: Approval phishing and wallet drainers
Approval phishing and wallet drainer scams
Approval phishing is the technical evolution of crypto scams. Unlike pig butchering, which manipulates you into wiring money, approval phishing only requires you to sign a permission in your crypto wallet. Once signed, the attacker has standing authority to drain that wallet at any time, often weeks after you have forgotten the interaction.
Here is how it works. You connect your crypto wallet to a website that looks like a legitimate decentralized application, perhaps a fake version of a popular NFT marketplace, a fake airdrop claim site, or a fake DeFi yield platform. The site asks you to "approve" your wallet to interact with the contract. The approval looks routine. What you actually signed gives the attacker permission to move specific tokens out of your wallet at will. Sometimes nothing happens for days or weeks. Then your wallet is empty.
Operation Atlantic, launched by the US Secret Service, UK National Crime Agency, and Ontario Provincial Police in March 2026, identified over 20,000 wallet addresses affected by approval phishing. The technique is now industrialized and increasingly automated.
Red flags that identify approval phishing
- Unexpected pop-ups asking you to connect your wallet
- Links sent via Discord, Telegram, or Twitter DM to claim an "airdrop" or "reward"
- Sites that mimic real DeFi or NFT platforms but are at slightly different URLs
- Wallet approval requests for "unlimited" token amounts
- Any approval request you did not initiate yourself by visiting a known site
Scam #4: Fake exchanges and lookalike websites
Counterfeit exchanges and phishing websites
Scammers create exact-looking copies of legitimate exchange websites at URLs that are one letter different from the real thing. "Coinbasse.com" instead of "Coinbase.com." "Krakn.com" instead of "Kraken.com." "Geminni.com" instead of "Gemini.com." They buy Google Ads to push their fake sites to the top of search results. They send phishing emails that look exactly like real exchange notifications.
When you log in to the fake site, the scammers capture your username, password, and two-factor code. They immediately use those credentials on the real exchange to drain your account. Even SMS-based two-factor authentication is sometimes captured this way. This is why authenticator app 2FA is critical: even if the scammer captures your password, they cannot reuse a time-limited authenticator code if you do not enter it on their site.
The same principle applies to fake versions of MetaMask, Phantom, Trust Wallet, Ledger Live, and every other major crypto app. Always download wallet apps from the official website (which you reach through a bookmark, not a Google search) or from the verified developer in your phone's app store.
Red flags that identify fake exchanges
- URL is one or two letters different from the real exchange
- Site reached through a Google Ad rather than a direct search result
- Email from "support" asking you to log in via a provided link
- Site has no padlock icon in the browser, or has a different security certificate
- Site requests your seed phrase or private key (legitimate exchanges never do this)
Scam #5: Recovery scams targeting previous victims
Crypto recovery service scams
The cruelest scam in the ecosystem. After a victim loses money to one of the other four scams, they search online for ways to recover their funds. They land on websites for "crypto recovery experts," "blockchain forensics services," or "asset retrieval specialists." Some of these are legitimate, but most are not. The majority are run by the same criminal networks that performed the original scam, targeting the same victim twice.
Recovery scammers typically request an upfront fee, often $2,000 to $10,000, supposedly to cover their investigation costs. They provide fake updates suggesting progress, then ask for additional fees. Eventually they disappear, having extracted thousands more from someone who has already lost their savings.
If you have been scammed, the legitimate path is to report to the FBI Internet Crime Complaint Center (IC3.gov) within 48 hours, contact your bank and any exchange that processed the transaction, and consult a licensed attorney if amounts are significant. Recovery of crypto sent to a scammer is rare and difficult. Anyone promising guaranteed recovery for an upfront fee is running a second scam.
Red flags that identify recovery scams
- Cold contact (DM, email, phone) offering to recover lost crypto
- Upfront fees required before any "investigation" begins
- Claims of insider connections to exchanges, banks, or law enforcement
- Guarantees of recovery (impossible to legitimately offer)
- Pressure to act quickly before the trail "goes cold"
The universal defense: five rules that catch 95% of scams
Memorizing the specific patterns above helps, but criminals evolve fast. What does not change are the fundamental principles. These five rules, applied consistently, catch almost every scam in this article and most of the ones criminals will invent next year:
The five universal rules
- Never act on an unsolicited contact. If a stranger reaches out to you about crypto, the conversation ends there. Period. No exceptions for charming people, attractive photos, or seemingly legitimate credentials.
- Pause for 24 hours before any new financial action. Scammers create urgency because urgency bypasses your judgment. A real opportunity will still exist tomorrow. A scam will pressure you to act now.
- Verify any urgent request through a separate channel. Family emergency? Call them on a number you already have. Exchange asking you to log in? Visit the exchange through your bookmark, not the link in the email.
- Use authenticator app 2FA on every crypto account. Not SMS. Never SMS. This single setting blocks the majority of account takeover attempts.
- If anyone asks for your seed phrase or wallet permission, it is a scam. No legitimate party in the entire crypto ecosystem ever needs your seed phrase. None. Ever. This rule has zero exceptions.
If you have already been scammed
You are not alone, and you are not stupid. Pig butchering and AI scams are designed by professional criminal organizations specifically to overcome intelligent, careful people. Recovery is difficult but the right steps matter:
- File a report at IC3.gov (FBI Internet Crime Complaint Center) immediately, ideally within 48 hours
- Contact your bank to flag and potentially reverse any pending transfers
- Contact the exchange that processed your transactions
- Do not engage with anyone offering paid "recovery services"
- Talk to a licensed attorney if amounts are significant
- Talk to a therapist if you can. Scam victims experience real trauma, and processing it matters.
The women specifically being targeted
Demographic data is consistent and worth taking seriously. According to AARP research published in February 2026, nearly one in 10 adults aged 50 and older have had an online romantic connection ask them for money or push a crypto investment. Women aged 50 to 64, especially those recently divorced or widowed, face the highest rate of pig butchering targeting in the United States. Younger women face higher rates of AI deepfake and approval phishing scams as they engage with DeFi, NFTs, and social platforms more actively.
None of this means women are easier to scam. It means criminal networks have identified women as a profitable demographic and are actively investing in tactics that work against women specifically. The most effective response is exactly the kind of crypto education that has been historically scarce for women: clear, methodical, jargon-free, and assumed-competent. That is what WICG exists to provide.
Get the weekly security briefing
Every Sunday we publish updates on the latest scams targeting crypto users, plus the week's most important stories in plain English. Free, no spam, written for women. The fastest way to stay safe.
Subscribe Free →If you found this guide useful, share it. The single most effective tool against pig butchering is awareness, and most victims report that they had never heard the term before they lost money. Forward this to your mother, your sister, your daughter, your best friend. Some of the women you send it to will recognize a scam in progress because of what they read here. That is the goal.