Anatomy of a scam: the "wrong number" text that becomes a pig-butchering trap, line by line
A stranger texts you by "mistake", you reply to be polite, and weeks later you are deep in a fake crypto investment. We dissect the wrong-number opener message by message — and mark the exact moment to walk away.
This is the first in an occasional series where we take one real scam and pull it apart, message by message, to show exactly how it works — and mark the precise point where you should walk away. We’ve written a fictional exchange below; the names and platform are invented, but every move maps to what the FBI’s Internet Crime Complaint Center (IC3) documents in real cryptocurrency-investment (“pig butchering”) cases.
It starts with a text that looks like nothing.
The opener: a “mistake” that isn’t
Unknown number: Hi Daniel, are we still on for the dentist Thursday at 3?
Your name isn’t Daniel. It looks like a simple wrong number — the kind you’d politely correct. That instinct to be helpful is the entire entry point. The IC3 warns that these scammers make first contact by “spoofing long lost contacts known to the victim or posing as a potential friend or romantic partner.” A wrong-number text is the softest possible version: no link, no ask, nothing to refuse.
You: I think you have the wrong number 🙂
Unknown number: Oh I’m so sorry! My assistant must have mistyped. Honestly though — what a polite reply, most people just ignore these. Hope your week’s going well 😊
This is the moment to walk away, and almost no one does. A real wrong number ends at “sorry”. A scam thanks you for replying and keeps the door open. The warmth is the hook.
The build: a friendship with no rush
Over the next days and weeks, the messages keep coming — light, friendly, a little flattering. A photo of a nice meal. Questions about your life. Maybe a gentle romantic note. There is no mention of money at all, and that absence is exactly what makes it work.
Them: Made too much pasta again 😅 cooking for one is impossible. How was your day really?
The scam is called “pig butchering” because the victim is fattened with trust before the slaughter. The IC3 describes scammers who “spend time gaining the victim’s confidence and trust” before anything else happens. If you’re waiting for a red flag, this stage is designed to give you none. The patience is the weapon.
The pivot: “I don’t usually share this…”
Eventually — casually, almost reluctantly — the topic turns to money. Not a request. A tip.
Them: Honestly this year turned around for me because of crypto. My uncle taught me a method, I only do 20 min a day. I don’t usually talk about it but you’ve been so kind — I could show you if you want? No pressure at all.
Notice the craft: it’s framed as generosity, it credits a trusted figure (“my uncle”), it sounds low-effort, and it ends with no pressure — which removes the pressure you’d normally feel, and with it your guard. You’re not being sold to by a stranger; you’re being let in on a secret by a friend.
The rule that ends it here: anyone you met online who pivots to an investment opportunity is running this script — full stop. It doesn’t matter how long it took or how warm it felt. That pivot is the scam.
The trap: a balance that only goes up
You’re guided onto a slick, official-looking app or website. You start small. It works — your balance climbs, you withdraw a little, it arrives. That successful first withdrawal is the masterstroke: it converts doubt into trust, and you invest more. The IC3 notes these fake platforms “allow the victims to track their investments and give the impression they are growing exponentially.”
Then you try to take out a meaningful amount.
Platform support: To process your withdrawal, a 15% capital-gains tax must be paid in advance. Once received, your full balance will be released within 24 hours.
There it is. To withdraw your “profits”, you must first send more real money. The IC3 is explicit: victims attempting to withdraw are told they must “pay income taxes or additional fees”, which only deepens the loss. In newer cases the FBI has documented in 2026, scammers even “arrange for couriers to meet the victims in person to retrieve cash” — sometimes verifying the courier with a dollar-bill serial number like a sick password. Every fee is just a fresh way to take more, and the balance you can see was never yours to withdraw.
How to spot it
The tells are in the box below, but the shape of the whole con is: an unexpected text from a stranger → a patient, warm friendship with no asks → a casual investment “tip” → a platform that grows until you try to cash out. Recognizing any one stage is enough — but the cleanest exit is the very first reply you never send.
What to do instead
You don’t need to buy anything to beat this — the free move comes first (see the defense box). The habit is Too Good = Gone: treat a too-good return as bait, and verify any platform with the official regulator before sending a cent. And the earliest, easiest defense of all — Go Direct past the temptation to be polite — is simply to delete a wrong-number text from a stranger unanswered. The slow-romance version of this scam is covered in pig-butchering crypto romance, and the celebrity-deepfake on-ramp in fake celebrity investment ads. For more, see our defense moves and the 60-second quiz.
- An out-of-the-blue text from a stranger — a "wrong number", a misremembered name, or a friendly "how are you?" — that keeps the conversation going after you reply.
- A warm new friend or romance who, after days or weeks, mentions how well they're doing in crypto and offers to show you.
- A platform where your balance climbs fast — but withdrawing means paying "taxes" or "fees" first, or handing cash to a courier.
- Don't reply to a wrong-number or "hi, how are you?" text from a stranger — even to say they've got the wrong person. Just delete it.
- Treat anyone you met online who pivots to an investment tip as the scam itself, no matter how warm or how long it took.
- Verify any platform with the official regulator before sending a cent (in the US, search it on Investor.gov). No regulator record = stop.
- A balance that only grows until you try to withdraw — then wants fees, taxes, or a cash courier — is fake. Stop paying and report it at IC3.gov.
I find this the most quietly frightening scam we cover, because there's no scary pop-up and no shouting — just a stranger being kind to you for a month. That's the trap: it doesn't feel like an attack, it feels like a friendship, right up until your savings are gone. The line I hold is almost rude in its simplicity: anyone I met through a random text who eventually mentions an investment is running this script. Not 'might be' — is. Knowing that in advance is what lets you leave while it still feels too early to.
Sources
Frequently asked
It really was just a wrong number though — isn't it rude to ignore it?
A genuine wrong-number texter apologizes and disappears the moment you say "wrong number". A scammer keeps the conversation alive — that's the whole tactic. The FBI notes these scammers make contact by "spoofing long lost contacts" or "posing as a potential friend or romantic partner". You owe a stranger nothing; deleting an unexpected text is not rude, it's the safe move.
We talked for weeks and they never asked for money. Doesn't that mean it's real?
No — the long, patient build-up is the method, not evidence against it. The scam is named "pig butchering" because the victim is "fattened up" with trust over time before the ask. The FBI describes scammers who "spend time gaining the victim's confidence and trust" before pitching a fake investment. The slow pace is designed to lower your guard.
My account shows big profits. Why can't I just withdraw them and walk away?
Because the profits are numbers on a fake platform, not real money. When victims try to withdraw, they're told they must "pay income taxes or additional fees" first — and newer versions even send a courier to collect cash in person. Every "fee" is just another way to take more. The money you can "see" was never withdrawable.