TL;DR - Pig-butchering scam proceeds settle mostly in USDT on Ethereum and Tron, so screen your address against the OFAC list and a multi-chain exposure tool before an exchange freezes a tainted deposit.
Pig-butchering scams now move more money than almost any other crypto crime, and the cleaned proceeds do not stay with the criminals. They are layered through exchanges, brokers, and swap desks until they look ordinary. A peer-to-peer trade or an over-the-counter deal can then hand that exposure to a holder who never met the scammer. This guide shows how to check your own wallet before an exchange does it for you.
What is pig-butchering scam exposure in crypto?
Pig butchering is a long-con investment fraud. A scammer builds a fake romantic or business relationship over weeks, fattens the victim's trust, then steers them into a fake crypto platform and drains every deposit. The stolen funds are then laundered on-chain.
Your wallet has scam exposure when it holds a traceable link to one of those laundering addresses. The link can be direct, such as a transfer straight from a scam-cluster wallet, or indirect, where tainted funds reach you after several hops through other services. Because stolen-funds rules and sanctions rules both apply, the holder of the funds can face a frozen account even without any intent.
How did the Prince Group case put $15 billion of scam crypto on-chain?
The scale is no longer theoretical. On October 14, 2025, the US Treasury's OFAC, working with the United Kingdom, designated Cambodia's Prince Group as a transnational criminal organization led by Chen Zhi. The same day, the Department of Justice filed a civil forfeiture action for about 127,271 bitcoin worth roughly $15 billion, the largest crypto seizure in its history. The funds sat in 25 unhosted wallets tied to the group's leadership.
Prince Group ran at least ten scam compounds across Cambodia staffed with trafficked, forced labor. Much of the laundering flowed through Huione Group, a Cambodia-based network that US regulators named a primary money-laundering concern after it processed tens of billions of dollars in crypto inflows. The case shows how a single scam network can taint addresses across the market.
How do scam funds reach an ordinary wallet?
Most pig-butchering proceeds settle in stablecoins, not bitcoin. Blockchain analysts at Chainalysis estimate that stablecoins make up at least 84 percent of fraudulent on-chain transaction volume, and USDT is the favorite because it is liquid and stable. Tron carries over half of all USDT, with Ethereum the second-largest network, so an Ethereum or EVM wallet is squarely in the path.
The flow is simple once mapped. Victim deposits land in a scam-compound wallet, get split across many intermediate addresses to break the trail, then consolidate at exchange deposit addresses where they convert to cash. Cleaned funds re-enter the market, and that is the moment an ordinary user can pick them up through a trade or a withdrawal.
Victim deposits are split, layered through exchanges and OTC brokers, then re-enter the market as clean-looking funds.
How do you check if your wallet has pig-butchering exposure?
Start with the free, manual checks, then widen the net:
Search your address on the OFAC Sanctions Search portal to confirm it is not directly listed.
Open the address on a block explorer such as Etherscan for EVM chains, or Tronscan for Tron, and look for a scam or sanctioned-entity label on any counterparty.
Trace recent deposits by hand to see whether funds arrived from a flagged wallet, a known mixer, or a high-risk broker.
Manual tracing runs out of road fast. A block explorer shows only direct, single-chain labels, so it misses multi-hop links and exposure on other networks. Rather than checking one list at a time, screen the address with Plastron to see sanctions, scam-cluster, mixer, and stolen-funds exposure across Ethereum and six other EVM chains in one pass. One honest limit: the headline $15 billion Prince Group seizure was in bitcoin, which a Bitcoin explorer covers, while an EVM screener covers the USDT side where most scam proceeds actually move.
A deposit is checked for direct matches, frozen-stablecoin hops, and multi-hop links to a scam cluster.
How can you lower your exposure risk?
You cannot change who sent you funds in the past, but you control what you accept next.
Screen a counterparty address before any large peer-to-peer or OTC trade.
Keep separate wallets so one tainted deposit cannot reach your main balance.
Save screening records and notes so you can answer a source-of-funds request quickly.
Avoid anonymous swap desks and platforms that move funds with no compliance checks.
A quick check before each deal turns a surprise freeze into a risk you can see coming. If you trade USDT often, remember that stablecoin issuers froze 4,163 addresses and $1.26 billion in 2025 alone, so a flagged counterparty is not a rare event.
FAQ
Can my wallet be frozen just for receiving pig-butchering scam funds?
A single unsolicited deposit is unlikely to freeze your whole wallet, but an exchange can freeze that deposit and review your account. Stablecoin issuers can also blacklist an address that holds tainted USDT, so keep a record of anything you receive.
Does pig-butchering crypto move on Ethereum or only on Tron?
Both. Tron carries the largest share of USDT, but Ethereum is the second-largest network for it, and scam proceeds flow across both. A wallet on Ethereum or another EVM chain is well within the laundering path.
Does an OFAC search cover every scam-linked address?
No. The OFAC portal returns exact matches on listed addresses only. Most scam-cluster wallets are never individually listed, so a multi-chain screener is needed to catch indirect exposure across Ethereum, Arbitrum, Base, Optimism, Polygon, BNB Chain, and Avalanche.
What should I do if I think I received scam-linked crypto?
Stop moving the funds, screen the address to confirm the exposure, and keep records. A clear timeline of how the funds arrived will help if you must explain it to an exchange or an authority.
Disclaimer: This article is for educational and informational purposes only and is not legal, financial, tax, or compliance advice. Crypto carries risk; you act on this information at your own risk. Always do your own research and consult a qualified professional before making decisions. Views are the author's own and do not constitute financial, legal, or investment advice.
About Plastron
Plastron is a free, non-custodial wallet screening tool. It checks Ethereum and six EVM chains for AML and KYT risk — sanctions exposure, mixer contact, and stolen-funds proximity — and returns a risk report in seconds. It reads public on-chain data only: it never takes custody of funds and never asks for private keys.