The fattening floor: how 276 arrests exposed the room your screen was already in

The phone is face down on the counter next to a coffee cup that has gone cold twice. The woman who owns it is fifty-three. She works in medical billing. Her kids are grown. Her husband died four years ago. She turns the phone over because the man she has been talking to for eleven weeks just sent a voice note, and she likes the way he says her name.

He is not real. The voice is real. The script is real. The compound the voice is calling from is real. The man on the other end of that voice is, depending on which filing you read, either a perpetrator or a person who was trafficked into a building in Southeast Asia and told he could leave when his quota was met.

She does not know any of that yet. What she knows is that he understands her. What she knows is that he has been patient. What she knows is that two weeks ago he showed her a trading platform he uses, and she put in $500 to try it, and the dashboard went green, and she pulled out $620, and the money landed in her bank.

Last week she put in $84,000.

This is what the Department of Justice calls pig butchering. The name comes from the Mandarin phrase the operators themselves use. You fatten the pig before you slaughter it. The fattening is the relationship. The slaughter is the wire.

On April 29, 2026, a coordinated international operation announced 276 arrests. Dubai police took 275 people into custody. Thai authorities took one. The U.S. Department of Justice unsealed federal charges in the Southern District of California against six defendants tied to what the complaint calls a pig-butchering scheme. Two co-conspirators remain at large. The named defendants include Thet Min Nyi, a 27-year-old Burmese national the complaint says also went by Ko Thet and Pixy, alongside three Indonesian nationals: Wiliang Awang, 23, Andreas Chandra, 29, and Lisa Mariam, 29.

The DOJ identified three alleged scam outfits by name. Ko Thet Company. Sanduo Group. Giant Company. Authorities dismantled at least nine cryptocurrency-fraud-linked scam centers. They seized 503 fraudulent investment domains. They restrained $701.9 million in cryptocurrency tied to money laundering.

Read those numbers slowly.

Nine compounds. 503 fake websites. $701.9 million frozen in wallets the operators thought no one was watching.

That is one operation. In one week. In a year that, according to the FBI's most recent Internet Crime Complaint Center report, saw $11.36 billion in crypto-linked fraud losses in 2025 alone. Investment fraud, the category these scams sit inside, accounted for $8.6 billion in losses in 2025, up from $6.5 billion the year before. Chainalysis put global crypto scam and fraud volume in 2025 at $17 billion.

The woman with the cold coffee is not in those numbers yet. Her wire from last week has not been reported.

Let me explain what the platform she sent her money to actually is, because if you do not understand the architecture you cannot see the trapdoor.

She thinks she sent $84,000 to a trading platform. She did not. She sent dollars to her own account at a real US exchange. Her exchange let her buy USDT, which is a stablecoin, which is a token that is supposed to always be worth one dollar. Then her exchange let her transfer that USDT to a wallet address the man on the phone gave her. The wallet was labeled, in the platform's web interface, as her "deposit." It is not her deposit. It is a wallet the operator controls. The dashboard she sees, the green numbers, the climbing balance, that is a webpage. It is a picture of money. Behind it there is no money. There is a database row that the operator can change to whatever number he wants.

This is the part that breaks people when they finally understand it. The dashboard is not lying about her money's performance. The dashboard is the lie itself. There is no trade. There is no platform. There is a webpage and a wallet and a script.

The withdrawal button is the tell. Every pig-butchering victim ends up at the withdrawal button. They click it. They get a message. The message is always some version of the same thing. To unlock your funds, please pay the tax. Please pay the verification fee. Please deposit 20 percent more to clear the audit. The math of these demands is designed so that the victim, if she has anything left, will send it. Then the demand will increase. Then the operator will go silent.

The FBI calls the proactive notification effort Operation Level Up. Since January 2024, that program has, by the FBI's count as of April 2026, prevented an estimated $562 million in losses for nearly 9,000 victims by reaching them before the final wire. That number is also the shape of the problem. Nine thousand people the FBI got to in time. The agencies do not publish the number they did not get to in time. The Chainalysis number suggests the gap is wide enough to drive a building through.

Now picture the compound.

Public reporting and DOJ filings tied to the Scam Center Strike Force, launched in November 2025, describe a recurring physical structure. A multi-story building, often in a special economic zone in Cambodia, Myanmar, or Laos. Floors of workstations. Scripts taped next to monitors. Quotas. Workers who, in many cases, were lured across borders with fake job ads and had their passports taken. They run multiple "personas" at once, each one a love interest or a successful trader or a kindly stranger. The room is fluorescent. The keyboards are loud. The work is, in the most literal possible sense, the manufacture of trust.

Heith Janke, the FBI's Assistant Director of the Criminal Division, said in the announcement that this kind of operation cannot be dismantled without partners. A. Tysen Duva, Assistant Attorney General for the Criminal Division, said scam center organizers cannot operate with impunity. U.S. Attorney Adam Gordon said global crime now faces global justice.

Those are the words from the podium. The words inside the room are different. The words inside the room are the script the worker reads to the woman in California. Good morning, beautiful. Did you sleep well. I was thinking about us last night.

Here is what to notice if someone you love is on a phone like that one.

Not the exciting questions. Not the questions about whether the project is legitimate. The ugly questions.

Has she met him in person. Has she ever video-called him without his camera being grainy or cutting out. Did the platform he recommended come up in her life only after he did. Does the dashboard show gains that compound faster than the gains on her real exchange. Did her first small withdrawal succeed. Has every withdrawal after a certain threshold required a fee, a tax, a deposit, a verification, a friend's account.

If the answer to that last one is yes, the slaughter has already started. The pig is already on the floor. The only remaining question is whether she sends the next wire.

The 276 arrests announced this week are real. They matter. They are also, against the volume of the machine, a single shift change at a single facility. The DOJ seized 503 domains. The operators will register more. The operators have already registered more. The compound model is portable. The scripts are portable. The Telegram channels where the templates and the victim lists circulate do not stop because Dubai police walked into a building.

That is the part you have to hold in your head while you read the press release.

The arrests are not the end of the story. They are the first time most people will hear the story has a floor plan. The floor plan does not change because some of the people standing on it were arrested. The floor plan changes when the woman with the cold coffee turns her phone face down and does not turn it back over.

She thought she had found someone. She had found a building.