AI Uncovers Massive 'Pig Butchering' Scam Linked to North Korean Cybercrime
Image Credit: Micha Brändli | Splash
A sophisticated cybercrime operation based in Cambodia, with alleged ties to North Korean hackers, has defrauded Americans of billions of dollars through emotional manipulation and fraudulent investment schemes since August 2021. Known as "pig butchering", the scam leverages artificial intelligence and other technologies to target victims, build trust, and siphon funds. The U.S. Treasury Department has moved to sever the group’s access to the U.S. financial system, citing inadequate anti-money laundering measures.
[Read More: O2 Launches "AI Granny" Daisy to Combat Scammers by Wasting Their Time]
The 'Pig Butchering' Scam Explained
"Pig butchering" scams involve cybercriminals posing as romantic partners or trusted advisors to build emotional connections with victims, often over weeks or months. Using messaging apps, social media, or dating platforms, scammers groom targets before enticing them to invest in fake cryptocurrency platforms. Once victims deposit funds, they are shown fabricated profits to encourage further investment. When they attempt to withdraw money, scammers demand additional fees or disappear, leaving victims with significant losses. According to the FBI’s 2024 Internet Crime Report, pig butchering and related investment fraud caused approximately US$9.3 billion in losses in the U.S. last year, with US$6.57 billion specifically tied to investment fraud. A 2024 study by the University of Texas estimated global losses from these scams at US$75 billion since January 2020.
AI plays a central role in scaling these scams. Cybercriminals use AI-driven tools to automate messaging, create convincing fake profiles, and analyze victim data to tailor their approaches. For instance, AI chatbots can maintain prolonged conversations, mimicking human behaviour to build trust. Blockchain analysis firm Chainalysis reported that platforms like Cambodia’s Huione Guarantee sell generative AI tools specifically for scam operations, enhancing their efficiency and reach. This technological sophistication allows scammers to target thousands of victims simultaneously, making pig butchering a global, industrial-scale enterprise.
[Read More: AI-Powered Cybercrime Drives Record US$16.6 Billion in Losses, FBI Reports]
Cambodia-Based Operation and North Korean Ties
The U.S. Treasury Department’s Financial Crimes Enforcement Network (FinCEN) identified the Cambodia-based Huione Group as a key player in laundering proceeds from pig butchering scams. Between August 2021 and January 2025, Huione allegedly laundered at least US$4 billion in illicit funds, including US$37 million from North Korean cyber heists and US$36 million from pig butchering scams. Huione operates a network of businesses, including Huione Pay (a payment processor), Huione Crypto (a virtual asset service provider), and Haowang Guarantee (an online marketplace for illicit tools and services). These entities facilitate money laundering by converting cryptocurrency into fiat currency and offering scam-enabling technologies.
FinCEN linked Huione to North Korea’s Lazarus Group, a state-backed hacking collective notorious for high-profile cyber heists, such as the US$600 million Axie Infinity hack in 2022. Huione’s platforms have processed funds from these heists, with inadequate know-your-customer (KYC) protocols allowing illicit transactions to go undetected. The United Nations Office on Drugs and Crime (UNODC) noted in April 2025 that Huione Guarantee, headquartered in Phnom Penh, has over 970,000 users and processes tens of billions in cryptocurrency transactions, serving as a hub for Southeast Asian cybercrime. The North Korean connection underscores the geopolitical stakes, as these funds reportedly support the DPRK’s illicit activities, including weapons programs.
[Read More: AI-Powered Netflix Email Scam Targets Users with Sophisticated Deception]
Human Trafficking and Forced Labour
Beyond financial losses, pig butchering scams are intertwined with human trafficking. Many scammers are themselves victims, lured to Cambodia, Myanmar, or Laos with promises of legitimate jobs. Once there, they are confined in scam compounds, stripped of passports, and forced to perpetrate fraud under threats of violence. The UNODC estimates over 200,000 people are trapped in such compounds across Southeast Asia. In Cambodia, raids since September 2022 have freed thousands of workers from facilities equipped with phones, computers, and even torture devices like electric shock batons.
AI exacerbates this crisis by enabling scammers to operate at scale, increasing the demand for trafficked workers. Victims, often from countries like Vietnam, China, or India, are coerced into using AI tools to execute scams, working up to 15 hours a day. The U.S. State Department’s 2024 Trafficking in Persons Report highlighted Cambodia’s role as a hotspot, noting widespread corruption that hinders enforcement.
U.S. Treasury’s Response
On May 1, 2025, FinCEN issued a notice of proposed rulemaking under Section 311 of the USA PATRIOT Act, designating Huione Group as a “primary money laundering concern”. The proposal aims to bar U.S. financial institutions from maintaining accounts for Huione, effectively isolating it from the global banking system. Treasury Secretary Scott Bessent emphasized that this action targets Huione’s role as a “marketplace of choice” for cybercriminals, including North Korean actors. The move follows earlier sanctions in September 2024 against Cambodian businessman Ly Yong Phat, whose O-Smach Resort was used as a scam compound.
FinCEN criticized Huione’s lack of anti-money laundering (AML) and KYC controls, noting that the group admitted its systems failed to detect North Korean transactions. If finalized, the rule could prompt allied nations to impose similar restrictions, amplifying Huione’s financial isolation. The proposal is open for public comment until June 4, 2025.
[Read More: Deed Fraud and AI: How Scammers Use Technology to Steal Property Ownership Rights]
Broader Implications and AI’s Role in Combating Scams
The pig butchering crisis highlights the dual-edged nature of AI in cybercrime. While scammers exploit AI to enhance their operations, law enforcement agencies are increasingly using AI to counter these threats. Blockchain analysis firms like Chainalysis and Elliptic employ AI to trace illicit cryptocurrency flows, identifying patterns that link wallets to scam networks. The U.S. Secret Service has also seized domains linked to pig butchering scams, leveraging AI-driven intelligence to disrupt operations.
However, challenges remain. The transnational nature of these scams, coupled with weak governance in countries like Cambodia, complicates enforcement. The UNODC reported in April 2025 that syndicates are expanding to Africa, South America, and Eastern Europe, exploiting regions with lax regulations. AI-driven solutions, such as enhanced transaction monitoring and victim identification, will be critical to stemming this tide, but international cooperation is essential.
Source: US Government, The New York Times, Reuters, FBI
