HIGHALT-2026-121248m ago

Crypto Fraud: Pig Butchering Pattern — Member Account MBR-9923

Member showing classic pig butchering escalation pattern: 5 escalating crypto transfers ($2K → $5K → $15K → $45K → $120K) over 6 weeks to wallet flagged by Chainalysis as connected to known romance scam ring.

Export Report

Compound Score

81/100

Confidence

89/100

FP Likelihood

low

Subject

MBR-9923

Domains

2/100

Subject

MBR-9923

member_account — Member Account — Potential Fraud Victim

Domains

cryptofinance

Assigned To

James Wright

Teachers Federal Credit Union

Summary

Member MBR-9923 exhibits a pig butchering (crypto investment scam) victimization pattern. Escalating transfers to high-risk wallet address flagged by Chainalysis. FBI IC3 2025 reports $8.6B in investment fraud losses — crypto pig butchering is the dominant vector.

Evidence Chain (4 items)

#12/22/2026, 10:00:00 AMcrypto_transfer_escalation

Initial $2,000 ACH transfer to Coinbase, then on-chain transfer to wallet 0x7a3f...

Source: Symitar Core Banking + Chainalysis | Ref: ACH-44210

First of 5 escalating transfers — seeding phase of pig butchering pattern.

#24/5/2026, 2:00:00 PMcrypto_transfer_escalation

Latest transfer: $120,000 ACH to exchange, immediate withdrawal to same wallet cluster

Source: Symitar + Chainalysis KYT | Ref: ACH-44892

Transfer 60x initial amount — exponential escalation matches grooming pattern.

#34/6/2026, 12:00:00 AMhigh_risk_wallet

Destination wallet 0x7a3f... risk score: 91/100 — linked to Southeast Asia romance scam ring per Chainalysis

Source: Chainalysis KYT | Ref: WALLET-RISK-7a3f

Wallet associated with known pig butchering operation (Operation Level Up targets).

#44/5/2026, 12:00:00 AMrapid_asset_depletion

Member savings account depleted from $340K to $152K in 6 weeks

Source: Symitar Core Banking | Ref: ACCT-DEPLETION-9923

Account depletion rate consistent with fraud victimization — not normal spending pattern.