Share article

Federal investigators in North Carolina just put a number on what "pig butchering" looks like at scale: more than $61 million in Tether$0.999021 seized and tied to romance driven crypto scams. The catalyst was not a lucky tip, it was blockchain forensics plus stablecoin controls, where every transfer left a receipt and a freeze could turn those receipts into recoverable assets. [1]

Enjoy articles without ads?

Register for free and get unlimited access to all articles.

The seizure: $61M in USDT, linked to romance scams

According to Cointelegraph's reporting, US federal authorities in North Carolina seized over $61 million in Tether$0.999021 connected to romance scam operations, commonly described as pig butchering schemes. These scams blend emotional manipulation with a second act: victims are steered toward slick "investment platforms" that show fake gains, then pressured to deposit more. [2]

That dollar figure matters for two reasons:

  1. Tether$0.999021 is supposed to be "cash like" in crypto, meaning it is the preferred rail for moving value quickly across exchanges, chains, and wallets.
  2. $61 million is large enough to require infrastructure, not just a lone grifter in DMs. Big numbers usually mean multiple wallets, multiple hops, and an attempt to split flows to avoid detection.

What investigators actually did: follow the ledger, not the love story

The core advantage law enforcement has in crypto is simple: public blockchains don't forget. Wallet names are anonymous, but the transactions are not. Every victim deposit, every hop, every consolidation, it all sits there timestamped.
Cointelegraph notes that investigators traced victim deposits through multiple wallets by using the "public, immutable nature" of blockchain records. That is the playbook: start with an address tied to a known victim transfer, then follow the money outward.

A typical tracing workflow looks like this:

  • Anchor a starting point: a victim's transfer record or deposit address from the scam platform.
  • Cluster wallets by behavior: repeated patterns like peeling (sending smaller chunks out), consolidation (many deposits into one wallet), or synchronized movements across addresses.
  • Follow exit points: funds often end up at exchanges, OTC desks, or stablecoin conversion routes where they can be cashed out.
  • Map the "wallet web": even if scammers rotate addresses, the flow graph usually reveals key hubs.
Scammers rely on victims believing "crypto is untraceable." The ledger is the opposite. Obfuscation can slow an investigation, but it rarely erases the trail.

The stablecoin factor: why freezes change the endgame

Tracing is one half. Freezing is the other.

Cointelegraph's summary highlights stablecoin freezes as part of the enforcement toolkit. This is a major distinction between stablecoin crime and, say, native Bitcoin$62,320.03 theft. [2]
  • With Tether, there is often a path to immobilize funds once investigators identify addresses holding the assets, depending on issuer capabilities and legal process.
  • That turns a forensic win (knowing where funds are) into an operational win (preventing funds from moving again).
Crypto purists hate this because it proves stablecoins can be permissioned at the edges. Investigators love it for the same reason. If your scammers are sitting on Tether liquidity, a freeze can effectively end the run.

How scam rings try to blur the trail (and why it still fails)

Pig butchering crews do not usually leave funds sitting in one place. When $61 million is in play, the move is almost always to create noise. Common tactics include:

Wallet rotation and chain hopping

Scammers will push funds through fresh wallets and sometimes across networks to make casual tracking harder. But most "hops" are still linkable because the timing, amounts, and downstream destinations create patterns that analytics tools can correlate.

Peel chains

A large wallet sends a long series of smaller transactions, shaving value off while maintaining a "main" balance. This looks busy on chain, but it is also a signature behavior investigators know how to flag.

Exchange and OTC off ramps

The real objective is to reach a point where crypto becomes fiat or a more spendable instrument. Even if a ring uses intermediaries, the moment funds touch a regulated exchange, the chessboard changes: subpoenas, KYC records, and IP logs can connect wallets to humans.

Cointelegraph's key point is that, despite attempts to obscure the trail, the transfers remained permanently visible. That permanence is the weakness of every scam that uses public rails.

Market structure reality check: USDT is the scammer's favorite for a reason

Tether is used heavily because it is:

  • Liquid: easy to move size without major slippage in many venues.
  • Simple for victims: "send stablecoins" sounds safer than "buy a volatile token."
  • Fast to deploy: scammers can accept deposits 24/7 with no banking relationship.
That same liquidity is what lets scam ecosystems scale. A fake trading app can onboard victims globally, route deposits into stablecoins, and coordinate flows across a wallet network quickly.

But liquidity cuts both ways. High usage means more surveillance, more heuristics, and more cooperation pressure on major endpoints. When investigators say they traced the funds "across multiple wallets," that is also a statement about the maturity of blockchain analytics and the increasing willingness of key players to respond to legal requests.

What this means for regular users: the red flags stay boring, but they work

If you want to avoid becoming part of the next $61 million ledger trail, the prevention list is painfully unsexy:

  • A stranger who pivots from flirting to "investing" is the tell. Pig butchering is engineered: trust first, money second.
  • Any platform that won't allow a small withdrawal is a trap. Fake profits are easy, real liquidity is not.
  • Pressure to move funds quickly is part of the script. Time pressure is used to bypass verification and common sense.
  • "Guaranteed returns" plus "just use Tether" is not a strategy, it is a funnel. [3]
On the recovery side, cases like this show victims are not necessarily helpless, but recovery is not automatic. The window between deposit and dispersal can be short, and freezing typically requires identification plus process.

Takeaway: immutable ledgers help, but speed and exits decide the outcome

The North Carolina seizure underscores a crypto truth that scammers keep betting against: blockchains are excellent evidence machines. Investigators can follow flows through a web of wallets, and when the asset is a stablecoin like Tether, they may also have leverage to freeze funds once identified.

The risk, for victims and for enforcement, is timing. If funds hit effective off ramps before a freeze or before exchange cooperation kicks in, the trail can go cold in the real world even if it stays visible on chain.

Key invalidation for any "crypto is untraceable" narrative is right here in the number: $61 million is not petty crime, and it still left a readable ledger trail. The most grounded takeaway is also the simplest: if someone you met online tries to turn romance into a funding round, assume you are the liquidity.