The largest yield operation in crypto has no whitepaper, no token, and no GitHub repository. It has an ATM.
China's three-part state documentary on cross-border pig butchering landed this month, and the detail that should stop you isn't the body count or the death sentences. It's the infrastructure. The scam compounds in Myanmar's borderlands now operate at city scale — restaurants, doctors, dentists, firefighters, and cash machines. That last item is the tell. When a criminal enterprise installs an ATM, it has stopped running a scam and started running a settlement layer.
I've spent a decade watching capital chase yield across venues that promise 40% APY and deliver a withdrawal freeze. This is something else. This is the most industrialized financial operation on the planet, and it clears through the same rails your portfolio does. The documentary frames it as a crime story. Read it as a market-structure story and it gets far more uncomfortable.
Here's what the documentary documents, stripped of its narrative varnish. Pig butchering — shāzhūpán, "pig killing plate" — has evolved from scattered romance fraud into a vertically integrated industrial system. Operators cultivate victims through fabricated relationships, then steer them into fake crypto "investments" that evaporate on withdrawal. The "pig" is the mark. The "butchering" is the liquidation event, executed on the victim's own signature.
The geography is the story. The compounds sit across Myanmar, Cambodia, Laos, and Thailand, with an emerging footprint in the UAE. They're defended by thousands of armed militia — a private security apparatus that exists because the host state either can't or won't assert sovereignty over its own borderlands. The four families behind the largest operations — Bai, Wei, Liu, Ming — were Chinese nationals pushed out of China in the late 2010s. That's a talent outflow reorganized as criminal industrialization.
China's response has been the largest cross-border enforcement action in recent memory: roughly 100,000 law enforcement personnel deployed, more than 50,000 people extradited, and the family heads largely arrested, sentenced, or executed. By headline metrics, decisive. By structural metrics, a rounding error. The root causes — Myanmar's civil war, regional poverty, Chinese youth unemployment — are untouched. The supply of victims and the supply of coerced labor both persist.
Now the part the documentary never shows, because its authors don't understand it: the money flow.
Pig butchering settlements run overwhelmingly through USDT, primarily on TRON's TRC-20 standard. This isn't speculation. Based on my audit experience tracking flows during the Celsius collapse in 2022, the signature is unmistakable — high-frequency, low-value transfers that optimize for speed and cost over transparency. TRON's fee structure makes it the cheapest high-throughput rail for moving value across borders without touching a bank. Gas is the toll for chaos.
The stack has four layers, and only one is on-chain:
On-ramp. Victims convert fiat into USDT through OTC desks or exchange deposits, coached step-by-step by the scammer. The fake trading dashboard shows staged profits. The victim sees green. The victim deposits more.
Consolidation. Funds sweep into hundreds of intermediary wallets, fragmented below reporting thresholds. This is deliberate structuring, and it's cheap.
Laundering. Mixing services, chain-hopping, and nested exchange accounts shred the forensic trail. The cost is a few percent. The margin is enormous.
Off-ramp. The critical chokepoint. This is where centralized exchanges convert tainted USDT back into fiat someone can spend.
Project Brazen linked KuCoin to "billions" in pig butchering proceeds. That's the only named crypto entity in the entire documentary, and it's the most operationally significant line in the report. A centralized exchange is a chokepoint by design. It has a KYC file, a compliance team, and a legal entity a regulator can serve. When money needs to become real, it has to pass through a door someone controls.
Here's what the "city-scale" detail actually tells us. The ATMs aren't for scammers' salaries. They're physical fiat off-ramps — the last mile where crypto becomes cash in a jurisdiction with no meaningful banking oversight. That's the OTC node made concrete. The industry built a global, permissionless, 24/7 settlement network, and its most sophisticated abusers installed a cash machine at the end of it. Every layer adds friction for investigators and removes it for operators.
The labor model is where the "business model" framing collapses. The people executing the scams — typing the scripts, running the fake dashboards, impersonating brokers — are largely trafficking victims held under armed guard. Tens of thousands remain imprisoned; over 50,000 have been extradited. The "supply side" isn't employees. It's hostages. A system that consumes human beings as inputs doesn't have a sustainable business model. It has a sustainable crime model, propped up by a geopolitical vacuum.
The annual flow is plausibly in the tens of billions of dollars. KuCoin's "billions" is a slice, not the pie. That's a meaningful fraction of global illicit stablecoin volume, and it clears through infrastructure every compliant user depends on.
This is the part that should concern anyone holding USDT on an exchange. The pig butchering economy is a liquidity parasite. It doesn't build rails. It feeds on the anonymity and cross-border speed of rails someone else built, then dumps the reputational cost on everyone using them legitimately. In the NFT minting wars of 2021, I learned that attention is the only real collateral — and here, the criminals have weaponized the same principle. They sell a narrative, not a product. The victim doesn't buy a token. The victim buys a story.
Here's where I part ways with both the documentary and the reflexive industry defense.
The documentary is a state propaganda instrument, and its data is curated to serve a narrative: the government is winning. Treat those enforcement numbers the way you'd treat a project's self-reported TVL — as a claim requiring independent verification. The arrests are real. The extraditions are real. The conclusion that this constitutes a solution is not.
The uncomfortable contrarian take for crypto natives: the KuCoin link isn't really about KuCoin. It's a precedent. The lesson regulators will draw is that centralized off-ramps are the single point of failure for illicit flows — and therefore the single point of leverage. Expect that leverage to be used. Not against some shadowy protocol, but against the exchanges and stablecoin issuers that sit between crypto and the banking system. Code is law, but bugs are fatal — and so is a compliance gap when a regulator decides to make an example.
The deeper blind spot: you cannot audit your way out of a geostructural problem. No amount of chain analytics fixes Myanmar's civil war. Bots don't panic — but they also don't build nations. The industry's reflexive answer — more on-chain surveillance, more blacklists — treats symptoms while quietly expanding a surveillance apparatus over every honest user's transactions. The tool built to catch the butcher eventually watches the herd.
Watch three signals. First, Tether's blacklist volume — a spike in frozen addresses means the off-ramp squeeze is live. Second, KuCoin's regulatory posture — any new DOJ or CFTC action confirms the chokepoint thesis. Third, the UAE's AML enforcement — if the new compound geography is tolerated, regulatory arbitrage has found its next home.
Liquidity dries up when fear sets in. This isn't fear. It's the slow realization that the rails we trust are being rented out to the worst actors alive.
