// first 10 minutes
pig butchering / long-con investment scam — quick-start
pig butchering — first 10 minutes. stop deposits, screenshot everything before the account disappears. print this, check boxes, then run the primary tools.
checklist
- do not deposit more funds — the platform will claim a 'fee' or 'tax' to release funds; this is the second scam layer.
- screenshot the trading platform: URL, account balance, profit display, deposit address, and withdrawal error message.
- screenshot every message in the dating app or messaging platform, including the contact's profile and phone number.
- record the crypto wallet address or bank account number you sent funds to — exact amount, dates, and rail (wire/Zelle/crypto).
- pull the trading platform's WHOIS — note registration date; fraudulent exchanges are often weeks old.
- export the full chat log from the messaging platform as a file or screenshot sequence with visible timestamps.
- check if the 'exchange' domain is cloned from a real exchange — compare TLS cert, visual layout, and about-page text.
- file a complaint at ic3.gov now, while the transaction records are fresh — include wallet addresses and exchange URL.
- contact your bank or crypto exchange about the originating transactions — initiation timestamps matter for chargebacks.
- begin the primary tool path below — pig butchering timeline builder and wallet drain tracer.
primary tools
- 01iOS WhatsApp artifact forensic extractordrop iOS WhatsApp ChatStorage.sqlite and Contacts.sqlite · parse all chats, messages, groups, and media references · reconstruct conversation timelines with delivery status · surface location shares, contact cards, and deleted message placeholders · runs locally
- 02ethereum transaction decoderpaste raw ethereum transaction hex · rlp decode · from to value gas · erc20 calldata · runs locally
- 03bitcoin transaction decoderpaste raw transaction hex · decode inputs outputs scripts · fees · locktime · segwit · p2pkh p2sh p2wpkh · runs locally
- 04crypto tx graphpaste json csv btc hex · directed graph · hub peel fan patterns · ascii viz · stats · csv json export · runs locally
- 05ios dating app artifact forensic extractor (Tinder, Bumble, Hinge)drop iOS dating app database files (Tinder, Bumble, or Hinge) · auto-detect app · parse match records, messages, and profile metadata · surface match timestamps, screenshot alerts, and own location from account plist · detect confirmed real-world meetings (Hinge We Met) · runs locally
- 06ios screenshot burst forensic analyzerdrop photos.sqlite · screenshot detection · burst clustering · rapid capture flags · runs locally
- 07cryptocurrency mixer and tumbler detectordrop bitcoin transaction csv · apply statistical analysis to detect mixing service patterns · equal output detection · timing patterns · coinjoin identification · peel chain vs mixed funds · estimate mixing confidence · runs locally
- 08crypto wallet classifierpaste any crypto address · identify blockchain · validate checksum · address type · derivation format · runs locally