FBI and Dubai Police dismantle nine crypto scam centres in Operation Tri-Force Sentinel. How pig butchering fraud works and what UAE professionals must know.
- Operation Tri-Force Sentinel resulted in 276 arrests and the dismantling of nine scam centres across Dubai, Thailand, and the United States.
- Three criminal syndicates running pig butchering schemes from Dubai were shut down, with six individuals facing federal fraud and money laundering charges in the US.
- Global pig butchering losses have exceeded USD 75 billion since 2020, with revenue growing nearly 40 per cent year on year during 2024.
- The UAE's advanced crypto ecosystem, free zone structures, and large expat population create specific vulnerabilities that organised scam networks exploit.
- Federal Law No. 10 of 2025 significantly strengthens the UAE's anti-money laundering enforcement powers, including expanded asset-freezing authority.
- UAE residents can report suspected scams to the Dubai Police eCrime Hub (901) and verify licensed platforms through CMA, VARA, and DFSA public registers.
A Landmark Operation Exposes the Scale of Crypto Fraud in the UAE
Operation Tri-Force Sentinel, announced on 29 April 2026, marks the largest coordinated international crackdown on cryptocurrency investment fraud to date. Dubai Police led the operation under the UAE Ministry of Interior, working jointly with the FBI and the Chinese Ministry of Public Security. Together, they dismantled nine scam centres and arrested 276 individuals. For the UAE's regulated financial sector, overseen by the CMA, VARA, and DFSA, this raises urgent questions about how criminal networks exploit the country's infrastructure.
Pig butchering scams, a form of relationship-based investment fraud that channels victims into fake cryptocurrency platforms, have generated estimated global losses exceeding USD 75 billion since 2020. At home, the Dubai Police eCrime Hub now serves as a frontline reporting channel for victims. Federal Law No. 10 of 2025 has substantially expanded the enforcement tools available to regulators. This article examines what happened, how these scams operate, why the UAE is a target, and what professionals should do in response.
FBI and Dubai Police Launch Joint Operation Against Pig Butchering Scam Centres
The operation, codenamed Tri-Force Sentinel, brought together law enforcement agencies from the United States, the UAE, China, and Thailand in a coordinated sweep executed during the final week of April 2026. Dubai Police led the planning and operational execution, arresting 275 suspects across multiple locations in the emirate. The Royal Thai Police separately arrested one additional fugitive. In total, nine scam centres were dismantled across the participating jurisdictions.
Three criminal enterprises were targeted: Ko Thet Company, Sanduo Group, and Giant Company. According to the US Department of Justice, these organisations ran fraud centres that used social engineering and fabricated digital platforms to build trust with victims before extracting their funds. Most of those arrested were citizens of Southeast Asian countries.
Federal Charges and Named Defendants
Federal prosecutors in the Southern District of California unsealed charges against six individuals. Thet Min Nyi, a 27-year-old Burmese national also known as "Ko Thet" or "Pixy," faces wire fraud conspiracy and money laundering conspiracy charges for allegedly managing and recruiting workers across multiple scam compounds. A grand jury returned his indictment in March 2026.
Four additional defendants face related charges. Wiliang Awang, 23, an Indonesian national arrested in Thailand, was charged in April 2026 with wire fraud conspiracy tied to the Sanduo Group and Giant Company. Andreas Chandra, 29, also Indonesian, faces matching charges after his arrest by Dubai Police alongside Lisa Mariam, 29. Two further co-conspirators remain fugitives.
Scale of Losses and the FBI's Parallel Initiative
Investigators have so far identified millions of dollars in direct losses from these specific operations, though the full scale remains under assessment. The FBI's parallel initiative, Operation Level Up, provides broader context. Launched in 2024 to proactively identify and warn potential pig butchering victims, the programme had by April 2026 notified nearly 9,000 individuals and prevented an estimated USD 562 million in losses.
Beyond the Dubai-based operations, FBI San Diego is separately investigating the Tai Chang Scam Enterprise, a network of scam compounds in Burma's Karen State targeting American victims with near-identical cryptocurrency fraud schemes. The geographic spread of these investigations underscores the transnational character of the threat.
What Are Pig Butchering Scams and How Do They Work?
The term "pig butchering" derives from the Chinese phrase "sha zhu pan," a metaphor comparing the scam process to fattening a pig before slaughter. Scammers invest weeks or months building a relationship with their target, cultivating trust and emotional dependency, before directing the victim toward a fraudulent investment. The combination of romance fraud, social engineering, and cryptocurrency theft makes these schemes exceptionally difficult to detect in their early stages.
The Anatomy of a Pig Butchering Operation
Initial contact typically arrives through an unsolicited message on a dating app, social media platform, or professional networking site such as LinkedIn. Scammers often use "wrong number" texts or fabricated profiles designed to appeal to specific demographics. Once a connection is established, the conversation moves to encrypted messaging services like WhatsApp, Signal, or Telegram, where platform moderation is limited.
The trust-building phase can last several weeks to several months. Scammers share photographs, often AI-generated or scraped from social media without consent, portraying an affluent lifestyle. They discuss personal matters, express sympathy, and gradually establish emotional intimacy. The goal is to monopolise the victim's attention and isolate them from outside perspectives that might raise doubts.
When sufficient trust has been established, the scammer introduces a cryptocurrency investment "opportunity." The victim is guided to a platform that closely mimics a legitimate exchange, complete with artificial trading interfaces showing fabricated gains. Some of these fake platforms have appeared in the Apple App Store or Google Play Store, lending further credibility.
Once funds are transferred, the victim loses control entirely. The fake platform continues to display growing returns, encouraging larger deposits. Many victims borrow from family, liquidate retirement savings, or take out loans to fund what they believe is a successful investment. When they attempt to withdraw, they encounter artificial barriers: fabricated tax obligations, compliance fees, or processing charges. By this stage, recovery is extremely difficult.
Who Falls Victim and Why
A persistent misconception is that these scams target only unsophisticated individuals. In practice, pig butchering operators frequently pursue high-net-worth professionals, executives, and experienced investors. The psychological manipulation exploits universal human needs for connection, trust, and financial security, vulnerabilities that transcend education or professional expertise.
In recent years, the threat has intensified with the adoption of artificial intelligence. Deepfake technology now enables scammers to produce convincing video calls, fabricate endorsements from recognisable figures, and generate realistic trading demonstrations. According to Chainalysis, pig butchering revenue grew nearly 40 per cent year on year during 2024, while the number of victim deposits grew approximately 210 per cent. This suggests a shift toward higher-volume targeting, with scammers casting wider nets across more potential victims.
Why the UAE Has Become a Hotspot for Organised Scam Operations
The UAE's attractiveness to criminal networks stems from a combination of structural, economic, and infrastructural factors. Understanding these vulnerabilities is essential for anyone operating in or advising on the country's financial markets.
Financial Infrastructure and Crypto Adoption
Dubai has positioned itself as a global leader in cryptocurrency and virtual asset services. VARA has issued more than 85 licences, and the UAE's Unified VASP Register is now operational. This advanced ecosystem, while supporting legitimate innovation, simultaneously provides criminal enterprises with infrastructure for converting stolen cryptocurrency to fiat currency and mixing illicit funds with legitimate transaction flows.
Research by the University of Texas found that 84 per cent of pig butchering transaction volume was denominated in Tether, a stablecoin that combines price stability with cross-border transferability. Stolen funds typically flow through decentralised exchanges before reaching major centralised platforms such as Binance and OKX, where they are converted to fiat currency. The concentration of these services in the UAE creates potential extraction pathways that criminal networks exploit.
The UAE's free zone structure adds another dimension. Zones such as JAFZA offer 100 per cent foreign ownership, extended tax exemptions, and relatively streamlined company formation. These features, designed to attract legitimate international business, can also be exploited by criminal enterprises seeking to establish shell companies that segregate different components of their operations and obscure beneficial ownership.
Previous Enforcement Actions in the UAE
The Tri-Force Sentinel operation was not the first indication of organised scam networks operating in the UAE. A Vice investigation documented Chinese-run scam mills operating at industrial scale from offices in Dubai Investments Park. One operation, employing roughly 200 workers in a multi-storey building, reportedly stole between 20 and 30 million Chinese yuan in just four months. Workers received commissions of 6 to 13 per cent based on how much they extracted from victims.
Dubai Police have also conducted separate operations against cyber fraud rings. In one action, the force arrested 494 individuals involved in phone fraud targeting bank customers through fake links designed to steal banking credentials. These operations demonstrate a pattern of escalating enforcement, with Tri-Force Sentinel representing the most significant international collaboration to date.
The Regulatory and Enforcement Response
The UAE has substantially strengthened its anti-money laundering framework in recent years, driven by both international pressure and recognition of the threats posed by transnational financial crime. The most significant development is Federal Law No. 10 of 2025, which repealed the previous 2018 AML regime and introduced materially stronger enforcement mechanisms.
Key Changes Under the New AML Law
The new law shifts from a subjective knowledge standard to an objective one for establishing money laundering liability. Prosecutors can now demonstrate an offence by showing it would have been reasonable for an entity to know that funds were illicit, based on factual circumstances. This is a substantially lower evidentiary threshold that enhances prosecution capacity.
Equally important, the Financial Intelligence Unit (FIU) has gained expanded powers. It can now issue seizure orders suspending suspected transactions for up to ten working days without prior notice. Freezing orders can lock funds held by financial institutions, designated non-financial businesses, or virtual asset service providers for up to thirty days, extendable as needed. These powers represent a significant upgrade from the previous seven-day freeze authority held by the Central Bank governor.
The law also explicitly extends AML coverage to crimes committed through digital systems, virtual assets, and encryption technologies. For a jurisdiction with the UAE's level of crypto market activity, this expansion addresses a critical gap in the previous framework. Financial institutions and virtual asset service providers must now designate AML Compliance Officers responsible for monitoring, evaluating suspicious transactions, and filing Suspicious Transaction Reports with the FIU.
VARA, DFSA, and Crypto Oversight
VARA's licensing regime requires comprehensive AML compliance, customer due diligence, and suspicious transaction reporting from all regulated virtual asset service providers. The DFSA has separately updated its crypto token framework for the DIFC, introducing firm-led suitability assessments, enhanced risk warnings, and monthly reporting requirements covering token names, client numbers, and transaction volumes.
However, the rapid evolution of decentralised finance protocols and the global nature of crypto markets create persistent challenges. Even advanced regulatory regimes struggle to maintain complete visibility over illicit flows that transit through multiple jurisdictions, decentralised exchanges, and privacy-enhancing technologies.
International Cooperation Mechanisms
The FBI maintains a legal attache office in Dubai, providing a formal channel for real-time intelligence sharing and investigation coordination. The Tri-Force Sentinel operation demonstrated how mutual legal assistance treaties, combined with direct inter-agency communication, can enable simultaneous enforcement across multiple countries. The involvement of China's Ministry of Public Security reflects the nexus between many pig butchering operations and Chinese-origin criminal enterprises, as well as Beijing's willingness to participate in cross-border financial crime enforcement.
How to Recognise and Protect Against Investment Scams in the UAE
Vigilance and systematic due diligence remain the most effective defences against pig butchering and related investment fraud. The UAE's tightening AML focus on crypto crime strengthens institutional protections, but individuals must also take responsibility for verifying the legitimacy of any investment opportunity before committing capital.
Red Flags That Should Prompt Immediate Caution
Unsolicited contact from strangers who quickly steer conversations toward investment opportunities is the most common entry point. Requests to move communication from an open platform to encrypted messaging, resistance to video calls, and discouragement from discussing the opportunity with family or professional advisors all warrant suspicion.
On the investment side, promises of unusually high returns in short timeframes, requirements to invest exclusively through cryptocurrency, and platforms that cannot provide verifiable regulatory licensing information are critical warning signs. Any request to borrow money, liquidate retirement accounts, or pay "taxes" or "compliance fees" to unlock withdrawals should be treated as confirmation of fraud.
Verification Resources Available in the UAE
The CMA, which replaced the Securities and Commodities Authority on 1 January 2026, maintains a public register of licensed financial service providers. VARA publishes a list of authorised virtual asset service providers in Dubai. The DFSA public register covers firms regulated within the DIFC. Any legitimate investment professional should be able to provide verifiable licensing details that can be cross-checked against these registers.
To report suspected fraud, contact the Dubai Police eCrime Hub on 901 or visit ecrimehub.gov.ae. The service operates around the clock and accepts fully confidential reports. The CBUAE fraud reporting portal handles complaints related to banking and financial institutions. US citizens can additionally report to the FBI's Internet Crime Complaint Center at ic3.gov. In all cases, preserving evidence, including screenshots, transaction records, and wallet addresses, is essential for supporting any investigation.
What Financial Advisors Should Be Telling Their Clients
Regulated financial professionals in the UAE carry a particular responsibility in this environment. The CBUAE's recent ban on WhatsApp and messaging apps for financial services underscores the regulator's concern about uncontrolled communication channels, the same channels that scammers routinely exploit. Advisors should use this regulatory moment to open proactive conversations with clients about scam risks.
Vulnerability screening should be part of routine client engagement. Clients who have recently relocated to the UAE, gone through relationship changes, or are actively seeking new investment opportunities may be at elevated risk. Unusual financial behaviour, such as sudden liquidation of long-held assets, requests to transfer large sums to unfamiliar cryptocurrency wallets, or reluctance to discuss the source of investment recommendations, should prompt discreet inquiry.
Advisors must also understand their own compliance obligations. Under the UAE's AML framework, suspicious activity must be reported to the FIU. Critically, "tipping off" the client that a report has been filed is prohibited. The distinction between raising scam awareness with clients and complying with suspicious activity reporting requirements requires careful navigation, and firms should ensure their compliance teams provide clear internal guidance.
Client education should be specific rather than generic. Describing how pig butchering scams actually work, including the extended trust-building phase and AI-generated content, is far more effective than broad warnings to be careful. Three points deserve emphasis: cryptocurrency transfers are irreversible, legitimate investments always come with verifiable regulatory credentials, and no genuine opportunity requires secrecy from a client's professional advisors.
What Clients are Asking their Advisors
What is a pig butchering scam and how does it work in the UAE?
A pig butchering scam is a long-term fraud where criminals build trust through fake relationships on dating apps or social media, then steer victims toward fraudulent cryptocurrency investment platforms. In the UAE, scammers exploit Dubai's advanced crypto infrastructure and large expat population. Victims typically lose access to funds once they transfer cryptocurrency to wallets controlled by the criminal network.
How can I verify if a crypto platform or investment advisor is licensed in the UAE?
Check the CMA public register for licensed securities firms, the VARA website for authorised virtual asset service providers, the DFSA public register for DIFC-regulated entities, and the CBUAE register for licensed financial institutions. Any legitimate investment professional should be able to provide verifiable licensing details on request.
Where do I report a suspected investment scam in Dubai?
Report suspected scams to the Dubai Police eCrime Hub by calling 901 or visiting ecrimehub.gov.ae. For emergencies, call 999. You can also file a complaint with the CBUAE fraud reporting portal and, if you are a US citizen, submit a report through the FBI's Internet Crime Complaint Center at ic3.gov. Preserve all evidence including screenshots and transaction records.
Are wealthy or educated professionals also targeted by pig butchering scams?
Yes. Research shows that pig butchering scams frequently target high-net-worth individuals, executives, and financially literate professionals. The sophisticated psychological manipulation involved, combined with realistic fake trading platforms and AI-generated content, means that financial literacy alone does not provide protection. The UAE's concentration of affluent expatriates makes the country an attractive target market for these operations.
Further Reading
US Department of Justice - Coordinated Takedown of Scam CentersTIME - $75 Billion Lost to Pig-Butchering Scam, New Study Estimates
Chainalysis - Pig Butchering Scam Revenue Grows Year on Year
UAE Capital Markets Overhaul: What Advisers and Firms Must Change in 2026
All content for information only. Not endorsement, advice or recommendation. Always consult your professional advisor.