A coordinated multinational law enforcement operation announced in early May 2026 has delivered the most significant blow to crypto investment fraud infrastructure in years: 276 arrests, nine scam center shutdowns, and more than $701 million in cryptocurrency restrained β funds alleged to be the proceeds of large-scale investment fraud targeting victims primarily in the United States.
The operation was led by Dubai Police under the UAE Ministry of Interior, working in partnership with the U.S. Federal Bureau of Investigation and Chinaβs Ministry of Public Security. It is one of the most geographically expansive enforcement actions ever mounted against cryptocurrency-enabled fraud networks.
Operation Level Up: Proactive Victim Identification at Scale
The centerpiece of the U.S. component is Operation Level Up, launched by the FBI in January 2024 with an unusually direct mission: identify victims of cryptocurrency investment fraud before they realize theyβve been victimized, and contact them proactively.
The results as of April 2026 are striking. The FBI has notified approximately 9,000 victims β people who were still actively engaged with fraudulent investment platforms, often still adding money β and has prevented an estimated $562 million in additional losses. That figure represents the amount victims would have continued sending had they not been reached by law enforcement.
The FBIβs approach in Operation Level Up represents a meaningful evolution in how agencies handle these cases. Traditionally, crypto fraud victims contact law enforcement after discovering theyβve been defrauded, at which point funds have long since been laundered through multiple wallets and withdrawal is nearly impossible. Operation Level Up inverts the model: investigators identify active fraud in progress and interrupt it before the final losses accumulate.
What Was Seized
The May 2026 actions restrained more than $701 million in cryptocurrency alleged to be connected to money laundering from cryptocurrency scams. Additional seizures included:
- A Telegram channel (@pogojobhiring2023), which had accumulated more than 6,500 followers and was used to recruit human trafficking victims to fraudulent facilities in Cambodia
- A cluster of 503 fake investment websites used to defraud U.S. victims
- Physical infrastructure at nine scam center locations across multiple countries
The 276 people arrested span multiple roles within the fraud networks β from senior operators to individuals who were themselves victims of human trafficking.
Inside the Scam Centers: The Human Trafficking Layer
The most disturbing dimension of this operation β and of the pig-butchering industry broadly β is the forced labor element. Not everyone working inside these scam compounds chose to be there.
A significant portion of scam center workers were trafficked. They were recruited with promises of legitimate employment β customer service roles, data entry positions, IT jobs β often through platforms like LinkedIn, Facebook, and Telegram. Upon arrival in the destination country, typically Southeast Asian nations including Cambodia, Myanmar, and the Philippines, their passports were confiscated. They were told they owed money for the cost of their travel and accommodation. They were forced to work running fraud scripts against targets in the U.S., UK, Europe, and Australia.
Those who refused or performed poorly faced penalties including physical violence. Escape attempts were met with beatings and, in some documented cases, sale to other compounds.
The Telegram channel seized in the May 2026 crackdown β @pogojobhiring2023 β was specifically used to lure trafficking victims. It advertised jobs in Cambodia, promising high salaries and legitimate work. More than 6,500 people had followed the channel before authorities took it down.
This layer of the operation is essential to understand. When law enforcement raids a scam center and arrests 276 people, many of those arrests are of individuals who were themselves victims. The legal and ethical complexity of disentangling trafficked workers from willing operators is significant and has been inconsistently handled across jurisdictions.
How Pig-Butchering Works
For readers unfamiliar with the mechanics: pig-butchering (a term derived from the Chinese phrase βshΔ zhΕ« pΓ‘nβ) is a long-con investment fraud scheme that combines social engineering with fake trading platforms.
The script follows a consistent structure:
-
Contact initiation: The scammer contacts the target via social media, dating apps, or messaging platforms, typically posing as an attractive, successful person who made an initial contact βby mistakeβ (a wrong number, a misdirected message).
-
Relationship building: Over days or weeks, the scammer builds a genuine-seeming relationship. They share details about their life, ask about the targetβs, and gradually introduce the topic of investment β usually presenting cryptocurrency trading as a side income theyβve been successful with.
-
The platform: The target is directed to a fraudulent trading platform β one that looks and functions like a legitimate crypto exchange. Initial investments appear to grow rapidly. The target is encouraged to deposit more. Referrals to friends and family are rewarded.
-
The exit: When the target attempts to withdraw, they are told fees or taxes must be paid first. These fees exist to extract additional funds. Once the target can no longer deposit, the platform vanishes, accounts are inaccessible, and the operator moves on.
The 503 fake investment websites seized in the May 2026 crackdown are the visible infrastructure of this playbook. Each site was built to sustain the illusion long enough to maximize deposits.
Scale of the Problem in 2026
According to Chainalysisβ 2026 Crypto Crime Report, an estimated $17 billion was stolen globally through cryptocurrency scams and fraud in 2025. The same report documents a 1,400% surge in impersonation scams and a 450% increase in AI-enabled fraud compared to prior years.
AI has added a particularly dangerous capability: automated, personalized relationship-building at scale. Where pig-butchering previously required human operators to manually conduct weeks-long conversations with each target, AI-assisted tools now allow a single operator to run hundreds of simultaneous βrelationshipsβ with convincing responsiveness.
The FBIβs 2026 Internet Crime Report notes that investment fraud β primarily crypto-based β continues to represent the single largest category of financial loss among all cybercrime categories it tracks, ahead of ransomware, business email compromise, and all other fraud types combined.
What the Crackdown Means β and Doesnβt Mean
The May 2026 operation is the largest coordinated enforcement action against crypto scam infrastructure to date, and the cooperation between the UAE, FBI, and China on a shared operation is genuinely unusual given geopolitical tensions in other domains.
But 276 arrests and $701 million seized represent a fraction of the total fraud ecosystem. The pig-butchering industry operates across dozens of countries, runs on infrastructure that can be rebuilt rapidly, and generates returns large enough that operators treat enforcement costs as a line item.
The lasting value of operations like this lies less in immediate disruption and more in three areas: intelligence gathered about network structures and financial flows; the precedent of international law enforcement cooperation on crypto fraud; and the direct benefit to victims identified and contacted before losing additional funds.
For the approximately 9,000 people Operation Level Up has contacted since 2024, the intervention was direct and measurable. Those are real losses that did not happen because investigators moved proactively. That model β identify the fraud in progress, reach the victim before the losses compound β is the most actionable template available for scaling impact against a problem that, by all current measures, is still growing.
This article is provided for informational purposes only and does not constitute financial or legal advice.
