An Austin man lost $1,408,850 to a fake DAIQ crypto platform found on LINE. A staged $40,000 handoff led police to a 34-year-old courier. How it worked.
Social Engineering Examples·4 sources
An Austin man lost $1,408,850 to a pig butchering scam over six months, paying a fake crypto platform called DAIQ in cash, wires and gold bars. It began on the LINE messaging app in September 2025. In mid-March 2026 he tried to take money out and was told to pay "fees" first. He reported it to the FBI instead. On 13 April 2026, Austin Police used a staged $40,000 handoff to catch a 34-year-old courier outside a Bank of America branch in South Austin. Status: Courier charged, no conviction reported.
| When | What happened |
|---|---|
| September 2025 | "Investment advisers" contact him on LINE, claiming links to a well-known Taiwanese businessperson |
| October 2025 to March 2026 | He pays into DAIQ, which promises returns of 3% to 5% a day. The sums get bigger |
| Mid-March 2026 | He tries to withdraw. The platform wants extra "fees" first. He can't pay, realises it's a scam and reports it to the FBI's Internet Crime Complaint Center |
| 13 April 2026 | Police set up a fake $40,000 cash and gold handoff at a Bank of America branch on West Slaughter Lane. They detain a man as he walks up to the victim's car |
| 14 April 2026 | A magistrate finds probable cause. He's charged with engaging in organized criminal activity, a first-degree felony in Texas. Bond: $200,000 |
Everything here comes from a Travis County arrest affidavit, as reported by KXAN and the Austin American-Statesman.
| Channel | How it worked |
|---|---|
| Cash | Handed over in person, in parking lots |
| Wires | Sent to bank accounts in the US and abroad |
| Gold | He bought gold bars, which were shipped to him by FedEx. Couriers then picked them up around South Austin, mostly near West Slaughter Lane |
Why gold and cash? The affidavit doesn't say. What it does show is the weak spot: for those payments, somebody had to turn up in person.
Tip: no real platform pays 3% to 5% a day. And if you have to pay to get your own money out, it's already gone.
He had a pre-filled receipt on him that matched earlier pickups. In interview, he told investigators a handler called "Jerry" sent him around the country by messaging app: Los Angeles, Seattle, Atlanta and New York City, then Austin. He collected cash and gold from victims and passed it to other couriers or shipping companies. Travel was paid for, plus a fee per pickup. His phone reportedly held videos of cash and photos of shipped packages. During the interview, "Jerry" messaged him with a warning not to cooperate.
These are allegations from the affidavit, not proven facts. The courier isn't named here because no conviction has been reported. As of July 2026, "Jerry" and the people who groomed the victim online hadn't been identified or charged.
Couriers are usually treated as throwaway parts of a pig butchering network. They're also the one part that can be arrested on a US street.
See also the Dubai scam compound takedown and the Heartland Tri-State Bank case.
$1,408,850, paid between October 2025 and March 2026 in cash, wires and gold.
The fake crypto trading platform used in this scam. It promised returns of 3% to 5% a day and blocked withdrawals unless he paid more fees.
After the victim reported the scam, Austin Police staged a $40,000 handoff and detained the courier when he approached the victim's car.
No. As of July 2026, only the courier had been charged. The handler and online operators were still unidentified.
Social Engineering Examples. “Austin pig butchering scam: $1.4M lost, courier caught in a sting (2026)”. Accessed 3 November 2026. https://socialengineeringexamples.com/austin-pig-butchering-daiq-courier-arrest-2026
consistent with documented pig-butchering playbooks referenced in FBI and Secret Service guidance cited in coverage of this case, operators likely used purchased or scraped contact lists and messaging-app IDs to identify a target, then built a fabricated persona posing as an investment adviser tied to a well-known Taiwanese businessperson to lend borrowed authority before any contact was made.
reconnaissance built on scraped contact data and a fabricated authority persona is very hard to intercept before contact; the realistic control is consumer education to treat unsolicited investment approaches from any new online contact, especially ones invoking a well-known name, with default skepticism regardless of how the contact was sourced.
before or during the courtship, the network stood up a branded fake crypto trading platform, DAIQ, with a convincing dashboard and payout mechanics, and separately recruited and staged a rotating bench of physical money couriers, including the arrested courier, who told investigators he had already collected payments in Los Angeles, Seattle, Atlanta, and New York City, to move cash and gold across the US.
look-alike fake trading platforms and mule and courier networks can be disrupted upstream through app-store and platform vetting, bank anti-money-laundering controls that flag unusual cash and gold-purchase patterns, and law-enforcement intelligence sharing on known courier tactics, per the FBI and Secret Service guidance cited in coverage of this case.
in September 2025, operators reached the victim on the LINE messaging app, posing as investment advisers connected to the Taiwanese-businessperson persona, and spent several months building rapport before introducing any financial ask.
users should independently verify any unsolicited investment adviser contact made through a messaging app rather than trusting a claimed tie to a well-known businessperson, and should be wary of relationships that begin on LINE, WhatsApp, or similar apps with strangers.
once trust was established, the operators steered the victim into DAIQ and promised guaranteed daily returns of 3 to 5 percent, a return profile no legitimate investment offers, to justify escalating deposits.
guaranteed daily returns of 3 to 5 percent are a hard, well-publicized red flag; FBI and Secret Service guidance urges treating any guaranteed high-yield crypto pitch as fraud regardless of how credible the surrounding relationship feels.
between October 2025 and March 2026 the victim was walked through progressively larger payments across three parallel channels: in-person cash handoffs in parking lots, wire transfers to domestic and international accounts, and gold bars shipped via FedEx and collected by couriers, funneling funds to the arrested courier and other couriers who reported to the Taiwan-based handler Jerry via messaging apps.
banks and money-service businesses can flag and interdict escalating cash withdrawals, gold-bullion purchases, and international wires tied to a single new investment narrative; front-line staff trained to ask about crypto-investment pressure at large cash or gold transactions can catch this stage before funds are fully lost.
when the victim tried to cash out in mid-March 2026, the platform demanded an additional fee before releasing funds, the standard pig-butchering mechanism for both squeezing further payment and delaying the victim's realization that the platform was fraudulent.
a demand for extra fees to unlock a withdrawal should be treated as confirmation of fraud, not a solvable obstacle, and reported immediately to the FBI's Internet Crime Complaint Center, exactly the response that let this case reach law enforcement.
having already extracted $1,408,850, the operators directed a further $40,000 gold and cash collection through the arrested courier, part of the same pattern of routing physical assets through geographically dispersed couriers to move proceeds out of reach before any single collection point could be traced; this final leg is the one law enforcement intercepted.
once a victim reports promptly, as happened here, law enforcement can use the still-pending final collection to stage a controlled handoff and intercept the courier before cash or gold leaves the country, which is precisely the interdiction that ended this case.
Browse by what this case has in common with others in the library.
In June 2025 the DOJ filed to forfeit $225.3M in USDT tied to pig butchering scams, after Tether and OKX…
US prosecutors charged 28 people over an alleged $65M scheme where callers faked refunds to trick seniors into sending cash.…
Censys traced a USPS 'package awaiting action' smishing kit to 682 lookalike sites that streamed card numbers as victims typed.…
Fake finance "directors" in WhatsApp groups steered 18+ US investors to NanoBit, a crypto platform that never traded. The SEC…
Fake QR stickers on UK council parking machines sent drivers to cloned payment sites. 123 of 373 councils were hit…
A Chinese national entered Mar-a-Lago after a pool-visit pretext and staff's unverified assumption that she was related to a member.…
The FBI's 2025 Internet Crime Report tracked AI fraud for the first time: 22,364 complaints and $893M lost. What the…
In the PG&E scam, a caller claiming to be from the utility threatens to cut the power today. Then a…
Prosecutors say a grandparent scam run from call centers in the Dominican Republic hit hundreds of elderly Americans and took…
Prosecutors allege Ghanaian twins used fake female personas and AI video to take $15M+ from 130+ older Americans. What is…
In June 2025 the DOJ filed to forfeit $225.3M in USDT tied to pig butchering scams, after Tether and OKX…
SCE reported $131,464 collected by scammers across its 2025 customer fraud complaints. Its warnings describe immediate-disconnection and meter-removal threats as…
Prosecutors say a grandparent scam run from call centers in the Dominican Republic hit hundreds of elderly Americans and took…
P&G-hired competitive-intelligence contractors obtained confidential Unilever hair-care information from discarded garbage before P&G self-disclosed the operation, fired three employees, and…
A Snap Inc. payroll employee emailed the W-2 and payroll data of roughly 700 current and former employees to an…
Fugitive hacker Kevin Mitnick impersonated a vacationing Novell employee on a "top-secret" project, defeated a support analyst's voicemail-based identity check…
Between 2006 and 2008 the FTC pursued six civil cases covering 16 data-broker and private-investigation defendants after two dismissals, alleging…
A US Attorney's Office (EDVA) court order seized seven domains spoofing the Singapore International Monetary Exchange that pig-butchering scammers used…
Fake Anti-Scam Centre and police officers convinced a Singapore finance worker she was a suspect, then took S$1.2M through transfers…
Fake QR stickers on UK council parking machines sent drivers to cloned payment sites. 123 of 373 councils were hit…
A long-running, India-based network of call centres impersonated the Canada Revenue Agency and RCMP in mass vishing calls that threatened…
DOJ/FTC alleged that Citizens Disability and subsidiary CD Media made 109 million-plus illegal telemarketing calls, including 25.7 million-plus to Do-Not-Call…
A Houston- and California-based ring spoofed or compromised business emails to trick four companies and one New Jersey township into…
Prosecutors allege Ghanaian twins used fake female personas and AI video to take $15M+ from 130+ older Americans. What is…
Social Engineering Examples