Connect with us

Telecom

Sophos Uncovers How Criminals are Leveraging “As-a-Service” Business Model with Sha Zhu Pan Kits to Expand Cryptocurrency Fraud

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, today revealed how sha zhu pan scammers—those conducting elaborate, romance-based cryptocurrency fraud—are leveraging a business model similar to cybercrime “as-a-service” by selling sha zhu pan kits on the dark web, globally expanding to new markets.

Sophos details these advanced sha zhu pan operations (also known as pig butchering) in the article, “Cryptocurrency Scams Metastasize into New Forms.”

Originating from organized crime gangs in China, the new kits provide the technical components needed to implement a specific pig butchering scheme called “DeFi savings.”

Criminals position DeFi savings scams as passive investment opportunities that are similar to money market accounts, often times to people who have no understanding of crypto. Victims only need to connect their crypto wallet to a “brokerage account,” with the expectation that they will earn significant interest from their investment.

Victims are adding their crypto wallets to a fraudulent cryptocurrency trading pool, which the fraudsters then empty.

“When pig butchering first appeared during the time of the COVID pandemic, the technical aspects of the scams were still relatively primitive and required a lot of effort and guidance to successfully scam victims. Now, as the scams have become more successful and the fraudsters have refined their techniques, we’re seeing a similar evolution to what we’ve seen with ransomware and other types of cybercrime in the past: the creation of an as-a-service model. Pig butchering rings are creating ready-made DeFi app kits, which other cybercriminals can purchase on the dark web. As a result, new pig butchering rings that are unaffiliated with Chinese organized crime groups are appearing in areas like Thailand, West Africa and even the U.S.

As with other types of commercialized cybercrime, these kits lower the entry barriers for cybercriminals interested in pig butchering and vastly expand the victim pool. Last year, pig butchering was already a multi-billion-dollar fraud phenomenon; sadly, the problem is likely only to grow exponentially this year,” said Sean Gallagher, principal threat researcher, Sophos.

Sophos X-Ops has been tracking the evolution of pig butchering schemes for two years. The earliest iterations—dubbed by Sophos as “CryptoRom” scams—involved connecting with potential victims on dating apps and then convincing them to download fraudulent crypto trading applications from third-party sources. For iOS users, these scams required victims to download an elaborate workaround that allowed scammers to bypass security on victims’ devices and gain access to their wallets.

In 2022, the scammers continued to refine their operations, this time finding ways to bypass app store review processes to sneak their fraudulent apps into the legitimate App Store and Google Play Store. This was also the year that a new scam pattern emerged: fake cryptocurrency trading pools (liquidity mining).

In 2023, Sophos X-Ops uncovered two vast pig butchering rings—one based out of Hong Kong and one based out of Cambodia. These rings leveraged legitimate crypto trading apps and created elaborate fake personas to lure victims and steal millions from them. Further investigation revealed that pig butchering operators were adding AI to their arsenal.

At the end of 2023, Sophos X-Ops uncovered a vast liquidity mining operation involving three separate Chinese organized crime rings targeting nearly 100 victims. During the investigation into this operation, Sophos X-Ops first noticed the availability of pig butchering scam kits.

In the most recent pig butchering operations that Sophos X-Ops has investigated, the fraudsters have removed any previous technological impediments, as well as significantly lowered the amount of social engineering required to steal from victims. In the DeFi savings schemes, victims now engage in fraudulent crypto trading through legitimate, well-known cryptocurrency apps and give (albeit unknowingly) the scammers direct access to their wallets. In addition, the scammers can conceal the wallet network that launders stolen crypto, making the scams harder for law enforcement to track.

“The DeFi savings scams are the culmination of two years of pig butcherers refining their operations. Gone are the days when the scammers had to convince victims to download some strange app or transfer the crypto themselves into a soon-to-be-stolen digital wallet.

“The fraudsters have also learned how to better ‘market’ their schemes. They’re taking advantage of how liquidity mining pools operate to steal the funds by telling victims it’s a simple investment account. This is often an easier sell, especially since most people don’t understand the ins and outs of cryptocurrency trading and everything is done under the guise of trusted brands.

“In other words, it’s never been easier for people to fall victim to pig butchering, which means it’s never been more important to be aware that these scams exist—and know what to look out for,” said Gallagher.

Tips to Avoid Falling Prey to Pig Butchering

To avoid falling victim to a pig butchering scam, Sophos recommends the following:

·       Be skeptical of strangers that reach out via social networking sites like Facebook or texts, especially if they want to quickly move the conversation to a private messenger like WhatsApp

o   This also applies for new matches on dating applications—especially if the stranger begins talking about trading in crypto

·       Always be weary of any “get rich quick” scheme or cryptocurrency investment opportunity that promises large returns in a short amount of time

·       Be familiar with the lures and tactics of romance scams and investment scams. Non-profits like the Cybercrime Support Network have resources that can help

·       Anyone who believes they have fallen victim to a pig butchering scam should immediately withdraw any funds from any affected wallet and contact law enforcement

Timeline of Sophos’ Two-Year Investigation into Pig Butchering

2021

·    Sophos X-Ops spots the first “CryptoRom” fake trading apps targeting users in Asia

·    Sophos X-Ops then discovers these scammers expanding their operations, targeting victims in the U.S. and Europe

2022

·       Sophos X-Ops discovers more fake apps from CryptoRom scams, as well as a new workaround scammers are using so that victims can successfully download the fake apps on their iOS devices

·       A new type of pig butchering scam emerges: liquidity mining

2023

·       Sophos X-Ops uncovers the first fake apps for CryptoRom schemes found in the Apple App Store as scammers find ways to bypass the app store review process

·       Sophos X-Ops uncovers two vast pig butchering rings operating out of Hong Kong and Cambodia. Rather than using fake apps, these scammers are now exploiting legitimate crypto trading applications, as well as building elaborate personas to hook their victims

·       Sophos X-Ops finds more fake apps—and learns that pig butcherers are now adding generative AI to their toolkit

·       The story of a man who lost $22,000 in a week to a pig butchering scheme leads Sophos X-Ops to a vast liquidity mining scam operation being run by three different Chinese organized crime rings

2024

·       Sophos X-Ops uncovers the most technically sophisticated pig butchering scheme yet—“DeFi savings” scams. These schemes and other crypto-based scam operations are for sale as kits, leading to pig butchering rings popping up in new areas of the world

For more about the current DeFi savings schemes and the evolution of pig butchering in “Cryptocurrency Scams Metastasize into New Forms” go to Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

SERAP Demands Probe of Disappearance of N27.9Bn from USPF, Calls Out Minister, Secretary of Fund

Published

on

Kindly share this post

Socio-Economic Rights and Accountability Project (SERAP) has called on President Bola Ahmed Tinubu to immediately order an investigation into the alleged disappearance or diversion of N26.9 billion from the Universal Service Provision Fund (USPF).

SERAP Demands Probe of Disappearance of N27.9Bn from USPF, Calls Out Minister, Secretary of Fund

SERAP warned the scandal could worsen Nigeria’s digital divide and deny millions access to basic connectivity.

In a letter dated May 9, 2026, and signed by Kolawole Oluwadare, deputy director, SERAP urged the president to direct Dr. Bosun Tijani, minister of Communications, Innovation and Digital Economy, as well as Yomi Arowosafe, secretary of the USPF,  to explain the whereabouts of the funds.

The organisation also asked Lateef Fagbemi (SAN), attorney general of the Federation and minister of Justice, alongside anti-corruption agencies, to investigate the allegations and prosecute anyone found culpable.

SERAP said the accusations were contained in the 2022 audited report by the Auditor-General of the Federation, published on September 9, 2025.

According to the group, the report exposed several financial irregularities, including unremitted operating surpluses, undocumented expenditures, questionable contract awards, and payments for services allegedly not rendered.

“The USPF is vital to expanding telecommunications access in underserved and rural communities, and any diversion of its funds directly undermines its mandate to bridge the digital divide, support infrastructure development, and promote inclusive connectivity,” the letter stated.

Among the allegations cited by SERAP was the failure of the USPF to remit over ₦13.8 billion in operating surplus between 2016 and 2019.

The Auditor-General reportedly warned that the money may have been diverted and recommended recovery and remittance to the treasury.

The report also allegedly questioned over ₦11.7 million claimed for international training in October 2020 without supporting documents such as invitations, invoices, or certificates of participation.

SERAP noted that the spending was especially suspicious because of travel restrictions during the COVID-19 lockdown.

Other claims included contracts worth ₦2.8 billion allegedly awarded without due approval, ₦8 million paid to a non-existent fund manager, ₦6.4 billion spent on projects not captured in the approved 2020 budget, and over ₦2.8 billion reportedly spent between January and May 2021 without documentation.

SERAP further alleged that the USPF failed to collect and remit over ₦333 million in stamp duties and did not deduct more than ₦144 million in withholding tax from consultant payments.

It also cited payments exceeding ₦390 million to consultants for projects allegedly lacking proof of execution.

According to the group, mismanagement of the fund has serious implications for millions of Nigerians, especially residents of rural and underserved areas who depend on the USPF to access telecom infrastructure and internet services.

“Poor access to reliable and affordable internet connectivity directly affects Nigerians’ ability to exercise a range of fundamental human rights, including freedom of expression, access to information, education, and participation in public affairs,” SERAP said.

The organisation warned that lack of accountability could deepen inequality, limit economic opportunities, and further exclude vulnerable communities from essential digital services.

SERAP gave the federal government seven days to act on its demands or risk legal action aimed at compelling the government, the Nigerian Communications Commission (NCC), and the USPF to respond in the public interest.

 


Kindly share this post
Continue Reading

Telecom

MTN, Airtel, Glo Under Pressure as FG Demands Better Service Delivery

Published

on

Kindly share this post

Federal Government has warned telecommunications operators to improve service quality or face regulatory sanctions, stating that recent reforms have stabilized the sector and removed excuses for poor network performance.

MTN, Airtel, Glo Under Pressure as FG Demands Better Service Delivery

Telcos

Minister of Communications, Innovation and Digital Economy, Dr. Bosun Tijani, issued the warning in a statement on Sunday, emphasizing that Nigeria’s connectivity gaps were largely structural, driven by years of underinvestment and constraints on operators.

The government has tackled these problems through long-term infrastructure planning and immediate sector-stabilization measures aimed at restoring sustainability and investor confidence.

These long-term reforms focus on expanding infrastructure through new fibre deployment and tower rollout initiatives designed to close critical gaps in the digital backbone.

Funding has been secured with support from the World Bank for Project BRIDGE, alongside additional investments in satellite capacity to boost nationwide coverage. These interventions are expected to transform connectivity over the next two to five years, enabling businesses and households to access reliable high-speed internet beyond unstable mobile connections.

“When we assumed office, it was clear that Nigeria’s connectivity challenges were structural, driven by years of underinvestment in infrastructure and constraints that limited the ability of operators to deliver quality service,” the Minister noted.

“We have addressed this on two fronts. First, the long-term structural solution. We have secured funding, led by the World Bank, and established the framework for a special purpose vehicle with Project BRIDGE, to deliver nationwide open access fibre infrastructure.

Deployment of fibre will commence, alongside new tower rollouts through NUCAP, before the end of the year even as we also expand our satellite capability.”

Regarding immediate interventions, the government has stabilized the sector through tariff adjustments, the designation of telecom infrastructure as critical national infrastructure, tax harmonization efforts, and broader macroeconomic reforms.

These changes have restored operator profitability and created a more transparent, market-driven environment, giving telcos the capacity to invest in network improvements.

“It is now the responsibility of telecom operators such as MTN Nigeria, Airtel Nigeria, Globacom, and 9mobile to take all necessary steps to resolve network challenges and deliver the level of service Nigerians expect,” the minister insisted.

The Nigerian Communications Commission (NCC) has been fully empowered to monitor performance, enforce standards, and ensure compliance, with sanctions expected for defaulting operators.


Kindly share this post
Continue Reading

Telecom

PAFON 3.0: Agency Banking Key to Reaching Millions of Unbanked Nigerians – AMMBAN

Published

on

Kindly share this post

Dr. Obioha Oti, National President of the Association of Mobile Money and Bank Agents in Nigeria (AMMBAN), has described agency banking as Nigeria’s most critical last-mile channel for achieving meaningful financial inclusion, stressing that millions of Nigerians, particularly in rural and underserved communities, remain financially excluded despite notable progress in the sector.

PAFON 3.0: Agency Banking Key to Reaching Millions of Unbanked Nigerians – AMMBAN

PAFON 3.0

Speaking at the third edition of the Payments Forum Nigeria (PAFON 3.0), themed “Fair Digital Payments as a Catalyst for Deepening Financial Inclusion in Nigeria,” Oti, represented by Alhaji Yusuf Adeyemo, vice president of the Association of Mobile Money and Bank Agents in Nigeria (AMMBAN), said agency banking has become Nigeria’s most practical and scalable solution for bridging the persistent financial access gap caused by poor infrastructure, low financial literacy, trust deficits, and high service delivery costs.

According to him, without effective last-mile financial access, Nigeria’s financial inclusion ambitions may remain unattainable.

Oti noted that through extensive agent networks, Nigerians now enjoy convenient access to critical financial services including cash deposits, withdrawals, transfers, bill payments, account opening, and other essential banking products, adding that beyond transactional services, agency banking offers trust, human interaction, and proximity-factors that purely digital channels cannot fully replicate.

“Agency banking has emerged as the most practical, scalable, and human-centred solution,” he stated, adding that agents serve as trusted financial intermediaries within local communities.

Highlighting AMMBAN’s contributions, Oti said the association has played a central role in strengthening Nigeria’s financial inclusion ecosystem through policy advocacy, professional training, rural agent expansion, fraud awareness campaigns, consumer protection initiatives, and strategic collaborations involving banks, fintechs, telecom operators, and mobile money providers.

He further noted that the agency banking sector has created millions of jobs and unlocked significant economic opportunities nationwide.

Oti acknowledged the contributions of major ecosystem drivers, including the Central Bank of Nigeria (CBN), which he said continues to provide regulatory support through financial inclusion frameworks, consumer protection policies, and interoperability initiatives.

He also credited the Shared Agent Network Expansion Facilities (SANEF) for accelerating agent expansion across the country, while Enhancing Financial Innovation and Access (EFInA) was recognized for its support through research, innovation funding, and data-driven insights.

Despite these achievements, Oti warned that the sector continues to grapple with significant obstacles such as liquidity shortages, network instability, fraud risks, poor agent profitability, infrastructure deficits, and overlapping regulations.

He stressed that these challenges must be urgently addressed to sustain growth and deepen inclusion. “For inclusion to truly deepen, digital payments must be affordable, reliable, transparent, and accessible to all Nigerians,” he said, insisting that fairness in digital payments is essential to closing the financial inclusion gap.

He warned that unfair pricing structures, unstable systems, and exclusionary payment models could further marginalize vulnerable populations.

Looking ahead, Oti urged stakeholders across the financial ecosystem to prioritize stronger collaboration, improved agent profitability, infrastructure development, enhanced financial literacy, increased financing access for agents, and supportive regulatory frameworks.

He projected that Nigeria’s financial inclusion future will be “phygital,” combining physical agent networks with digital platforms to create seamless financial access.

According to him, agents are rapidly evolving beyond transaction points into community-based financial service hubs capable of driving grassroots economic development. “Agency banking is no longer just a distribution channel; it is the backbone of financial inclusion in Nigeria,” Oti declared.

He reaffirmed AMMBAN’s commitment to working with regulators, financial institutions, and technology providers to strengthen the ecosystem, empower underserved populations, and build a more inclusive national financial system.


Kindly share this post
Continue Reading

Trending