Crypto Scammers Deploy Couriers to Collect Cash from Victims in Physical Hand‑offs
What Happened — Fraudsters behind cryptocurrency “investment” schemes are now sending in‑person couriers to pick up cash from victims after the victims have been lured via social‑media messages, texts, or fake investment personas. When banks block suspicious transfers, the scammers instruct victims to hand over cash, authenticate the courier with a serial‑number code, and then claim the money as a “fee” or “tax” before promising new deposits on the fraudulent platform.
Why It Matters for Compliance & Audit Readiness
- The scenario is a textbook example of a social‑engineering attack that bypasses technical controls; SOC 2 A‑3 (Logical Access) and CC 6.1 (Security Awareness) require documented training and verification processes to mitigate such risks.
- Continuous evidence of security‑awareness program effectiveness (e.g., phishing‑simulation results, training completion rates) serves as audit‑ready proof that the organization is actively managing the human‑factor threat surface.
- The Security Awareness Training capability in Verisq helps organizations embed, track, and report on mandatory anti‑phishing and fraud‑prevention curricula, providing the audit trail SOC 2 auditors look for.
Who Is Affected
- Financial services firms, fintech and crypto‑exchange platforms, and any organization that processes customer payments or handles cash‑related transactions.
Recommended Actions
- Conduct a rapid security‑awareness refresher focused on social‑engineering tactics such as “love‑bombing” and cash‑pickup scams.
- Update incident‑response playbooks to include verification steps for any in‑person cash collection request.
- Enforce multi‑factor authentication and transaction monitoring for all cash‑related activities, and document the controls for SOC 2 evidence.
Source: Help Net Security
Technical Notes
- Attack vector: PHISHING/social‑media lures → physical courier hand‑off.
- No software vulnerability; the threat relies on human manipulation and cash‑transfer workflows.
- Reported losses: $11.3 B in 2025, with $7.2 B tied to crypto investment scams (FBI IC3).
Source: Help Net Security