Sting at an Encino Home: Federal Agents Arrest Alleged Courier in "Microsoft Support" Scam

The bottom line: this case shows how fast a fake "Microsoft Support" pop-up can turn into a bank impostor call, fake federal agents at the door and a cryptocurrency pitch, all within days.

The timeline, as alleged

According to the affidavit supporting the complaint:

1. April 23: The victims opened an email and clicked a link. Malware seized their computer and displayed a phone number labeled "Microsoft Support."
2. The first call: The victims called the number. The person who answered said they had been "hacked" and that the hackers had their bank account information at City National Bank.
3. The bank impostor: The victims were connected to someone posing as a "Fraud and Risk Investigator" with City National Bank, who told them to withdraw $25,000 in cash and give it to "federal agents" who would come to their house.
4. The pickup: Later on April 23, two men posing as federal agents, one displaying a fake badge, collected the $25,000.
5. More demands: Over the next two days, the scammers kept seeking money, including directing a $10,000 withdrawal at a specific City National Bank branch.
6. April 25: HSI agents learned of the scam and planned a sting.
7. April 26: During calls with the scheme's participants, the victims agreed to another $35,000 cash payment. After refusing demands to deposit the money into a virtual wallet at a remote location, they planned another pickup of cash by a "federal officer" at their home.

The arrest

At the agreed time, Su drove to the home. He identified himself to an 86-year-old victim and gave a passcode and said he was from Coinbase, the cryptocurrency platform. HSI agents arrested him. According to the affidavit, he was carrying thousands of dollars in cash in large denominations.

The charge carries a statutory maximum of 20 years in federal prison. A criminal complaint includes allegations, and Su is presumed innocent until proven guilty.

The HSI-led El Camino Real Financial Crimes Task Force investigated. The case stemmed from the office's Vulnerable Communities Task Force.

What this means for you

1. Tech support scams now blend with impostor scams. In this case, a pop-up led to a fake bank investigator and fake federal agents.
2. No legitimate bank or agency sends someone to your house for cash. This request alone identifies a scam.
3. Passcodes are a scammer's tool. A "PIN" or passcode given by a courier at the door is a hallmark of these schemes.
4. Quick reporting works. HSI learned of the scheme two days after it began and prevented a $35,000 loss.
5. Couriers face the same conspiracy charge as the callers. Picking up a package for a stranger is not a safe side job.

Victims age 60 or older can get help from the National Elder Fraud Hotline at 1-833-FRAUD-11 (1-833-372-8311).