A new online friend, a hot investment tip — then a stranger at your front door
Scammers behind America's fastest-growing fraud have added a frightening new step: after spending weeks building a fake online friendship and steering you into a bogus cryptocurrency investment, they now send someone to your home in person to collect the cash. The FBI issued a formal warning about this tactic in June 2026.
The scheme behind the scam
This fraud has a name in law-enforcement circles — "pig butchering," a term borrowed from criminal slang that means to fatten the target before taking everything. The FBI's 2025 Internet Crime Report found that cryptocurrency investment fraud generated $11.36 billion in reported losses in 2024, a 21 percent increase over the prior year, with victims losing an average of more than $62,000 each. Adults 60 and older are among the most heavily targeted because they are more likely to have retirement savings, and because the scammers spend weeks building genuine-feeling trust before any money ever comes up.
The scheme almost always begins the same way. A stranger reaches out — through a text that appears to go to the wrong number ("Sorry, I meant to reach my cousin — but since you replied, how are you?"), through a social media connection request, or on a dating app. The conversation is warm and unhurried. Nothing about money comes up for days or even weeks. This is deliberate: the criminal is building a relationship. They listen. They remember details. They feel like a real friend.
Eventually, the conversation turns to money — casually, as if sharing good news. The new "friend" mentions they have access to a private trading platform or a cryptocurrency opportunity. They show screenshots of their own supposed profits. They offer to help you get started. Early on, the fake platform may even let you "withdraw" a small profit — a calculated move to deepen your confidence and encourage you to invest more. The platform is entirely fake. The profits are numbers on a screen. Every dollar deposited is transferred to criminals, often operating from overseas fraud compounds.
The new move: a courier at your door
Banks and credit unions have become more effective at flagging large or unusual wire transfers and cryptocurrency purchases. Scammers have adapted to work around those protections.
According to the FBI's June 2026 Public Service Announcement (Alert I-061526-PSA), when a financial institution blocks or questions a transfer, scammers now tell victims that the funds must be delivered as cash instead. A courier — someone the criminal network recruits to physically move money — is then dispatched to the victim's home or to an agreed nearby location such as a parking lot or coffee shop.
To appear legitimate, the handoff is staged with a pre-arranged authentication. The courier may arrive carrying a specific serial number from a dollar bill, a code phrase, or other detail the scammer shared in advance. This theatrics are designed to make the transaction feel official and secure. The courier may be young, may seem ordinary, and may not fully understand what they are part of. Once the cash changes hands, it moves quickly through the network and is almost always unrecoverable.
This tactic is significant because it bypasses the bank safeguards that have prevented many wire-transfer losses — and because it brings the scam to your doorstep, literally. Victims who would have hesitated to wire money overseas may be more willing to hand cash to a polite stranger in person, especially after weeks of relationship-building with the criminal directing the transaction.
What to do
- Be patient with new online contacts. A genuine friend will still be there in two weeks. Criminals need to move fast before you have time to think or ask someone. If a new online acquaintance has moved unusually quickly to discussing investments, slow down.
- Never invest based on advice from someone you have not met in person. The relationship is the product, not the investment. If the connection began through a text to the wrong number, a social media request, or a dating app, be cautious — these are the three most common entry points for this scam.
- Verify any investment platform independently. Search the platform's name at investor.gov (the SEC's investor education site) and at FINRA's BrokerCheck. Legitimate investment firms are registered. Fake platforms are not. If you can't find it, stop.
- Know that no legitimate investment requires a cash pickup. If you are told that a transfer was blocked and that a courier will come to collect cash instead, stop immediately. This is the scam adapting to the bank's fraud protection — not a real investment procedure. Call a trusted family member before doing anything.
- Take your bank's fraud concerns seriously. When a bank questions or blocks a transfer, they are often seeing warning signs you cannot. That call from a fraud specialist is worth taking.
- Report it immediately if you have already sent money. File a complaint at the FBI's Internet Crime Complaint Center at ic3.gov. Adults 60 and older can also call the National Elder Fraud Hotline at 833-372-8311 for help. Acting quickly gives law enforcement the best chance of tracing the funds.
- Share this with the people you love, before it happens. The families least likely to fall for this scam are the ones who talked about it while everything was calm. A five-minute conversation today is worth more than a recovery call later.
Related reading
- Protecting an older parent from email and phone scams — the conversations to have and the settings to check, written for adult children of older parents.
- The Scam Library — investment fraud and pig butchering — a full plain-English walkthrough of this and 48 other scams, with real examples of what the messages look like.
- What Family Sentinel monitors — a breakdown of the threat categories we watch inside family inboxes, including investment fraud lures and impersonation.
We watch the written half of this scam.
The fake friendship lives on the phone — but the fake investment platform sends emails. The "withdrawal fee" demands arrive by inbox. The fraudulent account statements, the "urgent transfer instructions," the impersonation of customer support — all of it passes through email. Family Sentinel monitors those messages for exactly these patterns and alerts your family before the money moves, read-only by design, with a real Security Architect behind it. Every alert we send even carries your family's own verification phrase, so a scammer can never fake a warning from us.
Start your free month →Want the next threat before it reaches you?
Scam Watch goes out regularly — the newest scams and how to spot them, in plain English. Free.