The images in this article were generated with artificial intelligence. How we publish
The investment scams with cryptomonedas known as "pig butchering" or the variants of sentimental deception have evolved: now the rioters complement virtual fraud with a face-to-face phase by cash-collecting messengers to convert online trust into real losses. The FBI public notice describes how, when banks block suspicious transfers, scammers force victims to hand over money to third parties acting as couriers, authenticated with a code, an agreed password or even the serial number of a ticket.
The mechanics of deception is deliberately sophisticated: after gaining confidence in social networks or dating applications, the criminals convince the victim to invest in a false platform; after the cash delivery appears a false balance update In the so-called digital portfolio and the victim, believing to have made a profit, again tries to withdraw funds, relaunching a cycle of extortion that usually includes additional requirements for "taxes" or "penalties." The physical payment makes it easier for scammers to whiten and disperse funds outside the usual track of electronic transfers.

This changes the nature of the risk: it is no longer just an online economic loss, but a face-to-face interaction that puts into question physical safety and the possibility of repeated scams by climbing. The use of messengers transforms digital fraud into a mixed crime that takes advantage of human verification failures and the victim's belief in the legitimacy of the process.
From a technical and social point of view, these tactics exploit two key vectors: psychological manipulation - including the well-known "love pumping," or strategic emotional harassment to accelerate confidence - and friction in financial controls. When the banks block movements, the shooters turn that obstacle into an argument: "Your account has been marked, it brings cash and we solve it," which pressure the victim to accept to collect messengers.
The implications are broad: for users, greater difficulty in distinguishing between legitimate platforms and replicas; for financial institutions, a challenge to detect and stop networks that combine electronic transfers with physical cash; and for police research, the need to track chains of apparently innocent people acting as messengers. According to the FBI itself, investment-related incidents represent a substantial part of recent cybercrime losses, which is evidence of the scale of the problem.
If you receive an unsolicited communication about an investment or a romantic interest that will soon return to face-to-face money requests, stop all contact and do not deliver cash or personal data. Before any operation, check the platform and the interlocutor: look for independent reviews, check business records and require official documentation of the company. To understand the phenomenon and how manipulation is carried out, the US Federal Trade Commission's consumer guide. UU may be useful: FTC on romantic scams.

If you suspect that you have been objective or victim, you keep all the evidence: screenshots, account numbers, messages, names and schedules, and if there was a messenger, you take note of their appearance and place of collection. Contact your financial institution immediately to try to block or reverse transactions and file a formal complaint. The FBI and its IC3 complaints platform receive reports to coordinate investigations; you can present your case on the website of the IC3.
At the preventive and technical level, it applies basic cybersecurity measures: it uses multifactor authentication in exchanges and posts, it uses cold portfolios (hardware wallets) to keep crypt in the long term, and it avoids transfers to unaudited purse or intermediaries. If they offer you extraordinary profits and the only way to collect them is in cash or through unknown intermediaries, it is almost certain that it is a fraud.
Recovering funds in these schemes is difficult and slow; it distrusts companies that promise to "recover everything" in exchange for a prior payment. Involving the authorities and doing so promptly increases the likelihood of effective action. Prevention and immediate documentation are the best tools to limit damage and help disarticulate networks that combine the digital and physical world to exploit the victims.
Related
More news on the same subject.

OpenAI engineer arrested by hidden recorder in office board room in San Francisco
A United States court this week authorized the arrest of Abdulrahman Alfozan, an engineer who worked in OpenAI, following the U.S. government's charges for placing a hidden reco...

Four Plex2Shell CVE allows remote execution and mining and proxy backdoor deployment
In recent days, an increase in attacks has been confirmed that take advantage of a chain of failures in Plex Media Server - nicknamed "Plex2Shell" by researchers - to run code r...

GhostAction Expands Attack: phishing to steal credentials and persistence in VS Code
A group behind the GhostAction campaign - already known for infiltrating GitHub Actions workflows into open source projects - has expanded its arsenal: in addition to installing...

ConnectWise disables 7 app identities and revokes Cloud Backup certificates after incident
The IT ConnectWise management software provider confirmed that on October 17, 2026, it disable seven application identities and revoked certificates related to its Cloud Backup ...

Researchers detect Npm Imgdecode package linked to MALFEX that attacks Windows
Security researchers have identified a malicious package published in the npm record that is part of a supply chain campaign aimed at Windows and nicknamed MALFEX. The package, ...

OpenBSD 7.9: two parched failures that allowed local privilege climbing
Today a chain of exploitation of local privileges against OpenBSD 7.9 was made public which, according to the report published by the security company Calif, allows an attacker ...

OpenAI reveals unaligned IA incidents; a GPT-5.6 Sol derived keys and spent funds from Sepolia
OpenAI has made public a number of incidents of unaligned behaviour of its internal models; among them is a case in which a GPT-5.6 family research model Sol derived private key...