An 80-year-old retiree in Irvine, California, withdrew $25,000 from his bank, packed the bills into a shoebox wrapped in duct tape, and handed the package to a stranger in a parking lot. The man believed he was cooperating with the local police chief, who had called him directly and provided a secret code phrase to verify the handoff. The phone number on his caller ID matched the real Irvine Police Department line. None of it was real.
How a spoofed number and a code phrase cost one retiree $25,000
The scam worked because every detail was engineered to feel official. Callers spoofed the Irvine Police Department’s main number and impersonated the chief of police, according to department spokesperson Ziggy Azarcon, who described the case to local television news. The victim was told his identity had been compromised in a fraud case and that he needed to withdraw cash to protect his accounts. He was instructed to keep the supposed investigation secret, warned that his money was at risk, and urged to follow directions carefully.
Over the next two weeks, the callers repeatedly contacted the retiree, reinforcing the story and building pressure. They eventually directed him to withdraw $25,000 in cash, place the money in a shoebox, wrap it in duct tape, and wait for a courier. Before the handoff, the scammers supplied a code phrase that the victim was told to use to verify the courier’s identity. At a Kohl’s parking lot in Irvine, the stranger arrived, repeated the correct phrase, accepted the package, and left. Only later did the victim learn that neither the chief nor any Irvine officer had been involved.
Part of a wider pattern of courier scams
This was not an isolated trick. The FBI’s Boston office documented 103 courier-style scam incidents across its region from 2023 through May 2025, with total losses reaching $26,024,691. That works out to more than $252,000 per case on average. In many of those incidents, victims were told to liquidate retirement accounts, purchase gold bars, or withdraw large amounts of cash and then surrender the assets to a courier who claimed to be safeguarding them as part of a criminal investigation.
The bureau’s warning notes that scammers often pose as federal agents, police officers, or bank fraud investigators. They may tell victims that their Social Security number has been used in a crime, that their bank accounts are about to be frozen, or that an internal employee is stealing from them. The supposed solution is always the same: move money immediately, in a way that cannot be reversed, and hand it to someone who appears to be working with law enforcement.
The code-phrase tactic and why it increases losses
Standard impersonation calls rely on fear and urgency. The code-phrase mechanic adds a second layer: manufactured trust. When a caller tells a victim to verify the courier by exchanging a passcode, the interaction mimics the kind of two-factor authentication people encounter with banks and government agencies. An FBI bulletin distributed through local police departments describes how victims may be instructed to authenticate the transaction using a passcode such as the serial number of a U.S. dollar bill. The courier recites the matching number, and the victim feels confirmed that the person standing in front of them is legitimate…