Fake “Microsoft Security” Alert Led Scammers To Her Life Savings — Courier Arrested In FBI Sting

An elderly Tonawanda, New York resident lost access to roughly $360,000 after answering a phone number displayed by a fake "Microsoft Security" pop-up. What started as a single call turned into a month-long scheme in which callers posing as Microsoft, bank fraud specialists and IRS agents instructed the victim to hand over cash, buy gold and install remote-access software.

How the Scam Worked

The scheme began on May 15 when the woman saw a pop-up labeled "Microsoft Security" that included a telephone number. Prosecutors say she called and reached a man who identified himself as "Logan," a Microsoft security representative. Logan claimed someone was trying to access her account and that a roughly $22,000 transaction had been attempted — a transfer that prosecutors say never actually occurred.

Logan gave the victim a case number and transferred her to another caller introduced as Christopher Martin from her bank's "Cyber Fraud Division." That caller also allegedly claimed to work as a liaison with the Internal Revenue Service and instructed the woman to move her funds to a so-called "IRS account" inside her bank portal for safekeeping.

Remote Access, Cash And Gold

At the callers' direction the victim installed remote-access software that required a password, allowing the fraudsters to control her keyboard and guide her through online banking. Prosecutors say that access likely captured account details and left the victim dependent on the callers' instructions.

The woman first handed $20,000 in cash to someone presented as an IRS agent at a local coffee shop. She then made five purchases of gold coins or bullion; after each purchase, a courier reportedly traveled from Flushing, New York, to collect the packages.

Federal Sting And Arrest

Federal agents from the FBI, IRS Criminal Investigation and the New York State Police began working with the victim. On June 18, during a fifth scheduled pickup, investigators substituted fake gold equipped with tracking devices. Forty-three-year-old? (note: original reporting lists 39) 39-year-old Didi Zou allegedly accepted the package and was later arrested following a traffic stop; his attorney described him as a courier at a detention hearing, while prosecutors say evidence ties him to pickups in New Jersey and Indiana as well.

Zou, a Chinese national living in New York City, is charged with conspiracy to commit money laundering and conspiracy to commit wire fraud. Each count carries a statutory maximum penalty of 20 years in prison. U.S. Magistrate Judge Jeremiah McCarthy ordered Zou detained while the federal case proceeds. Public reporting has not made clear exactly how much of the approximately $360,000 remained missing after investigators halted the final pickup.

Takeaways And Advice

Legitimate tech companies, banks, the IRS and law enforcement will not: ask you to download remote-access software, create secret "protected" accounts in your bank portal, purchase gold to safeguard funds, hand cash to a courier, or meet unknown people in public to protect savings.

If you see a pop-up claiming your computer is infected, do not call the number on the screen. Close the browser, disconnect from the internet if necessary, and contact a trusted technology provider or your financial institution directly using a verified phone number.

Report suspected tech-support, bank-imposter, government-imposter, cash-courier or gold-courier scams to local law enforcement, the FBI's Internet Crime Complaint Center at IC3.gov and the FTC at ReportFraud.ftc.gov. Victims aged 60 or older can also call the DOJ Elder Justice Hotline at 833-372-8311 for help filing a report.