Daily brief — July 9, 2026
Crypto Couriers, Toll Texts & World Cup Fakes: Today's Active Scams
Three scam waves are accelerating right now — in-person cash pickups in crypto cons, a nationwide toll-text surge, and World Cup ticket spoofing — and AVASC's data lines up with federal warnings on all three.
Published July 9, 2026
Key points
- FBI: crypto investment scammers are now sending couriers to collect cash in person from victims, often seniors, after bank transfers get blocked.
- Toll-text smishing drove a 40% jump in government imposter-scam reports and contributed to $3.5 billion in 2025 imposter losses, per the FTC.
- FBI expects more spoofed FIFA/World Cup domains and fake ticket resale listings through the tournament.
- Fake 'fund recovery' outreach — including people impersonating IC3/FBI staff — continues to re-target prior scam victims.
- AVASC's database shows the same top clusters this week: pig-butchering crypto/romance cons, toll smishing, and re-victimization scams.
Crypto Romance-Investment Scams Add In-Person Cash Pickups
The FBI's Internet Crime Complaint Center issued a fresh alert warning that scammers are instructing victims, usually senior citizens, to participate in cash pickups purportedly to protect funds purchased through the scammer's cryptocurrency investment platforms, with couriers arranging to meet victims in person to retrieve the cash. The bureau explained that legitimate financial institutions increasingly deny suspicious funds transfers, so scammers tell victims that in-person cash pickups are required to keep investing or to pay purported fines to withdraw funds, sometimes claiming the account has been 'flagged.' Couriers authenticate themselves using a pre-arranged code — for example, a U.S. dollar bill serial number or a password shown to the victim. Once cash changes hands, the cycle continues: when the victim tries to withdraw perceived profits, scammers restart the loop by demanding fraudulent taxes and penalties, again via cash couriers. This matches exactly what AVASC is tracking as its top-risk cluster this period: pig-butchering crypto romance-investment scams, where AI now runs the grooming conversations at scale before funneling victims into fake trading platforms with blocked withdrawals.
Toll-Text Smishing Keeps Climbing — Now a Top Driver of Imposter Fraud
The FTC confirmed in a recent consumer alert that unpaid-toll texts have become a dominant imposter scam, noting that imposter scams have been the most-reported fraud category to the FTC for nine years running, with consumers reporting more than 1 million complaints and $3.5 billion in losses in 2025. Critically, text messages about overdue tolls contributed to a 40% increase in reports of government imposter scams. The FTC noted these bogus messages spoof real toll programs like EZ-Pass, SunPass, FasTrak and TxTag to seem more credible, and threaten late fees or registration suspension if you don't pay right away. The FCC separately confirmed the sender's number is often spoofed and that toll operators typically don't use text messages to collect on overdue accounts or use threatening language to rush customers into action. This is AVASC's single highest-volume cluster right now, and the pattern our reports show — polished, official-looking texts on look-alike payment pages — mirrors federal findings exactly.
World Cup Ticket Spoofing & Renewed 'Fund Recovery' Cons
With the 2026 World Cup underway, the FBI issued a PSA warning that cyber threat actors are conducting spoofing attacks against the FIFA website, using spoofed sites for personal information theft and monetary scams. The bureau expects additional fake domains to be created leading up to, and throughout, the 2026 World Cup — consistent with AVASC's event-ticket cluster, where fake resale listings and spoofed official sites are pushing fans toward peer-to-peer payments for tickets that never arrive. Separately, the FBI continues to warn that scammers are re-targeting people who already lost money, sometimes by claiming to have recovered the victim's lost funds or offering to assist in recovering funds — a ruse to revictimize those who have already lost money to scams. The bureau is explicit that the IC3 will not ask for payment to recover lost funds, nor will it refer a victim to a company requesting payment for recovering funds. AVASC's own fund-recovery cluster shows the same pattern hitting members of victim-support communities.
Protect yourself
- Never hand cash, cards, or crypto to a courier, stranger, or anyone claiming to represent an investment platform, bank, or government agency, no matter what code or 'authentication' they offer.
- Don't click links in unsolicited toll texts. Go directly to your toll agency's known website or app to check your account instead.
- Buy event tickets only through official, verified sellers — type the venue/league URL directly rather than clicking search ads or social media resale posts.
- Treat any unsolicited offer to 'recover' money you've already lost as a red flag — real agencies like the FBI/IC3 never charge fees or contact you this way.
- If you're pressured to act immediately — a blocked transfer, a suspended registration, a 'flagged' account — pause and verify independently before doing anything.
- Report suspicious texts, sites, or contacts to the FTC (ReportFraud.ftc.gov) and the FBI's IC3 (ic3.gov), and to AVASC so we can track the pattern.
Sources
- Scammers Use Couriers to Collect Cash in Cryptocurrency Investment Scams — FBI Internet Crime Complaint Center (IC3)
- FTC Sounds Alarm as Imposter Scams Steal $3.5 Billion — PYMNTS
- How to Spot and Avoid Toll Road Payment Scam Texts — Federal Communications Commission
- Threat Actors Spoofing FIFA Websites in Advance of the 2026 World Cup — FBI Internet Crime Complaint Center (IC3)
- FBI Warns of Scammers Impersonating the IC3 — FBI Internet Crime Complaint Center (IC3)
Think you've been targeted by a scam?
Reporting takes just a few minutes. It helps us warn others, strengthens the scam database, and connects you to recovery resources.