An elderly New York woman was working in Microsoft Excel when a security warning appeared on her computer and told her to call for help.
That call allegedly opened a month-long scheme targeting approximately $360,000 built from inherited savings, certificates of deposit, and proceeds from the sale of her parents’ home.
She later handed over $20,000 in cash and repeatedly purchased gold for people posing as federal agents.
Federal investigators intervened during the fifth gold pickup and arrested 39-year-old Didi Zou.
The Warning Appeared While She Was Using Excel
The alert instructed her to call a phone number. She called and reached a man using the name Logan, who claimed to be a Microsoft security representative.
He told her that someone was trying to access her account and complete a transaction worth approximately $22,000. Prosecutors said that supposed transaction had never gone through.
Logan nevertheless gave the woman a case number and transferred her to another caller presented as Christopher Martin from her bank’s “Cyber Fraud Division.”
Remote-Access Software Exposed Her Banking Information
Martin allegedly claimed that he also served as a liaison between the bank and the Internal Revenue Service. He told the woman that hackers had compromised her computer and that her assets needed to be moved for protection.
At his direction, she downloaded software that allowed an outside user to control her computer through a password, prosecutors said. Martin could then take over the keyboard and guide her through her online banking.
The access likely exposed account details and passwords while keeping the victim dependent on the caller’s instructions. She believed she was securing her money rather than giving outsiders control over it.
Cash and Gold Were Collected at a Coffee Shop
The scheme began May 15 when the Tonawanda resident saw an alert labeled “Microsoft Security,” according to the U.S. Attorney’s Office for the Western District of New York.
Martin told the woman to create what he described as an IRS account through her personal banking website. Her money would supposedly be transferred there until the hackers were removed. Fox Business placed their combined value at approximately $360,000.
The woman first gave $20,000 to someone presented as an IRS agent at a coffee shop near her Tonawanda home. She then made five purchases of gold coins or bullion. After each purchase, an alleged courier traveled from Flushing, New York, to collect the package.
Investigators Replaced the Fifth Gold Package
The victim eventually began working with the FBI, IRS Criminal Investigation, and New York State Police. During the fifth scheduled pickup on June 18, investigators substituted fake gold equipped with tracking devices.
Zou allegedly accepted the package and was later taken into custody following a traffic stop. His attorney described him during a detention hearing as a courier rather than an organizer, according to Fox Business.
A federal prosecutor disputed that characterization and said evidence connected him to possible pickups in New Jersey and Indiana as well as the Tonawanda operation.
A Federal Judge Ordered Zou Detained
Zou, a Chinese citizen living in New York City, was charged with conspiracy to commit money laundering and conspiracy to commit wire fraud. Each count carries a maximum possible sentence of 20 years in prison.
The maximum penalty does not mean that sentence will be imposed. U.S. Magistrate Judge Jeremiah McCarthy ordered Zou detained while the federal case proceeds.
Fox Business reported that the judge described the alleged conduct as driven by greed and carrying devastating consequences for victims. The public reporting does not clarify exactly how much of the approximately $360,000 remained lost after investigators stopped the final pickup.
No Real Agency Protects Savings Through Gold Pickups
A real technology company, bank, IRS office, Treasury official, or law enforcement agency will not tell someone to download remote-access software, create a secret “protected” account, buy gold, hand cash to a courier, or meet an unknown person at a coffee shop to safeguard savings.
Anyone who sees a pop-up claiming their computer is infected should avoid calling the number on the screen. Instead, they should close the browser, disconnect from the internet if needed, and contact a trusted technology provider or the financial institution directly through a verified phone number.
Suspected tech-support, bank-imposter, government-imposter, cash-courier, or gold-courier scams should be reported to local law enforcement, the FBI’s Internet Crime Complaint Center at IC3.gov, and the FTC at ReportFraud.ftc.gov. Victims age 60 or older can also contact the DOJ Elder Justice Hotline at 833-372-8311 for help filing a report.