Courier-Involved Fraud Cases Surge 34% in St. Petersburg Region

Authorities in St. Petersburg and Leningrad region report a 34% increase in courier-related fraud cases year-over-year. Criminal schemes involve multiple participants moving stolen cash through couriers, money mules, and cryptocurrency exchanges. Scammers use multi-stage deception targeting personal data, impersonating government officials, and leveraging deepfakes and phishing links to facilitate theft and extortion.

Overview of the Fraud Scheme

Criminal groups in the St. Petersburg region are executing organized fraud operations that involve deception and multi-stage money laundering. From January to September 2024, approximately 3,000 telephone fraud cases were submitted to courts, with 657 individuals functioning as couriers. The number of courier-involved cases increased by 34% compared to the same period the previous year, with Leningrad region experiencing a 190% surge.

How the Typical Scam Works

The fraud typically begins with a call unrelated to money. Victims are informed about package delivery, intercom replacement, or other household services and asked to provide an SMS code. Occasionally, scammers attempt to collect passport data or SNILS (Russian social security number).

Next, a second perpetrator poses as a Gosuslugi (government portal) support representative and claims the victim's account has been hacked. The victim is told that criminals used their information to create a power of attorney or commit illegal acts. They are threatened with criminal prosecution if they don't comply with further instructions.

Law enforcement impersonators then join the conversation, appearing in uniform via video call with state symbols visible in the background. To appear credible, they read Criminal Code provisions, demand secrecy about the investigation, and forbid the victim from discussing the calls with relatives.

Scammers then pressure the victim to withdraw money and hand it to a courier for "verification" or transfer it to a "safe account." If savings are insufficient, victims are persuaded to take loans, sell vehicles, or sell property. Fake banking interfaces, video calls, and deepfakes (voice or image manipulation) may be used to enhance credibility.

Money Movement and Laundering

Criminals use multiple methods to move stolen funds:

Couriers: Hired individuals who physically collect cash from victims
Droppers: Money mules who provide bank accounts or cards to receive and forward stolen money. Offers for this "side work" are distributed through messengers, social media, and job listings
Cryptocurrency exchanges: Stolen cash is converted to cryptocurrency through exchanges, with funds directed to wallets controlled by organizers
Pawn shops: Stolen jewelry and valuables are sold to convert assets to cash
Phishing links: Job seekers and classified site users receive phishing links that may lead to fake login pages or malware-infected sites

Victims Forced to Become Perpetrators ("Biodroppers")

In some cases, the victim becomes an unwilling courier. Police use the term "biodropper" for individuals initially defrauded, then coerced into performing criminal errands under duress. Contact may be maintained for months, with promises to return stolen money or offers of important assignments. Victims are sent to other victims' addresses to collect cash. Such coercion has lasted up to six months.

Targeting Minors and the Elderly

Minors: Teenagers are recruited through Telegram and job boards with promises of quick earnings. Scammers initially request location information, then provide an address to pick up packages or envelopes. If the teenager hesitates or refuses, threats escalate—fake documents from law enforcement claiming the minor is involved in terrorism financing are sent. Criminal prosecution threats against the minor and family are used to force compliance.

Elderly Victims: They are isolated by being told not to speak with relatives or answer outside calls, only following a fake investigator's or bank representative's instructions. Relatives often discover the fraud only after money has been transferred.

Warning Signs

Unexpected calls about deliveries, services, or account issues
Requests for SMS codes, passport data, or personal identification numbers
Callers claiming to be government or bank officials demanding secrecy and isolation from family
Video calls showing uniformed officials with state symbols
Demands to withdraw money, access accounts, or open new "safe accounts"
Threats of criminal prosecution, asset seizure, or family involvement
Pressure to obtain loans, sell property, or take other drastic financial actions
Messages offering jobs for collecting and transferring packages

Prevention Tips

Verify independently: Always independently contact banks or government agencies using official contact numbers from their websites. Never use numbers from the caller.
Never share personal data: Authorities do not request SMS codes, passport numbers, or social security numbers through messaging or calls. Such information remains confidential.
Be cautious of job offers: Fake job listings on messaging apps and classified sites often lead to courier or money-mule recruitment.
Hang up on suspicious calls: End calls immediately if you hear threats, coercion, or demands for financial transfers. Government and banking officials do not communicate sensitive matters through personal calls or messaging apps.
Discuss with trusted people: Fraud depends on secrecy and isolation. Always discuss suspicious situations with family or trusted contacts.
Avoid clicking unfamiliar links: Links in job postings, classified ads, and social media may lead to phishing pages or malware. Don't click without verification.
Use cybersecurity tools: Install and regularly update antivirus software and use strong passwords.

Where to Report

Russian Police Hotline: Contact local law enforcement at official numbers found on Russian police websites
Bank Fraud Department: Report suspicious transactions directly to your bank
Government Cybercrime Services: Report to official Russian cybercrime reporting portals
Family and trusted contacts: Report unusual behavior or requests to family members immediately