They say your money is at risk. Then they tell you where to move it.

This fictional playbook shows how authority, coached distrust, urgency, and cryptocurrency can form one operation—even when no individual artifact establishes who is behind it.

Immediate interruption

Pause before the withdrawal.

Do not withdraw the fictional $7,500, visit a cryptocurrency kiosk, send Bitcoin, share a receipt image, or continue the suspicious conversation.

End contact. Call the real credit union using the number on the debit card or an independently typed official website.

Observed sequence

Pressure moves toward one irreversible gate.

01
Unexpected authority contact
A caller displays the credit union’s name and claims federal authority.
02
Borrowed proof
Known first name, two account digits, and an official-looking document create credibility.
03
Coached distrust
The person is told branch staff are under investigation and must not be consulted.
04
Private-channel migration
The conversation moves from phone to encrypted messaging.
05
Deadline and liability threat
A 4:00 p.m. deadline narrows time for independent verification.
06
Cash → cryptocurrency → external wallet
The fictional $7,500 transfer is the first irreversible extraction gate.
Pause here

Bounded assessment

Highly consistent with a known scam

High confidence in the mechanism. The caller’s identity is not established.

The strongest finding is the sequence: isolation from the real institution followed by an urgent request to convert cash into cryptocurrency and send it externally.

This does not certify any person, account, site, number, or future interaction as safe.

Not established

Who controls the caller, messaging account, or wallet.
Whether the real credit-union account has suspicious activity.
Whether the described document is authentic.
Whether caller ID represents the caller’s actual origin.

Evidence ledger

What each item does—and does not—show.

All entries below are fictional or official public guidance. No real identifier appears.

On a narrow screen, scroll the evidence table horizontally.

Synthetic evidence ledger: what each item supports and does not establish
Item	Type	Supports	Does not establish
Displayed credit-union caller ID	Participant statement	The display was reported	Caller identity or origin
Urgent cash-to-crypto request	Observed synthetic fact	The payment mechanism and gate	Who controls the destination
Instruction to avoid branch staff	Observed synthetic fact	Isolation and coached distrust	Whether the real account is compromised
CFPB and FTC guidance	Official source report	Strong corroboration of the mechanism	Attribution of this fictional caller

Possible next move · forecast

Pressure may intensify if the transfer pauses.

The operator may strengthen the frozen-account or liability threat, try to remain present during the withdrawal, request a receipt or QR image, or demand another “verification” payment.

This is a protective forecast based on the observed sequence—not a fact or prediction guarantee.

Do this now

End contact. Do not withdraw or transfer anything.
Call the institution through a route you locate independently.
Preserve call logs and messages without replying.
Ask an uninvolved trusted person to stay present if the urgency is hard to break.

Official sources checked

Record lifecycle

Publication state: synthetic
First reviewed: 2026-08-12
Last reviewed: 2026-08-12
Correction history: No public corrections; synthetic V0
Responsible reviewer: Belt.works research review