Delivery Ruse Sparks Gunpoint Crypto Robberies

1/ Thieves in San Francisco have used fake Amazon delivery notifications to lure cryptocurrency owners to their doors, then robbing them at gunpoint for crypto wallet access and hardware devices. At least four incidents occurred between May 10 and May 15, 2026, in neighborhoods including Noe Valley, Bernal Heights, and the Richmond District. 2/ In each case, victims received texts or emails pretending to be from Amazon about a missed delivery requiring signature confirmation. The messages directed them to meet a "delivery driver" at a specified time, often late at night. Suspects arrived in unmarked vehicles, posed as couriers, then pulled guns when victims approached. 3/ Victims were forced at gunpoint to unlock phones and cryptocurrency apps, or hand over hardware wallets like Ledger or Trezor devices. One victim in Noe Valley on May 12 surrendered a phone with $150,000 in Bitcoin and Ethereum after two suspects threatened to shoot. No cash was taken; robbers focused solely on digital assets. 4/ San Francisco Police Department (SFPD) confirmed the pattern in a May 17 community alert. "These crimes target individuals known or suspected to hold cryptocurrency," SFPD Capt. Chris Canning said. Officers recovered a burner phone and fake Amazon lanyards from one getaway vehicle abandoned in the Mission District. 5/ How do robbers pick targets? SFPD believes suspects scrape public social media for crypto boasts—posts about NFTs, wallet screenshots, or blockchain conference attendance. One victim had tweeted about a $200,000 Ethereum trade days prior. Data from apps like Venmo or public blockchain explorers may also feed into target lists. 6/ This fits a national rise in crypto-specific "wrench attacks," where thieves use physical violence to seize cold wallets or seed phrases. FBI reported 69 such incidents nationwide in 2025, up from 29 in 2024, concentrated in California, Texas, and New York. San Francisco saw seven crypto robberies in April alone before this cluster. 7/ SFPD has arrested two suspects, 24-year-old Jamal Rivera and 28-year-old Tia Nguyen, after a May 16 chase in the Sunset District. They face charges of robbery, conspiracy, and firearms possession. Rivera had prior arrests for phone snatching; both allegedly scouted homes via Zillow listings. Bail set at $500,000 each. 8/ Police advise crypto holders to: verify deliveries via official apps only; never meet unsolicited couriers; store wallets offline without social proof; use multi-signature setups. SFPD launched a tip line (415-553-0123) and is linking these to 12 similar heists since March. Community meetings scheduled for May 20 in Noe Valley. 9/ Victims reported no physical injuries beyond minor bruising, but emotional toll is high—one told police, "They knew exactly what they wanted: my seed phrase." Blockchain forensics firm Chainalysis is assisting SFPD to trace stolen funds, already freezing $80,000 in a suspect-linked wallet. More arrests expected this week.