Fake Delivery Robbery Steals $11M in Crypto — A Real-World Wake-Up Call

November 28, 2025

Could a knock at your door wipe out your life savings? That is what happened in San Francisco’s Mission Dolores neighbourhood, where a thief dressed as a delivery worker entered a home early in the morning around 6:45 a.m., restrained the homeowner with duct tape.

Bitcoin price movement around the time of the reported theft. (Source: CoinMarketCap)

Police say the attacker stole a phone and a laptop; the resident also lost access to roughly $11 million in cryptocurrency. The attacker left the scene before officers arrived. No arrests have been reported, and the investigation is still active. The incident highlights the real-world risks tied to holding digital assets.

Why This Matters for Crypto Investors

This was not just the loss of physical devices; the attacker obtained access to significant digital assets. Physical attacks on crypto holders are on the rise globally, with recent cases in Canada, the U.K., and the U.S. involving home invasions and forced transfers.

In Canada, police have reported fake-courier and home-invasion schemes targeting high-value crypto holders, with victims losing significant amounts of digital assets. In the U.K., an ambush on a parked car ended with masked attackers forcing a victim to transfer more than £1 million in cryptocurrency in real time.

How the Delivery Ruse Works

Criminals favor delivery disguises because people rarely question a knock that looks routine. Early-morning visits give attackers quiet streets and the element of surprise. That setup worked in this case, allowing the suspect to get close enough to take control quickly.

Digitap Crypto Banking Revolution

What We Know and What We Don’t

What We Know

Investigators confirmed that the thief used the victim’s own devices and wallet credentials to access high-value digital assets, but police haven’t detailed how many wallets were involved.

Police also noted that the suspect fled before officers arrived, but they haven’t released details on how the victim alerted authorities. The $11 million figure is based on early information shared with local news outlets.

What We Don’t Know

Police have not shared information about the exact crypto assets involved or the wallets accessed to move the funds. No details about potential accomplices, the suspect’s identity, or whether the attacker targeted the home in advance have been released.

It remains unclear how the attacker unlocked the victim’s devices or gained access to the crypto assets. Police have not released updates on leads, recovered items, or potential surveillance footage. More details are expected as the investigation continues, and cases like this often surface again in the latest crypto news.

Security Precautions: What Investors Should Do

Data shows a steady rise in attacks targeting individual wallet holders. (Source: Chainalysis.)

Verify Who’s at the Door

The Mission Dolores robbery shows how easily a routine knock can turn into a high-stakes threat, which means crypto holders need stronger at-home defenses. Start by tightening door security.

Use a camera, intercom, or smart doorbell to verify who is outside before opening the door, especially during early hours when attackers rely on surprise. Verify delivery status through official apps instead of trusting a uniform alone. Creating a habit of screening unexpected visitors reduces the chances of giving an attacker close access.

Lock Down Devices and Limit Exposure

Device protection is just as important. Smartphones and laptops remain the fastest entry point into a digital wallet, so lock them behind strong authentication and remove sensitive previews from lock screens.

Avoid keeping trading accounts or wallet apps on the same devices used for everyday communication, browsing, or social media. A dedicated device limits how much damage a thief can do if a phone or laptop is stolen during a break-in or coercive situation.

Strengthen Wallet Storage and Recovery Practices

Long-term crypto storage should be kept offline. Hardware wallets provide insulation from both remote attacks and physical theft, especially when the hardware itself is stored away from your living space.

To avoid a single point of failure, distribute your high-value assets over several crypto wallets; store your recovery phrases somewhere inaccessible during a home invasion. These procedures complicate an attacker’s ability to simultaneously compromise everything, even if they get physical access to one device when you buy crypto online.

Conclusion: The Loss Was Digital, But The Threat Was Physical

The Mission Dolores case shows how quickly digital wealth can turn into a real-world vulnerability. The attacker didn’t need sophisticated malware or a complex exploit; he relied on proximity, surprise, and access to the victim’s devices. As more people hold meaningful amounts of crypto, these coercive, in-person tactics are becoming a bigger part of the threat landscape.

For investors, strong digital hygiene isn’t enough. Door security, controlled access to devices, and offline storage for high-value wallets now function as extensions of financial protection. Treating wallet recovery phrases, hardware wallets, and trading devices the same way you’d treat valuables in your home helps reduce the impact of an unexpected physical threat.

Criminals are increasingly targeting individual crypto holders, with a growing share of theft now coming from attacks on personal wallets instead of just major platforms. Preparing for that shift with better home-entry habits, dedicated devices, and wallet setups that can’t be compromised in a single moment is becoming essential for anyone managing significant crypto holdings.

Digitap - CRYPTO BANKING FOR EVERYONE copy

FAQs

How did the $11M theft happen?

Entering a Mission Dolores residence, a thief pretending as a deliveryman bound the occupant and stole a smartphone, a laptop, and access to cryptocurrency.

Are physical attacks on crypto investors increasing?

Reports indicate an increase in physical robberies targeting crypto holders.

What should I do right now to protect myself?

Store cryptocurrencies in offline settings, divide assets, utilize door-verification systems, and refrain from showing wealth daily that assailants may exploit.

Did the police arrest anyone yet?

As of recent reports, no arrests have been announced, and the SFPD investigation remains active with few details released so far.

Share Article

Aleena Zuberi

Aleena Zuberi

Aleena Zuberi, a crypto and Web3 writer with seven years of experience tracking the pulse of the digital asset space. I can cover everything from DeFi and NFTs to RWAs, AI-driven innovation, and major shifts in global markets and regulation. My work blends speed with accuracy, breaking down complex on-chain activity and macro trends for readers who need clear, reliable analysis. I started my writing journey in the crypto sector and have grown with the industry’s constant reinventions. Known for producing sharp, well-researched coverage that helps traders, investors, and enthusiasts make sense of an ecosystem that never stands still.