Two men targeted Wells Fargo customers in San Diego County, swiping their bank cards mid-withdrawal in a slick, silent, and devastatingly effective operation.
The victims never saw it coming. By the time they realized the swap had happened, their accounts had already been drained. In total, nearly $6,000 vanished in the city of Lemon Grove alone — and far more across Southern California.
This case highlights a reality the crypto community knows all too well: the most effective attacks don’t target systems — they target people.
An Old-School Scam, But Devastatingly Effective
The method is straightforward and requires zero technical skill. Sergio Romero, 40, and Franklin Florez, 31, would watch their targets from the back of the ATM queue, memorizing the PIN being entered, then move in at the moment of withdrawal to distract the victim — quietly swapping their bank card for a worthless duplicate.
According to Detective Aaron Catanach of the San Diego County Sheriff’s Department: “When the victim gets the card back in their hand, they typically don’t check to make sure it’s theirs.” That psychological detail is at the heart of the scam. The human brain, under stress or distraction, automatically fills in missing information — in this case, the identity of the card.
Both suspects were identified through surveillance cameras and license plate readers. Five victims were formally linked to the Lemon Grove incidents, with individual losses ranging from $100 to over $2,700. Two of them were elderly individuals, which resulted in Romero facing an additional charge of elder fraud.
A Network Far Larger Than Expected
The investigation quickly extended well beyond Lemon Grove. Detectives linked the two men to around fifteen similar cases across San Diego County. Wells Fargo‘s fraud teams separately identified approximately 15 additional incidents across Orange and Los Angeles counties.
The total financial damage across Southern California amounts to approximately $120,000 — twenty times the losses documented in Lemon Grove alone. A figure that reveals the true scale of an operation that looked minor from the outside.
Romero has been charged with elder fraud, robbery, identity theft, grand theft, and resisting a peace officer. Florez faces charges of robbery, identity theft, and conspiracy. Both men have pleaded not guilty.
What This Case Teaches Us About Financial Security
For the crypto community, this type of scam hits particularly close to home. The attack vector isn’t technical — it’s social engineering, the same mechanism that powers seed phrase scams, fake airdrops, and tech support fraud. The vulnerability is always human.
A few simple habits can dramatically reduce the risk: always cover the keypad when entering your PIN, never accept help from a stranger at an ATM, and physically check your card before walking away from the machine. Basic steps — but ones that distraction or rushing so often cause people to skip.
In a landscape where financial scams are growing increasingly sophisticated — from DeFi rug pulls to fake exchanges — this case is a reminder that the lowest-tech methods remain among the most profitable for fraudsters. Vigilance doesn’t stop at your crypto wallet: it starts at the ATM on the corner of your street.
