{"id":5427,"date":"2026-02-10T13:21:53","date_gmt":"2026-02-10T13:21:53","guid":{"rendered":"https:\/\/www.ripandscam.com\/blog\/?p=5427"},"modified":"2026-02-10T13:21:54","modified_gmt":"2026-02-10T13:21:54","slug":"a-single-phishing-email-six-figures-gone-how-daniel-boenke-defrauded-walz-krenzer","status":"publish","type":"post","link":"https:\/\/www.ripandscam.com\/blog\/email-scam\/a-single-phishing-email-six-figures-gone-how-daniel-boenke-defrauded-walz-krenzer\/","title":{"rendered":"A Single Phishing Email, Six Figures Gone: How Daniel Boenke Defrauded Walz & Krenzer"},"content":{"rendered":"\n

We are Walz & Krenzer<\/strong>, a manufacturing company based in Oxford that designs and builds watertight doors for the marine industry. In September, we were deliberately targeted, deceived, and financially attacked through a calculated email scam that drained more than $103,000<\/strong> from our business.<\/p>\n\n\n\n

This wasn\u2019t an accident. This was fraud.<\/p>\n\n\n\n

It began on September 15, when we received what appeared to be a legitimate email from one of our subcontractors. The message claimed there had been a change in banking information and requested updated payment details. Everything about the email looked routine \u2014 except it wasn\u2019t real.<\/p>\n\n\n\n

We now know the email was a phishing attack.<\/p>\n\n\n\n

By the time our bank flagged the transaction as suspicious, the damage was already done. When we contacted the subcontractor directly, we were told bluntly: the email was fake. It never came from them.<\/p>\n\n\n\n

Only then did we notice the detail that nearly cost us everything \u2014 the sender\u2019s email address was just slightly different from the real subcontractor\u2019s address. One small change. One massive consequence.<\/p>\n\n\n\n

Despite the bank\u2019s efforts, only $1,062.94<\/strong> could be recovered. The rest \u2014 $101,937.06<\/strong> \u2014 was gone.<\/p>\n\n\n\n

Investigators later traced the stolen money to an account connected to Daniel Boenke<\/strong>, a 70-year-old man from Gainesville, Georgia, and to an LLC he registered last year. Bank records show the full $103,000<\/strong> was deposited into that account on September 19.<\/p>\n\n\n\n

Then came the withdrawals.<\/p>\n\n\n\n

Over the next several days, the money was pulled out in chunks from multiple bank branches across Georgia \u2014 a clear attempt to move fast and avoid detection. Surveillance footage captured a man who appears to be Daniel Boenke<\/strong> making those withdrawals. Cellphone data confirmed he was physically present at the locations.<\/p>\n\n\n\n

As if that wasn\u2019t enough, investigators found that shortly after draining the account, Boenke<\/strong> accessed a Bitcoin ATM \u2014 a move police say is commonly used to launder stolen money and pass it along to other criminals.<\/p>\n\n\n\n

Phone records show Boenke<\/strong> was in contact with multiple numbers before and after the withdrawals, strongly suggesting this was not a solo operation. This was coordinated. Organized. Intentional.<\/p>\n\n\n\n

Police stated plainly that the evidence indicates the account holder knowingly received the fraudulent deposit and deliberately withdrew the funds to conceal the crime.<\/p>\n\n\n\n

Let\u2019s be clear: this wasn\u2019t a mistake. This wasn\u2019t confusion. This was theft.<\/p>\n\n\n\n

As of now, no additional arrests have been announced. Daniel Boenke<\/strong> is being held on a $125,000 bond<\/strong>, charged with first-degree larceny.<\/p>\n\n\n\n

For us, the loss is real. The disruption is real. And the anger is real.<\/p>\n\n\n\n

This scam didn\u2019t just steal money \u2014 it attacked trust, exploited routine business operations, and proved how dangerous a single deceptive email can be.<\/p>\n\n\n\n

\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

We are Walz & Krenzer, a manufacturing company based in Oxford that designs and builds watertight doors for the marine industry. In September, we were deliberately targeted, deceived, and financially attacked through a calculated email scam that drained more than $103,000 from our business. This wasn\u2019t an accident. This was fraud. It began on September […]<\/p>\n","protected":false},"author":1,"featured_media":5428,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117,259,20,3,15,115],"tags":[157,109,43,47],"class_list":["post-5427","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bank-scam","category-business-email-compromise-scam","category-business-scams","category-email-scam","category-scam","category-scammer","tag-male-scammer","tag-scam","tag-scammers","tag-scams"],"_links":{"self":[{"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/posts\/5427","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/comments?post=5427"}],"version-history":[{"count":1,"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/posts\/5427\/revisions"}],"predecessor-version":[{"id":5429,"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/posts\/5427\/revisions\/5429"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/media\/5428"}],"wp:attachment":[{"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/media?parent=5427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/categories?post=5427"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ripandscam.com\/blog\/wp-json\/wp\/v2\/tags?post=5427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}