Someone Opened a CashApp in Her Name. She Faces Years in Prison

Amanda Smith answered the door one afternoon in April and came face to face with the local Sheriff’s department in upstate Pennsylvania. The officers said they had a warrant for her arrest for a crime she had allegedly committed more than a thousand miles away in Arkansas.

“I was completely confused,” Smith recalled. For one, she had never been to Arkansas. Second, the warrant was for computer fraud. By her own admission, Smith was not a very tech savvy person.

She had a feeling she was being set up. After discussing with the officers the practicalities of what was about to happen — she was allowed to get her contact lenses — they took her away in handcuffs to the local jail where she spent three nights.

The reason for Smith’s arrest, she learned later, was that a scammer had tricked someone on Facebook Marketplace into sending $1,000 to a CashApp account in her name that the scammer controlled. The scammer created the account using her Social Security number and date of birth. Smith said she has never used CashApp.

What developed over the next few days, and has now stretched across six months, is a Kafkaesque situation in which Smith, in her telling, is being asked to prove her innocence in an ongoing criminal case, while CashApp refuses to provide her any information about the account because she couldn’t prove that she was the owner.

The case shows the very real danger of identity theft, how the data and tools offered to police can lead them to the wrong person, and the sprawling world of CashApp fraud, where scammers and money launderers create or compromise accounts to make and move money quickly. Along the way, ordinary people may not just lose money, but their freedom too. Smith faces up to six years in prison for the charges.

“They're trying to turn it into my problem that I need to prove that I'm innocent,” Smith told 404 Media. “That's not what I grew up believing was the way it worked.”

According to a copy of the prosecuting attorney’s affidavit form, police responded to an Arkansas address on February 4 after a report of fraud. The victim said they recently found some items for sale on Facebook Marketplace. When the victim messaged about buying the items, the seller told him to send money to his wife’s CashApp account, which he did. That account was in the name Amanda Smith and had the username $Smithy5687.

It turned out, the seller’s Facebook account was hacked. The seller wasn’t really selling the items at all, and the person had been scammed. The CashApp account was created just shortly before the scam, at the end of January.

Investigators then took the CashApp account’s username and served Block Inc., which owns CashApp, with a search warrant seeking information connected to the account. The data CashApp returned included Smith’s SSN and date of birth (CashApp requires users to provide their SSN to, ironically, protect against fraud). That led investigators to the Amanda Smith, 47, who they later arrested.

Detective Poole said he then further confirmed the information on the account by obtaining a copy of Smith’s drivers’ license and “by also running her information through Accurint.” Accurint is a tool made by LexisNexis that cops use to query public and proprietary records.

“Det [Detective] Poole sent a search warrant to Cash App. The information received from Cash App showed the account receiving the $1000 belonged to D [defendant, Amanda Smith],” the case record reads. Smith is charged with computer fraud, unlawful use of a communication device, and theft of property, according to a court filing.

“I was basically in shock,” Smith said of her three nights in the local jail. She was sleep deprived, with the lights constantly on and a guard flashing a light in her cell every hour. During that time, Smith did not actually know why she was arrested, she said. Days later she was chained and shackled and taken into court for her extradition hearing.

Her bail was set at $50,000, but Smith recalled authorities told her not to bother paying it because they intended to keep her detained to extradite to Arkansas anyway. She was released and had to make her own way to Arkansas the following week for a court appearance. Smith and her husband Josh drove, not wanting to rely on a flight’s schedule to get there, Smith said. She was nervous authorities might arrest her once again. After the hearing, authorities took Smith’s fingerprints and mugshot. After another $20,000 bail, she was free to return to Pennsylvania, but now awaits the outcome of the case. If found guilty, she could spend years in prison.

💡Do you know anything else about CashApp fraud or similar cases to this one? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

The CashApp account was made with Smith’s SSN and date of birth, but a lot of other information from the account does not line up with Smith, according to 404 Media’s review of the data produced during discovery. The Philadelphia address on it is not Smith’s or Josh’s, nor one either of them have ever lived in. They said they lived together in Philadelphia in the same ZIP code as the address on the CashApp account, but not that address, and they don’t live in Philadelphia anymore.

Smith said the phone number used to create the CashApp account is not her current number. Her husband did not remember Smith using that phone number at all, although Smith said she may have done so in the early 2000s before she switched from T-Mobile to AT&T. 404 Media did find this phone number linked to an Amanda Smith in various data breaches from years ago using data from cybersecurity company District 4 Labs.

Using data from open source intelligence company OSINT Industries, 404 Media found someone made a Venmo account using the same phone number but under another name entirely. Whoever made that account did so around a week before the scam CashApp account.

The CashApp data also shows whoever made the account used an iPhone running 16.1.1, a very out of date operating system from 2022. Smith, however, has an iPhone 13 mini with iOS 26.5.2, according to a screenshot of her device’s settings she shared with 404 Media.

The IP addresses used during the creation of the CashApp account, and during the scam itself, relate to connections from Verizon’s wireless network, 404 Media found by querying IP geolocation tools. Again, Smith is on an AT&T plan, and says she has never had a Verizon plan.

Smith said she has never used the username “smithy5687.” 404 Media found other people online using this moniker, but none appeared to be Smith.

Smith’s leading theory is that someone stole her identity, perhaps through a data breach like the National Public Data breach in December 2024, and used that information to open the CashApp account.

Smith only received this CashApp data through discovery in her case. When she contacted CashApp herself initially, “CashApp refused to provide me with any information about the account, because I couldn't prove that I was the owner,” she told 404 Media.

Smith hired a private investigator to review the case and data provided by CashApp. “I have been investigating the circumstances surrounding Amanda Smith’s case, and I believe there are legitimate questions about the evidence used to identify her as the person responsible for the alleged activity,” Max Ponte, the investigator, told 404 Media in an email. “The central issue is the distinction between identifying a person by name and establishing that the person actually operated or controlled an account. Based on my review of the available case materials, I have concerns about whether investigators sufficiently established that connection before pursuing criminal charges against Amanda.”

“I am actively trying to get Amanda's case dismissed short of a jury trial,” Jason Horton, Smith’s lawyer, told 404 Media in an email. “Amanda, Josh, and Mr. Ponte have provided significant information that supports Amanda's position that her charges should [be] dismissed, or, at the very least, should have been further investigated prior to Amanda's arrest. Although I do not comment on the specifics of pending cases, I will say I will do all I can to make sure justice is served in this case.”

CashApp did not respond to multiple requests for comment about the case and its verification procedures. Jeffrey Sams, the prosecutor in the case, did not respond to a request for comment asking if investigators took any additional steps to verify the CashApp data specifically beyond what was mentioned in the detective’s telling in court records.

CashApp is a common vehicle for scammers, fraudsters, and hackers. I’ve previously reported how hackers were breaking into and emptying CashApp accounts, with CashApp sometimes refusing to reimburse the stolen funds. On Telegram, many criminals offer CashApp related services, such as cashing out accounts.

In Smith’s case, it appears CashApp was the method not just to get $1,000 from a target, but also then to distribute the funds. Once the scam account received the $1,000, it sent small chunks of the money to a web of other accounts just hours later, according to the CashApp data. Some of those also appear to be scammer controlled; some of their usernames have changed from one name to a different one entirely.

Authorities have offered Smith a plea deal of a $1,000 fine, $1,000 restitution, various other costs like a bailiff and DNA sample fee, and three years probation. Smith said she refuses to accept it because she is innocent, and doing so would have long term negative consequences on her life.

“I was basically thinking, oh well, it’ll get dismissed,” Smith told 404 Media. That didn’t happen, and the case is progressing, with Smith feeling constantly anxious. A hearing is now scheduled for November.

Smith said, “I am just waiting and seeing.”