The voice on the phone said Grandma. The voice on the phone was a script.
A federal indictment unsealed in Vermont this week names seven more Quebec residents in a cross-border operation that allegedly drained more than $21 million from elderly Americans by impersonating their grandchildren. The call center ran like a business. The grandparents answered like family.
The phone rang on a Tuesday morning in a town outside Burlington. A woman in her seventies picked it up on the second ring because at her age you still pick up. The voice on the other end was crying.
Grandma.
That was the first word. Just that. The voice cracked on the second syllable the way a young man's voice cracks when he is scared. She said the name of her oldest grandson before the voice did, because that is how the script works. The script waits for you to fill in the blank. You do the work of identifying the caller. The script just confirms.
He had been in an accident. He was at a station somewhere. He was not supposed to be calling but he had one phone call and he used it on her because he could not bear to call his mother. There was a lawyer who would explain. Please, Grandma. Please do not tell Mom.
She believed him because she loved him. That is the whole machine in one sentence. Read it again.
I.
According to a federal indictment returned by a grand jury in the District of Vermont on November 18, 2025, and unsealed on May 7, 2026, seven residents of Quebec were arrested this week in connection with a transnational fraud operation that allegedly stole more than $21 million from elderly Americans between the summer of 2021 and June 4, 2024.
The names in the indictment, according to the U.S. Attorney's Office for the District of Vermont: Evangelos Lohaitis, 36. Mitchell Burnett-Guarna, 39. Kyle Lesser, 34. Luca Santalucia, 27. Glen Crossley, 56. Cody Jodouin-King, 28. Panagiota Fountotos, 29.
They are presumed innocent. The indictment is an allegation. If convicted, each faces up to 20 years.
These seven are not the whole machine. They are the latest visible moving parts. In March 2025, federal prosecutors charged 25 other Canadians, most from the Montreal area, in the same scheme. On May 6, 2026, one of them, Stefano Zanetti, 44, was sentenced to over 15 years in federal prison after pleading guilty to conspiracy to commit wire fraud and money laundering. Two alleged managers of the call centers, named in court records as Gareth West and Jimmy Ylimaki, remain at large.
The call center. Hold that phrase. We will come back to it.
II.
I worked phone rooms for twenty years. Different products. Same room.
A long table. A desk. A headset. A script taped to the laminate next to the phone, sometimes in a plastic sleeve so the coffee did not ruin it. A manager pacing behind the desks. A whiteboard with names and numbers. A bell, sometimes, for closes.
The product changes. Platinum. Timeshare. Magazine subscriptions. Penny stocks in companies that did not exist except as paper. The product changes and the room does not.
What the indictment describes in Vermont is a phone room. The product is grief.
The script, reconstructed from court filings and from Zanetti's plea, runs roughly like this. An opener calls an elderly target whose number was bought from a list. The opener pretends to be a grandchild in legal trouble. Car accident. Drugs found in the car that were not his. He is in jail. Please do not tell anyone, Grandma. There is a gag order.
A second voice comes on. The lawyer. The lawyer is calmer, older, authoritative. The lawyer explains the bail. The lawyer explains the courier. The lawyer explains that this needs to happen today.
A third person, in some versions, plays a court official.
The cash gets counted at a kitchen table. It is wrapped in a paper bag or an envelope. A man in a suit shows up at the front door, sometimes within an hour, holds out his hand, says the name of the grandchild, takes the package, and drives away.
That man drives to another man. That man drives the cash to a place where it gets converted. Sometimes wires. Sometimes, according to the indictment, cryptocurrency, which is a way of moving money as code across borders without using a bank, which makes it harder to follow.
The cash crosses into Canada. The grandchild who never called calls his grandmother on Sunday for their normal call and finds out she does not have any money left.
III.
The Vermont case names victims in over 40 U.S. states. The total alleged: more than $21 million. Court documents describe individual losses ranging from a few thousand dollars to figures most American households would consider their entire savings.
In a separate Calgary case, Alana Love Duncan, 48, pleaded guilty on April 10, 2026, to seven counts of fraud over $5,000 in Canadian court. According to court records, she worked as an in-person courier in the summer of 2023. One of the items she collected was a $22,000 coin collection from a 94-year-old victim.
Read that slowly. A coin collection. Probably built over decades. Probably meant for a grandchild.
A 94-year-old handed it over because she believed someone she loved was in jail and needed her.
That part may be the saddest.
IV.
Here is what makes the grandparent scam different from the boiler rooms I worked.
In a boiler room you sell to greed. The pitch is upside. The mark is reaching for something. You are exploiting the part of him that wants to be richer than he is.
In a grandparent scam you sell to love. The pitch is downside. The mark is not reaching for anything. She is responding. You are exploiting the part of her that exists to protect the people she made.
That is a harder thing to see in yourself afterward. The greedy mark can tell himself he was foolish. The grandmother cannot tell herself anything that hurts less than what already happened.
The shame is the second weapon. The first weapon got the cash. The shame keeps the family from finding out for weeks. By the time anyone reports it, the courier is gone, the cash is across the border, and the woman in the kitchen has been carrying it alone.
The U.S. Attorney's Office, in announcing the May 7 arrests, asked victims to come forward. They asked specifically because they know how many do not. Embarrassment is the operation's accomplice.
V.
The investigation is a cross-border one. Homeland Security Investigations worked the U.S. side. Canadian law enforcement worked the north end. The Vermont U.S. Attorney is the lead federal prosecutor. The cooperation is the only reason any of this surfaces.
Because the structure favors the operators. The call centers sit in one country. The victims sit in another. The cash moves through couriers and conversions designed to break the chain of custody. The cryptocurrency layer, where it appears in the indictment, exists for one reason: to make the money harder to follow once it has left the front porch.
Twenty-one million dollars, alleged. Three years. One operation. And the ones in custody, including the seven arrested this week and the 25 charged in March 2025, are described in court papers as the visible layer. The managers the indictment names are not in custody yet.
VI.
If you are reading this because someone you love picked up a phone, here is the part to keep.
The call will sound real. With voice cloning tools now widely available, the voice on the line may actually sound like the grandchild. Federal warnings issued by the FTC and AARP throughout 2025 and 2026 have flagged AI voice impersonation as the new layer on an old script.
A family safe word costs nothing. Pick one now. Tell the people in your family. If a call comes claiming an emergency, ask for it. A real grandchild will know. A script will not.
No real bail bondsman picks up cash at the door.
No real lawyer tells a grandmother to keep a gag order from her own son.
No real court takes payment in cryptocurrency.
If the call creates urgency, secrecy, and a courier, those three together are not three coincidences. They are the close.
VII.
The seven arrested this week sit in custody waiting on extradition proceedings. The indictment will be litigated. Some will plead. Some will not. Zanetti got over 15 years for the same machine.
The machine itself does not stop because seven desks emptied in Quebec. The machine is a script, a list of phone numbers, a courier network, and a money corridor. Any of those four can be rebuilt. The list can be rebought. The script can be retyped. The couriers can be replaced from the same neighborhoods. The corridor moves wherever the new bank or the new wallet sits.
Somewhere, this morning, a phone is ringing in a house in a town you have never heard of. A woman is picking up because at her age she still picks up.
The voice will say Grandma.
She will say the name first.
The script is waiting for her to.
- U.S. Attorney's Office, District of Vermont | May 7-8, 2026 | Press release announcing arrests, indictment unsealed
- Federal grand jury indictment, District of Vermont | November 18, 2025 (unsealed May 7, 2026)
- WCAX News | May 8, 2026 | "Seven Canadians arrested in connection to 'grandparent scam'"
- DOJ sentencing record, Stefano Zanetti | May 6, 2026 | Conspiracy to commit wire fraud and money laundering
- Alberta court records, Alana Love Duncan | April 10, 2026 | Seven counts of fraud over $5,000
- DOJ indictment of 25 Canadian defendants | March 2025
- Richland County Sheriff's Office statement | May 7, 2026 | Georgia inmate grandparent scam operations
- FTC and AARP fraud advisories on grandparent scams and AI voice cloning | 2025-2026
- FBI Elder Fraud Report data | 2024 figures cited
Editorial Notice
MarkTell is a true crime publication about financial fraud. Some scenes, dialogue, and sequential details are reconstructed from court filings, enforcement actions, news reports, and public records. Where the public record does not provide exact details, editorial reconstruction is used to convey the documented pattern of events. Names of private individuals may be changed to protect identity. All factual claims are sourced to public documents cited in the Evidence Trail above. MarkTell does not provide investment, legal, or financial advice. Nothing published here constitutes a recommendation to buy, sell, or avoid any investment. Allegations described in active cases have not been adjudicated and defendants are presumed innocent until proven guilty. Readers should conduct their own due diligence before making financial decisions.