Forged proof-of-funds PDFs on private-bank letterhead hit OTC desks and crypto prime brokers. Three structural fraud patterns and a callback-queue filter.