Draining volume has dropped from 2024, but a new scam service tool called Vanilla has been turning investigators’ heads with $5 million stolen in three weeks.