The scenario that was presented to victims is that their accounts have been hacked, and so for reasons of safety, they needed to transfer whatever remaining money they had to a secure ‘vault account’.
Source: cyware.com