A courier collected 3 million rubles from a pensioner—but became the victim of an attack herself