To accept ecash offline you have to trust both the sender and the mint In the OP's case, the sender clearly cannot be trusted 😅