Background: Pick-up service cash deposits increase convenience but expose customers to risks of manipulation during cash handover, transaction recording, and account crediting. The issue does not arise from a complete regulatory void; rather, existing banking, consumer-protection, anti-fraud, contractual, and governance rules do not specifically integrate the risk allocation and evidentiary safeguards required for this service. Objective: This study analyzes when irregularities in pick-up service cash transactions constitute banking crimes or general crimes and formulates a customer-protection model. Methods: Normative legal research was conducted through statutory and conceptual analysis of banking, consumer-protection, anti-fraud, and related legal materials. One interview concerning supervisory practices was used solely as supporting contextual material and analyzed descriptively to identify operational vulnerability points; it did not alter the normative research design. Results: Manipulation of bank records, bookkeeping, documents, or transaction data by legally specified banking actors may fall within applicable banking-crime provisions, whereas the appropriation of entrusted funds or the use of deceit without such manipulation is assessed under applicable general criminal law. Internal fraud is treated as a governance and risk classification rather than as an independent offense. The study identifies eight operational vulnerability points, from scheduling to complaint handling, and proposes four protection layers: contractual, operational, institutional, and recovery protection. Conclusion: The Layered Customer Protection Model is proposed as a normative framework to strengthen legal certainty, evidentiary protection, internal controls, complaint handling, and pathways for customer recovery, subject to implementation and further empirical evaluation.