"I know how this sounds, but the email looked absolutely genuine," said Vermeulen.
"Every now and then we post pictures to Instagram for sponsors and according to the email this was in violation of Instagram's rules, therefore I was requested to change my status. However, when I clicked on the link to do so it took me to a completely different site. I immediately tried to leave but by that time it was too late."
Before he knew it the hackers had already attempted to use his PayPal account to make a number of purchases, but fortuitously the big man's wife had his login details and could get into the account and stop the thieves.
In the meantime, the hackers began to threaten Vermeulen with blackmail via WhatsApp. They had his ID number and login details for email, PayPal, Instagram and Twitter and told him they were going to take over his Whatsapp as well unless he coughed up R8900 ($765).
One of the messages was that if he attempted to block them on WhatsApp things would only get worse for him. On top of this the hackers also got onto Vermeulen's social media accounts and attempted to sell US$500 worth of Bitcoin to his over 100,000 followers.
"You know that if you pay it's not going to stop," said Vermeulen. "When I started to do some investigating I found that this had happened with a lot of people which is really bad as you tend to lose the commercial value of your followers."
Vermeulen then brought in forensic experts for help.
"I closed my Twitter account and opened a new Instagram account but I'm still busy trying to get my old accounts back under control again."
The burly 34-year-old was named man of the match after the 2019 Rugby World Cup final in Japan.
The Boks beat England 32-12 in a one-sided title decider after Eddie Jones' team had stunned the All Blacks in the semis.
This article first appeared on RugbyPass.com and is republished with permission.