It is more likely that something "tainted" your contractor binance address. He might be able to track back to what scam he is linked to by following the transactions on the mempool.

Maybe binance consolidated him with a scammer account 🤷‍♂️, this is very possible if he is using it to sell bitcoins, since a lot of scammers use binance to "cashout" to their shitcoin money laundering schemes, somehow.
Cashapp algorithm is too sensitive or doesn't know binance is an exchange, likely.

I suspect boltz can help break this link, then he might be able to generate a new binance address, i don't remember if you can do that in binance.