The sender must first swap with the mint for an ecash token locked to the receiver's pubkey. The mint will not allow this token to be swapped again without a valid signature from the private key that corresponds to the receiver's pubkey. This guarantees that no one else can spend that ecash token, not even the person who created it.

Cashu can't quite do offline sending, only half offline.