Secure copying files with shell metacharacters embedded in their names involves slightly more arcane escaping syntax than usual. Imagine the following file:
Well duh, you’ve got to escape that space in the middle of the name.
Hang on. Maybe quote it?
Well single quotes are the strongest type of quote.
Boo.
It turns out that the filename needs to be either escaped AND quoted or simply quoted twice.