$16M Stolen, 100 Victims, 1 Fake Coinbase Rep: Brooklyn Man Gets 12 Years
A Brooklyn man will spend the next 12 years in federal prison after convincing roughly 100 Americans to hand over a combined $16 million in crypto, all because they believed their Coinbase accounts had been compromised.
The Con Was Brutally Simple
The fraudster did not need a sophisticated exploit or a zero-day vulnerability. He needed a phone, a script, and a convincing story. Posing as a Coinbase support representative, he contacted victims across the United States and told them their accounts had been hacked. The fix, he explained, was simple: transfer your funds to a secure wallet he controlled.
About 100 people believed him. That is not a glitch in the system. That is a masterclass in social engineering, and it worked at scale.
Why This Hit So Hard
Phishing attacks targeting crypto holders are nothing new, but the size and reach of this operation demand attention. A single individual, running what amounts to a call-center scam out of Brooklyn, managed to extract $16 million from victims spread across an entire country. No smart contract exploit. No bridge hack. Just a voice on the phone and a sense of urgency.
This is the threat vector most crypto security conversations ignore. The community obsesses over wallet hygiene, seed phrase storage, and hardware devices, but a confident caller claiming to be from customer support bypasses all of it. Victims were not careless. They were manipulated.
The Coinbase Angle Matters
Coinbase is the most recognized crypto brand among retail investors in the United States. That recognition is exactly what made it the perfect disguise. The more mainstream crypto becomes, the more valuable that brand trust is to fraudsters. Scammers do not target obscure protocols. They target the names people already trust.
With Coinbase now a publicly traded company and actively courting first-time crypto buyers, its user base is increasingly populated by people who have never thought deeply about how to verify who they are actually talking to.
What Crypto Holders Should Do Right Now
Coinbase will never call you unsolicited and ask you to move funds. Neither will any other legitimate exchange. If someone contacts you claiming your account has been compromised, hang up and go directly to the official website to check your account status independently.
Watch for escalating urgency in any communication about your crypto holdings. That pressure is the product. The moment someone makes you feel like you need to act immediately to protect your funds, slow down. That feeling is the scam.
The sentence here sends a signal, but 12 years will not stop the next version of this scheme. Your best defense is knowing it exists.