At least three Coinbase users and one crypto user have reported being targeted by Coinbase-impersonating scammers in the past week, with one victim claiming to have been swindled out of $1.7 million.
Edge &amp; Node co-founder Tegan Kline <a href="https://x.com/theklineventure/status/1810068252900376999" target="_blank" rel="noopener nofollow">shared</a> to X on July 7 an explainer from a “good friend” who had their self-custody wallet drained of $1.7 million a day prior after a scammer tricked them into sharing part of their <a href="https://cointelegraph.com/learn/public-key-vs-private-key">seed phrase</a>.
The victim said the scammer called claiming they were from Coinbase’s security team and sent the victim <a href="https://cointelegraph.com/news/ethereum-foundation-email-hacked-fake-lido-staking-phishing-scam">an email that appeared</a> to be from Coinbase that verified the victim was “speaking to an official representative at Coinbase.”
The scammer claimed the victim’s wallet was “connecting directly with the blockchain,” causing transactions to come out of the wallet. The scammer then sent another email, which appeared to be from Coinbase and showed an outgoing transaction.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/88e3ca82-361f-4ac9-8f24-7769ab85a0fc.jpg" alt="Coinbase-posing scammers steal $1.7M from a user amid a string of attacks" title="">
 <figcaption style="text-align: center;">
 Part of the victim’s explainer of the scam. Source: Tegan Kline
 </figcaption>
</figure>
The scammer directed the victim to a website to enter their seed phrase to stop the transactions, which the victim knew was “not safe” but entered “a portion” of their phrase anyway, without submitting it.
Hours later, $1.7 million was drained from their wallet, they claimed.
Hiro Systems CEO Alex Miller <a href="https://x.com/alexlmiller/status/1810103837182874007" target="_blank" rel="noopener nofollow">wrote</a> that such websites “are capturing data as you enter it” even without submitting it, and the victim’s partial reveal of their seed phrase was likely enough for “the bad guys [to] brute force the rest.”
Miller <a href="https://x.com/alexlmiller/status/1810074926478713052" target="_blank" rel="noopener nofollow">shared</a> that he was also recently contacted by a scammer pretending to be from Coinbase using a similar scam. He believes his information may have been <a href="https://www.cointracker.io/blog/sendgrid-data-breach" target="_blank" rel="noopener nofollow">leaked</a> in 2022 from CoinTracker’s email service provider database.
“Specifically, they were using the Coinbase API key connecting to CoinTracker to verify that they were me (in addition to other info),” he said. “At the very least cycle your API keys if you have been using CoinTracker,” Miller advised.
Related: <a href="https://cointelegraph.com/news/pink-drainer-hit-with-address-poisoning-scam">Karma served — Pink Drainer gets hit with address poisoning scam</a>
On July 3, X user “TraderPaul04”&nbsp;<a href="https://x.com/Paul04Trader/status/1808138689345618378" target="_blank" rel="noopener nofollow">shared</a> what they called a “pretty sophisticated” similar <a href="https://cointelegraph.com/news/coinstats-hack-social-engineering-attack">social engineering attempt</a> by a fake Coinbase rep who called them claiming there was a login attempt on their account from a different city.
TraderPaul said “an American male claiming to be a Coinbase employee” stated their full name and confirmed their email before claiming to have temporarily locked their Coinbase account, sending a fake password reset link with the aim of nabbing their account password.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/6613ad7e-e07b-4d5f-8e55-e8a0b6821535.png" alt="Coinbase-posing scammers steal $1.7M from a user amid a string of attacks" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/Paul04Trader/status/1808138698275320011" target="_blank" rel="noopener nofollow">TraderPaul04</a>
 </figcaption>
</figure>
TraderPaul wasn’t convinced and insisted on calling Coinbase customer service directly, adding the scammer “hung up” after failing to convince him not to.
On July 7, X user “beanx”&nbsp;<a href="https://x.com/beanxdefi/status/1810030089393861004" target="_blank" rel="noopener nofollow">posted</a> they also had a similar scam call with a fake Coinbase rep claiming “someone attempted to login to my Coinbase.”
Cointelegraph contacted Coinbase for comment but did not receive an immediate response.
Around <a href="https://cointelegraph.com/news/certik-report-crypto-losses-h1-2024">$1.19 billion was lost</a> to crypto security incidents in the first half of 2024, with over $900 million stolen through <a href="https://cointelegraph.com/learn/what-is-a-phishing-attack-in-crypto-and-how-to-prevent-it">phishing</a> and seed phrase compromise attacks.
AI Eye: <a href="https://cointelegraph.com/magazine/apple-intelligence-1m-arc-prize-agi-500k-ai-millionaires-ai-eye/">$1M bet ChatGPT won’t lead to AGI, Apple’s intelligent AI use, AI millionaires surge</a>

Coinbase-posing scammers steal $1.7M from a user amid a string of attacks

Cointelegraph

Other articles published on Jul 8, 2024

Unlocking the Benefits of Holding Thorecoin

iGaming Platform BC.GAME Signs $40 Million Deal to Become Principal Partner of Leicester City

Shiba Inu’s Burn Rate and Market Value Surge

Bitcoin MVRV Turns Negative First Time Since March 2023, End of Bull Run Soon?

Amidst Crypto Uncertainty: BlockDAG Presale Promises A 1400% Surge, As Ethereum And Litecoin Wres...

TeraWulf chooses BTC mining profitability over expansion in M&A

Join our free newsletter for daily crypto updates!