United

Edge

Read

A new scam saw bad actors impersonate Coinbase employees to dupe users out of millions of dollars worth of cryptocurrency assets. 
Tegan Kline, the co-founder of Edge &amp; Node, <a href="https://x.com/theklineventure/status/1810068252900376999" target="_blank" rel="">has warned of this new attack</a> where his “good friend” lost $1.7 million from their self-custody wallet. The victim was tricked into sharing their private key. 
The scammers contacted the victim via a call, masquerading as an employee of the crypto exchange Coinbase.&nbsp; 
Soon after, they sent an email that seemed to originate from Coinbase’s security team. In the email, the scammers identified themselves as “David Brown,” adding that the recipient was “speaking to an official” Coinbase representative. 
<figure class="wp-block-image">
 <img decoding="async" src="https://lh7-us.googleusercontent.com/docsz/AD_4nXdo1NCI7pWxg0pVjjJaZUg62Wmj4YloLIFuQgKrYJlLTeTKk5kG_dkLWhHmLL48-r1Mr16aB8kgc6wlioWBZEcEjk8WpeUMsauwskFfj3XG-eTVy-EhPxIQPTn28VYLe5L0imtAMbzDRXqNq-9bo4vnois?key=KIAM3uql25rVqKpzVS8vsQ" alt="Scammers drain $1.7m claiming to be Coinbase employees - 17">
 <figcaption class="wp-element-caption">
 Fake email sent by the scammer to the victim | Source: Tegan.eth on X
 </figcaption>
</figure> 
To seem legitimate, they informed the victim about their past transactions from Coinbase.&nbsp; 
The scammer then claimed the victim’s wallet was “connecting directly with the blockchain,” resulting in unauthorized transactions. This was followed by a subsequent email showing an outgoing transaction. 
To address this issue, the victim was redirected to a website under the scammer’s control.&nbsp; 
According to the victim, they knew the website was “not safe” but entered just a part of their key phrase but did not submit it. Despite this, $1.7 million was siphoned off the victim’s wallet.&nbsp; 
These malicious websites capture data as a user enters it, said Hiro Systems CEO Alex Miller, adding that even a part of a seed phrase is enough for them to “brute force the rest.” 
Miller added <a href="https://x.com/alexlmiller/status/1810074926478713052" target="_blank" rel="">he was targeted</a> in a similar fake Coinbase employee scam. The scammers claimed that someone was trying to access his account. 
 You might also like: <a href="https://crypto.news/crypto-scammers-stole-nearly-60m-from-20-victims-in-h1-2024-data-shows/"> Crypto scammers stole nearly $60m from 20 victims in H1 2024, data shows </a> 
The executive estimated that his email may have leaked in a 2022 data breach from CoinTracker’s email service provider database. He advised anyone using CoinTracker to “cycle [their] API keys,” which scammers leverage to verify as the victim during an attack. 
“This feels like a moderately-targeted attack. they created a look-alike email address and spoofed a phone number similar to mine but so far haven’t appeared to try and phish me or crack any of my underlying accounts,” Miller added. 
Another X user, “TraderPaul04” also <a href="https://x.com/Paul04Trader/status/1808138689345618378" target="_blank" rel="">claimed to have “thwarted”</a> a similar attack. The user received an automated call telling him that his Coinbase account was being accessed from a different location. 
He was asked to confirm the login. Following this, he received a call from “an American male” who identified as a Coinbase employee. He then received a fake password reset link, which TraderPaul04 identified <a href="https://crypto.news/trezor-comments-on-phishing-emails-sent-to-community/">as a phishing attempt</a>. 
The X user also confirmed that there were no login attempts on his account.&nbsp; 
The Coinbase brand name has been leveraged on several occasions by scammers, and it’s not just limited to employee impersonation. In May, the United States Department of Justice (DoJ) <a href="https://www.justice.gov/usao-wdnc/pr/indian-national-pleads-guilty-wire-fraud-conspiracy-stealing-over-37-million-spoofing" target="_blank" rel="">charged an individual</a> for stealing $37 million in crypto via a fake Coinbase pro website. 
Beyond Coinbase, scammers have impersonated other <a href="https://crypto.news/crypto-scammers-impersonate-binance-exec-for-210k-haul/">crypto exchanges</a>, <a href="https://crypto.news/fbi-warns-of-crypto-scams-impersonating-agency-in-el-paso/">government agencies</a>, and even <a href="https://crypto.news/spacex-giveaway-scam-floods-youtube-with-deep-fake-elon-musk/">celebrities</a>. In some cases, victims have been duped <a href="https://crypto.news/new-job-recruitment-crypto-scam-surfaces-in-india/">in the name of job interviews</a>. 
 Read more: <a href="https://crypto.news/scammers-target-crypto-exchanges-with-fake-stablecoins-on-ton/"> Scammers target crypto exchanges with fake stablecoins on TON </a>

Scammers drain $1.7m claiming to be Coinbase employees

crypto.news

Other articles published on Jul 8, 2024

Meme Coin MoonShot – MoonBag Price Skyrockets as Arweave & Cosmos Hit the Brakes

Fantom (FTM) Revenue Drops by Double Digits Despite Spike in Active Monthly Users

Bitfarms Appoints Ben Gagnon as CEO Amid Takeover Turmoil

Here’s Where the Kaspa Price Is Headed as YouTuber Releases New Updates on KAS

Broken-Out Technical Pattern: Notcoin Preparing for a Bullish Rally

Easy Way How To Turn Your $100 Into $2k With 3 Cryptocurrencies

Join our free newsletter for daily crypto updates!