Richard

Core

when

<p>Trenton Richard David Johnston and Brandon Michael Tardibone have pleaded guilty in a $13 million crypto fraud case tied to fake support calls, stolen wallet access and luxury spending in Miami. The case spread quickly across crypto social channels because Johnston was linked online to the @winter handle, while Tardibone has been widely discussed as @Yelo. Federal records use their legal names.</p>
<p>The <a href="https://www.justice.gov/usao-sdfl/pr/canadian-illegal-alien-and-co-conspirator-charged-13-million-cryptocurrency-fraud" rel="noopener noreferrer nofollow">Southern District of Florida case</a> initially charged Johnston, a Canadian national, with conspiracy to commit wire fraud and conspiracy to commit money laundering. Tardibone, a Miami resident, was charged with conspiracy to commit money laundering and harboring Johnston while he was unlawfully present in the U.S. Fresh plea coverage now says both men admitted to money-laundering conspiracy charges connected to the scheme.</p>
<p>The theft centered on social engineering rather than a smart-contract exploit. Johnston and other conspirators impersonated support representatives from a major search engine and crypto-related companies to gain access to victims’ digital accounts and wallets. New reporting also identifies Google and Trezor <a href="https://cryptoadventure.com/fake-support-scams-in-crypto-how-they-funnel-you-into-losing-funds/" rel="noopener noreferrer nofollow">support impersonation</a> as part of the victim-contact flow, with one California victim losing about 185 BTC, worth roughly $13 million at the time.</p>
<h2 id="traffic-stop-exposed-the-bigger-case">Traffic Stop Exposed The Bigger Case</h2>
<p>The case did not begin with a clean blockchain investigation alone. Johnston’s crypto fraud exposure reportedly started after a March traffic stop in Miami involving a white Rolls-Royce Cullinan. People in the vehicle told officers Johnston had become wealthy through crypto scams, while the stop also involved suspected drug evidence.</p>
<p>After authorities seized Johnston’s computer, cell phone and handwritten notes, federal agents pieced together the larger scheme. The seized material reportedly included codes tied to crypto accounts, while messages recovered by investigators showed Johnston discussing the 185 BTC theft with an accomplice.</p>
<p>That detail is why the story caught so much attention online. A high-value crypto theft, a luxury-car lifestyle, suspected drug evidence, and a phone seizure all converged into a federal money-laundering case. The sequence also turns a familiar crypto security warning into a legal one: offchain mistakes can expose onchain crime.</p>
<h2 id="social-engineering-remains-the-core-risk">Social Engineering Remains The Core Risk</h2>
<p>The case fits the broader pattern of high-value crypto social engineering. Attackers do not always need to break a wallet, bridge or protocol. They can impersonate a trusted company, create urgency around a fake compromise, then pressure the victim into sharing account codes, recovery details or access pathways.</p>
<p>Crypto users have already seen this pattern across fake wallet-support messages, phishing pages, malicious approval flows and account-takeover schemes. The same risk appeared in the earlier <a href="https://cryptoadventure.com/zachxbt-identifies-18-year-old-in-alleged-19m-crypto-theft-trail/" rel="noopener noreferrer nofollow">ZachXBT-linked $19 million crypto theft trail</a>, where a 185 BTC theft, luxury spending and public online behavior became part of the wider investigation.</p>
<p>The Johnston and Tardibone pleas also reinforce why <a href="https://cryptoadventure.com/crypto-wallet-drainers-explained/" rel="noopener noreferrer nofollow">crypto wallet drainer risks</a> are not limited to malicious smart contracts. Fake support can be just as dangerous when it pushes users toward seed phrase exposure, account-code disclosure, remote access or rushed verification steps. No legitimate wallet maker, exchange, search company or support agent needs a seed phrase, private key, two-factor code or wallet recovery phrase.</p>
<h2 id="sentencing-and-recovery-still-ahead">Sentencing And Recovery Still Ahead</h2>
<p>Johnston has agreed to be removed to Canada after sentencing, while the sentencing date has not yet been announced. The reported California victim’s assets remained unrecovered in the complaint, and prosecutors previously said additional victims were still being identified.</p>
<p>The case now leaves investigators focused on sentencing, asset tracing and recovery. For crypto users, the verified facts are already concrete: fake support calls led to wallet access, about 185 BTC was stolen from one victim, seized devices helped expose the operation, and both named defendants have now pleaded guilty to money-laundering conspiracy charges tied to the $13 million scheme.</p>
<p>The post <a href="https://cryptoadventure.com/two-plead-guilty-in-13m-crypto-support-impersonation-case/" rel="noopener noreferrer nofollow">Two Plead Guilty In $13M Crypto Support Impersonation Case</a> appeared first on <a href="https://cryptoadventure.com" rel="noopener noreferrer nofollow">Crypto Adventure</a>.</p>

Two Plead Guilty In $13M Crypto Support Impersonation Case

Table of Contents

Crypto Adventure

Other articles published on Jun 11, 2026

Join our free newsletter for daily crypto updates!