Brooklyn crypto fraud case brings prison term over Coinbase phishing scheme

Brooklyn crypto fraud case brings prison term over Coinbase phishing scheme
Coinbase phishing scam exposed

A yearlong cryptocurrency phishing operation tied to fake Coinbase contacts has resulted in a prison sentence for a Brooklyn man after losses across the U.S. approached $16 million. Prosecutors say the scheme targeted about 100 users, with some victims losing more than $1 million each.

Highlights

  • Prosecutors sentenced Spektor to prison for posing as a Coinbase representative, tricking users into transferring cryptocurrency into wallets he controlled.
  • Stolen assets were laundered via multiple crypto exchanges, then consolidated and converted into other cryptocurrencies, cash, gift cards, or used for betting.
  • Coinbase remains a frequent phishing target, but last year's disclosure showed less than 1% of monthly users affected and no exposure of passwords, private keys, or funds.

How the scheme worked and its wider implications

According to The Block, prosecutors say Spektor posed as a Coinbase representative and warned users that their digital assets were at risk from a hacker. Victims were then persuaded to move their cryptocurrency into new wallets they believed they controlled, but that remained accessible to him.

According to prosecutors, the stolen assets were laundered through multiple swaps across different crypto exchanges before being consolidated at cash-out points. From there, the funds could be converted into other cryptocurrencies, used for betting, turned into cash or spent on gift cards and digital assets.

Investigators say transaction records, blockchain analysis, digital forensics and evidence gathered through multiple search warrants tied the activity to Spektor. His home IP address was linked to several wallets from which cryptocurrency was stolen, according to the statement.

Coinbase remains a frequent target for phishing attacks that use calls, texts, emails or lookalike websites to imitate trusted brands and extract sensitive information. Last year, the company disclosed that criminals had bribed and recruited overseas customer support agents to steal customer data for social engineering attacks, though Coinbase said the incident affected less than 1% of its monthly transacting users and did not expose passwords, private keys or customer funds.

In our earlier article on the Enforcement Directorate’s Raipur case against K.K. Srivastava, we detailed allegations that a Rs. 15 crore fraud was routed through multiple accounts and shell entities before being remitted overseas under purported commercial descriptions. The report also noted the filing of a prosecution complaint under the PMLA and the provisional attachment of assets, underscoring how investigators track layered fund flows and pursue recoveries.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.