Authorities allege a sweeping crypto phishing operation that drained nearly $16 million from Coinbase users nationwide, underscoring how social engineering scams exploit trust, move funds across blockchains, and trigger aggressive enforcement by New York prosecutors.
Coinbase Security Impersonation Scheme Exposed as Authorities Claim Nearly $16M Was Siphoned

Brooklyn Prosecutors Move Against Alleged Coinbase Phishing Scheme
A major law enforcement action has highlighted growing risks tied to cryptocurrency fraud. The Brooklyn District Attorney’s Office, a New York prosecutorial agency, announced on Dec. 19 that it indicted a Brooklyn man in connection with an alleged phishing and social engineering scheme that stole nearly $16 million from Coinbase users nationwide.
“This indictment charges the defendant of operating a long-running social engineering scam that amounted to a digital robbery against scores of crypto investors across the country,” Brooklyn District Attorney Eric Gonzalez stated. Prosecutors detailed that investigators believe the defendant impersonated a Coinbase representative, contacted users directly, and falsely claimed their accounts were under threat from hackers. Authorities disclosed in the announcement:
About $105,000 in cash and approximately $400,000 in cryptocurrency were seized from the defendant in the course of the investigation and the DA’s Office is working to access more alleged stolen cryptocurrency assets.
Victims were allegedly convinced to transfer digital assets into newly created wallets that appeared secure but were secretly accessible by the defendant, who then emptied the accounts. The announcement explains that the stolen assets were routed through multiple cryptocurrency exchanges, swapping services, mixing tools, gambling platforms, and online storefronts to disguise their origin and ultimate destination.
Read more: Base App Goes Live Across 140+ Countries as Coinbase Pushes Social Trading Toward the Mainstream
Coinbase Chief Legal Officer Paul Grewal said: “We’re grateful to District Attorney Gonzalez and the Brooklyn District Attorney’s Office for their partnership and relentless work to protect victims.” He added:
In this case, Coinbase supported the investigation by helping identify the perpetrator and the customers he defrauded, providing evidence to ensure he could be charged, and assisting law enforcement efforts to trace and recover funds connected to the fraudulent phishing scheme.
“We’re committed to protecting our customers and working hand-in-hand with law enforcement to hold scammers accountable and help bring justice for those they harm,” Grewal stressed.
The defendant was identified as Ronald Spektor, 23, of Sheepshead Bay, Brooklyn, who was arraigned before Supreme Court Justice Danny Chun on a 31-count indictment charging first-degree grand larceny, first-degree money laundering, scheme to defraud and related offenses. Authorities said about 100 victims nationwide reported losses after receiving spoofed phone calls, texts, and emails using fake security alerts and employee names, with losses ranging from tens of thousands of dollars to more than $1 million across multiple states.
Prosecutors said blockchain analysis, transaction records and digital forensic evidence linked wallets used in the alleged scheme to the defendant’s home internet connection. The district attorney’s office credited cooperation from Coinbase and Flashpoint and warned that legitimate companies do not ask customers to transfer funds to “safe wallets.”
FAQ ⏰
- What did the Brooklyn DA allege in the Coinbase fraud case?
Prosecutors allege a phishing and social engineering scheme that tricked users into transferring crypto to attacker-controlled wallets. - How much money was allegedly stolen from Coinbase users?
The scheme is accused of stealing nearly $16 million from victims across the United States. - Who is the defendant charged in the Brooklyn indictment?
Authorities identified Ronald Spektor, a 23-year-old from Sheepshead Bay, Brooklyn. - How did investigators link the crypto wallets to the suspect?
Blockchain analysis and digital forensic evidence allegedly tied the wallets to the defendant’s home internet connection.













