BEWARE Of This Coinbase Themed Scam

July 10, 2023 12:10 pm Comments

In what is being described as the most complex crypto scam users have ever encountered, scammers are using Coinbase’s domain name and likeness to steal funds from users.

According to those accounts, the scammers have infiltrated Coinbase user data and are sending complex support messages from Coinbase in an effort to drain user accounts.

If you or someone you know receives messages from Coinbase—even one that seems legit—ignore the messages.

While we are at it, this is a reminder to never keep your coins, tokens, or other digital assets on an exchange. Always have custody of your own crypto.

Multiple outlets and users shared their experiences:

Veteran trader and entrepreneur Jacob Canfield shared his experience with the Coinbase scammers:

“I just got attacked with one of the most complex scams in crypto that I have seen to date. Please read if you use Coinbase. This just happened 15 minutes ago. THIS IS A WARNING FOR ALL COINBASE USERS!

There has been some sort of a data breach. First, I received a text message saying that my coinbase
2FA was changed.

I then received three calls from a Coinbase “customer support” that was from a San Fransisco number asking if I was traveling outside of the US and if I requested an email change and a 2FA change. (NOTE: I tried to record this, but couldn’t find my wife’s phone before they hung up)

I said no to traveling and they said that they cancelled the 2FA and email change request and sent a text to verify it was cancelled.

They then sent me to the ‘security’ team to verify my account to avoid a 48 hour suspension.

They had my name, my email and my location and sent a ‘verification code’ email from [email protected] to my personal email.

I told them that I didn’t need their assistance and I changed the password already and he told me that it wouldn’t work to verify the account and that they would be locking it down for 7 days due to a lack of verification unless I provided the code.

He then got angry and hung up the phone on me after I told him that I wouldn’t provide the code.

After the first text, I immediately logged into my Coinbase and changed the password and 2FA and caught on that it was a scam almost immediately, but I doubt that 98-99% of people that get this would realize it and would have unlocked their Coinbase accounts.

For those unaware, the code they sent was my actual 2FA, but they sent it from their own email and were logging into my account to drain it while we were on the phone.

Attached are the texts, phone calls and email from the scammers. Like and retweet to spread awareness please. Thanks.”

 

Coin Telegraph reported one user’s account:

The fraudster contacted Mason using a real phone number, then triggered an email from a Coinbase.com domain, followed by a phishing text message directing him to a Coinbase subdomain URL, before verifying Mason’s address, social security number and driver’s license number.

As Mason notes, the scammer was well-spoken and a native English speaker.

 

 

Crypto News reminded readers:

As per a blog on Coinbase website, the exchange’s staff will never ask users for passwords or two-step verification codes and won’t request remote access to devices.

Join the conversation!

We have no tolerance for comments containing violence, racism, profanity, vulgarity, doxing, or discourteous behavior. If a comment is spam, instead of replying to it please click the icon below and to the right of that comment. Thank you for partnering with us to maintain fruitful conversation.