Kings County Supreme and Family Court building in Brooklyn, New York

Fake Coinbase Representative Who Stole Nearly $16 Million Gets Up to 12 Years in Prison

By Isaac • September 24, 2026 9:22 am • Comments

A Brooklyn man who posed as a Coinbase representative and convinced users to move their crypto into wallets he controlled has been sentenced to four to 12 years in prison.

Prosecutors say Ronald Spektor stole nearly $16 million from about 100 victims in a long-running social-engineering scheme. The case is a blunt reminder that some of the biggest crypto losses do not begin with a broken blockchain or a hacked exchange.

They begin with a convincing phone call.

Trending: Solana Moves Alpenglow Into Testnet—Now the Validator Migration Has to Work

The Brooklyn District Attorney’s Office says Spektor, 23, contacted Coinbase users while pretending to be an exchange representative. He told victims their assets were at risk from a hacker and persuaded them to transfer funds into what they believed were secure replacement wallets. Spektor could access those wallets, emptied them, and moved the assets through swapping services, mixing services, and crypto gambling platforms.

The District Attorney’s office announced the sentence Wednesday.

Spektor pleaded guilty on September 2 to all 31 counts in the indictment, including first-degree money laundering, first-degree grand larceny, and first-degree criminal possession of stolen property. Brooklyn Supreme Court Justice Danny Chun imposed the indeterminate sentence over prosecutors’ objection; the District Attorney’s office had sought seven to 21 years.

The official account says the theft totaled approximately $15.94 million. Spektor must forfeit more than $500,000 in cash, cryptocurrency, and property, including a Rolex watch and a Ferrari, and pay restitution approaching the full amount stolen.

Decrypt reports that the operation used phone alerts and emails to make the approach feel legitimate. Victims were told their existing accounts were under attack and that moving funds was the safe response.

In reality, the new wallets were under Spektor’s control, and the fake support story turned a frightening security alert into an immediate, irreversible withdrawal before the user could independently verify the warning.

Decrypt also notes that investigators interviewed 70 victims and that Spektor initially pleaded not guilty after his December 2025 arrest. He later admitted the entire indictment, while prosecutors argued that the scale and duration of the scheme justified a longer sentence.

The reporting makes the mechanics especially clear: the attacker did not need a software exploit once a victim accepted the false security warning and approved the transfer.

The court also ordered forfeiture and restitution, so the sentence carries a financial judgment alongside the prison term. Recovering the full loss for every victim may be far harder than proving the criminal case.

A same-day report summarized the plea, the sentence, and the scale of the losses.

The scheme succeeded because it exploited urgency and trust. A caller who sounds like an exchange employee does not need to break an account if the victim can be persuaded to authorize the transfer. Once crypto leaves for an attacker-controlled wallet, reversing the transaction is generally not an option.

That distinction matters for Coinbase users and for the broader industry. The allegations do not describe a breach of Coinbase’s systems.

They describe impersonation, phishing, and social engineering directed at individual customers. Security tools can reduce the risk, but no legitimate exchange representative should ask a customer to move assets to a new wallet supplied during an unsolicited call.

The practical defense is simple: end the call, open the exchange’s official app or website independently, and contact support through a verified channel. Never use a link, phone number, wallet address, or recovery instruction supplied by an unexpected caller.

Hardware security keys, withdrawal allowlists, and delays on new withdrawal addresses can add useful friction when an attacker is trying to manufacture panic.

Spektor used the online handle “@lolimfeelingevil” while bragging about the proceeds, according to prosecutors. Investigators with the District Attorney’s Virtual Currency Unit interviewed more than 70 victims and followed the stolen funds through a maze of services.

The sentence closes the criminal case, but the victims’ losses show how expensive one moment of misplaced trust can become.

Featured image: Kings County Supreme and Family Court by Ajay Suresh/Wikimedia Commons, CC BY 2.0 (creativecommons.org/licenses/by/2.0/); cropped to 16:9.

Join the conversation!

We have no tolerance for comments containing violence, racism, profanity, vulgarity, doxing, or discourteous behavior. If a comment is spam, instead of replying to it please click the icon below and to the right of that comment. Thank you for partnering with us to maintain fruitful conversation.

 

Search ProCoinNews