Approximately 100 Coinbase users lost nearly $16 million after being targeted by a fraud scheme in which an individual impersonated Coinbase support staff and convinced victims to transfer their cryptocurrency into wallets controlled by the attacker.
According to prosecutors, Ronald Spektor was sentenced by Brooklyn Supreme Court Justice Danny Chun to four to 12 years in prison after pleading guilty to 31 charges, including first-degree grand larceny and first-degree money laundering. Authorities estimated total losses from the scheme at approximately $15.94 million among U.S. victims.
Spektor, a 23-year-old from Sheepshead Bay, received the sentence following his guilty plea on September 2. Prosecutors had requested a longer sentence, while the court imposed the four-to-12-year term. The case also includes orders requiring the forfeiture of cash, cryptocurrency, and personal property valued at more than $500,000, along with restitution of nearly $16 million.
The fraud relied on social engineering rather than direct technical exploitation. Prosecutors said Spektor contacted Coinbase users while pretending to represent the exchange and warned them that their crypto assets were at risk from hackers. Victims were then instructed to move their funds into new wallets that they believed they controlled.
However, according to investigators, Spektor was able to access those wallets and withdraw the transferred assets. Coinbase has previously warned users that official representatives will never request customers to move funds into another wallet as part of a security process.
Investigators tracked the stolen assets through blockchain transaction records, cryptocurrency exchanges, and digital evidence. Prosecutors said the funds were repeatedly swapped and moved through different services, including platforms where assets could be converted into cash, used for gambling, or exchanged for digital goods.
The investigation also relied on digital records connecting Spektor to the wallets involved in the thefts. Prosecutors stated that his home internet address was linked to multiple wallets from which cryptocurrency was stolen, while recovered messages allegedly showed that he recruited others for social engineering activities and discussed the scheme online.
The case highlights the continued role of impersonation attacks in crypto-related fraud. Unlike traditional hacking methods, these schemes often depend on creating urgency and convincing users that they are responding to a security threat, leading them to authorize transactions themselves.
Regulators and law enforcement agencies continue to warn cryptocurrency users about fake support requests, phishing attempts, and fraudulent recovery processes. Security guidance from authorities emphasizes verifying unexpected account alerts through official communication channels before transferring assets.
Market participants may continue monitoring enforcement actions against crypto fraud operations, improvements in exchange security education, and the development of tools designed to detect suspicious transaction patterns before losses occur.
