A Brooklyn man gets up to 12 years for $16M Coinbase phishing scheme
Regulation & Gov ·
A New York court sentenced a Brooklyn man to up to 12 years in prison for running a phishing operation that impersonated Coinbase and defrauded roughly 100 people of $16 million.
The scheme relied on social engineering rather than any technical breach of Coinbase's systems, according to reporting from CoinDesk. Victims were contacted through messages or calls designed to mimic legitimate Coinbase communications, prompting them to hand over credentials, approve transactions, or otherwise grant access that let the perpetrator drain their holdings. The tally of roughly 100 victims and the $16 million total loss were confirmed in coverage from The Block.
The case fits a broader pattern in crypto crime where attackers target the human layer of security rather than smart contract code or exchange infrastructure directly. Phishing schemes that spoof exchange branding and support channels exploit trust and urgency to bypass technical safeguards that would otherwise catch a malicious transaction. Coinbase itself has been a recurring target for this style of impersonation, a pattern tracked on Leviathan's Coinbase atlas page.
The sentencing is one of several recent prosecutions tied to large-scale social engineering operations in crypto. Separate cases in the same period include a 70-month sentence for a Newport Beach launderer who pleaded guilty as part of a $263 million crypto social engineering RICO case, and a 70-month sentence for a 22-year-old California man convicted of laundering $3.5 million tied to the same $263 million ring. Those cases, along with state-scale campaigns attributed to North Korea-linked hackers, point to social engineering displacing code exploits as the dominant vector for large crypto losses.
What remains unclear from current reporting is whether restitution has been ordered for the roughly 100 victims in the Brooklyn case, and whether additional co-conspirators face separate charges. It is also not established whether Coinbase changed any user-facing verification or support procedures in response to this specific scheme, or whether the case is connected to the larger organized social-engineering networks referenced in parallel prosecutions.