Coinbase (COIN) Users Lost Over $65M to Social Engineering Attacks in the Past Two Months

Crypto sleuth ZachXBT said in an X post Monday. The actual figure lost might be higher, because the amount doesn't include unreported cases, ZachXBT said.

Coinbase (COIN) users lost over $65 million to social engineering attacks in the past two months, with an estimated $300 million lost to such attacks annually, crypto sleuth ZachXBT said in an X post Monday.

The actual figure lost might be higher, because the amount doesn't include unreported cases, ZachXBT said.

Coinbase has not publicly commented on the matter. When asked for a comment, it highlighted a primer on identifying and avoiding social engineering scams posted to its blog on Monday.

Scammers utilize stolen personal data to deceive users by sending fake emails that mimic Coinbase's official communications, including false case IDs prompting users to transfer funds to scammer-controlled wallets, ZachXBT said.

“Scammers clone the Coinbase site nearly 1:1 and allow the scammers to send different prompts to the target via spoofed emails using panels,” he noted. “The two main groups conducting these scams are skids from the Com and threat actors located in India both primarily targeting US customers.”

5/ They then sent a spoofed email which appeared to be from Coinbase with a fake Case ID further gaining trust. They instructed the victim to transfer funds to a Coinbase Wallet and whitelist an address while “support” verified their accounts security. pic.twitter.com/pOTQpnMfCz

“A Coinbase employee told people on X to stop using VPNs to avoid being flagged as suspicious. Meanwhile, threat actors will explicitly block VPNs from phishing sites,” ZachXBT wrote in the now-viral post. “This shows Coinbase's failure to diagnose the actual problem.”

ZachXBT advised Coinbase to enhance security by making phone number inputs optional, creating a restricted account type for new users, and improving community education on scam prevention.

UPDATE (Feb. 4, 15:57 UTC): Adds Coinbase's blog post on the topic in third paragraph.