Fake Coinbase support scammer jailed up to 12 years for $16M
A 23-year-old from Brooklyn posed as Coinbase support and tricked about 100 users into moving nearly $16M. The same trick is used against Indian investors.
A man who pretended to be Coinbase customer support will spend up to 12 years in prison. Ronald Spektor, 23, of Brooklyn, stole close to $16 million from roughly 100 Coinbase users around the United States, according to the announcement from Brooklyn District Attorney Eric Gonzalez.
Gonzalez described the case as "a brazen, long-running social engineering scam that amounted to a digital robbery."
No hack, just persuasion
What makes the case instructive is that no system was breached. Every dollar moved because the victims were convinced to send it themselves. This is called social engineering, and it is one of the most common ways ordinary investors lose crypto. Once coins leave your control, getting them back is unusual. These victims were awarded restitution, but only at the end of a criminal case that ran for well over a year.
The script he used
Spektor's approach was simple. He reached out to victims posing as a Coinbase representative and warned them that their accounts had been hacked. He then talked them into sending their crypto to "safe" accounts, which were in fact under his control. The fraud went on for more than a year.
To hide the money, he moved it through several exchanges, swapped it into other cryptocurrencies, placed bets, and cashed some of it out to buy gift cards and still more digital assets. Spektor pleaded guilty. As well as the prison term, the court ordered him to repay nearly $16 million in restitution and to forfeit over $500,000 in cash, crypto and personal property.
The same trick in India
Indian investors see this playbook all the time: phone calls or WhatsApp and Telegram accounts claiming to be exchange support, fake "KYC update" links, and alarming messages saying your account has been compromised. A handful of rules will stop almost all of these attempts:
- A real exchange will never tell you to move funds to a "safe wallet", ask for your OTP, seed phrase or password, or ask you to install a screen-sharing app.
- Reach support only through the official app or a website address you type yourself, never through a phone number or link someone sends you.
- Take your time. Pressure is the scammer's biggest weapon. End the call and check your account directly.
- Report quickly. In India, ring the cybercrime helpline 1930 or file a complaint at cybercrime.gov.in, and alert your exchange straight away.
For a longer list of warning signs, see how to spot and avoid crypto scams in India. It also makes sense to keep long-term holdings in storage you control, as explained in hot vs cold wallets explained, and to confirm your platform is registered using our exchanges directory.
This report is for information only and is not legal or investment advice.
This article is AI-assisted, educational and general in nature. It is not financial advice and never a guarantee of profit. Every trade is at your own risk on your own exchange. See our risk disclosure and editorial policy.