Coinbase is now facing a lot of public attention after ZachXBT, a crypto investigator, broke out news of a shocking social engineering scam that targeted Coinbase users, taking away a whopping $300 million of losses.
Generally, scammers impersonate agents of Coinbase support to trick users into revealing sensitive information like private keys and login information. This investigation by ZachXBT took the security breach to a new extent, highlighting the increasing dangers in the crypto domain.
1/ Over the past few months I imagine you have seen many Coinbase users complain on X about their accounts suddenly being restricted.
This is the result of aggressive risk models and Coinbase’s failure to stop its users losing $300M+ per year to social engineering scams. pic.twitter.com/PjtX7vmjqc
— ZachXBT (@zachxbt) February 3, 2025
ZachXBT Uncovers The Scale Of Social Engineering
Social engineering scams have been around for a while in the crypto world. However, ZachXBT’s probe shows that scammers are using clever tactics to deceive Coinbase users. Attackers pretend to be official support staff to trick people into giving them important account information.
Image: Kaspersky
Many users have fallen for these methods. Even though Coinbase has safety nets in place, this scam shows how easily users can be tricked if they don’t know enough about these dangers.
3/ Let’s walk through how these Coinbase social engineering scams work.
A victim reached out to me last month after losing ~$850K.
Graphing out this theft lead to a consolidation address with 25+ other victims tied to ‘coinbase-hold.eth’.
Theft address… pic.twitter.com/y8dRxwlOO6
— ZachXBT (@zachxbt) February 3, 2025
$300 Million Lost To Fraud: The Scope Of The Scam
The size of this swindle is alarming. A $300 million consumer theft occurred as a result of a social engineering attack. Scammers are now skilled at taking advantage of people’s trust in cryptocurrency sites such as Coinbase.
Coinbase users reportedly lost at least $65 million to theft in just the period from December 2024 to January 2025. This amount excludes police records and Coinbase support tickets that ZachXBT was unable to get.
There are serious repercussions, and as of right now, there are no clear signs that the scam is over. More individuals may continue to fall for the trap unless there is an urgent call to action.
BTCUSD trading at $98,796 on the 24-hour chart: TradingView.com
Coinbase Response To Growing Threats And The Need For Security Enhancement
Although Coinbase has not yet disclosed its plans for the $300 million theft, the business has a history of taking the initiative to protect its consumers by releasing security upgrades on time.
With losses of such magnitude, it is clear that Coinbase will have to improvise security measures to defend against future attacks of this kind. Along with increased training of their users in spotting social engineering methods, the platform is likely to pay attention to improving security.
For now, users can protect themselves by enabling two-factor authentication and by being suspicious of unsolicited communication which are signs of a potential for fraud.
ZachXBT’s report of the scam shows just how much community involvement is needed in curbing fraudulent activities. Both users and platforms need to be on watch to protect their finances as the cryptocurrency market faces growing dangers. And the $300 million loss could only underscore the importance of having good security in place for the cryptocurrency sector.
Featured image from PYMNTS, chart from TradingView
