Coinbase users have lost more than $46 million to phishing scams in just two weeks, as rising crypto prices continue to attract cybercriminals.
Fraud tactics like address poisoning and wallet spoofing deceive victims into transferring funds to addresses that closely mimic legitimate ones.
Blockchain investigator ZachXBT reports that multiple Coinbase wallets were targeted, with a single theft involving 400 BTC—valued at $81,464 per coin—marking one of the largest known incidents.
A screenshot from blockchain explorer Blockchair suggests the staggering loss originated from a single compromised wallet.
In a Telegram post, ZachXBT noted:
“It is suspected a Coinbase user was scammed yesterday for $34.9M (400.099 BTC). After uncovering this theft I noticed multiple other suspected thefts from Coinbase users in the past two weeks bringing the total stolen this month to $46M+.”
Jaclyn Sales, Coinbase’s director of communications, confirmed the company is investigating the claims.
She reiterated that Coinbase will never request login credentials, API keys, or two-factor authentication codes, warning users to stay vigilant against impersonation attempts.
She said:
“We are aware of ZachXTB’s claims and are investigating. Coinbase will never call you or ask for your login credentials, API key or two-factor authentication codes. We will also never ask you to transfer funds. If someone contacts you claiming to be from Coinbase and requests this information or asks you to transfer assets, do not do it. It is a scam.”
Scammers frequently impersonate major global brands to exploit consumer trust, using tactics like address poisoning and wallet spoofing to trick victims into transferring funds to fraudulent addresses.
While Coinbase remains the most impersonated brand in the crypto space, Meta saw over 25 times as many impersonation attempts as the exchange, according to a June 2024 report.
As the world’s third-largest centralised cryptocurrency exchange (CEX), Coinbase handles over $1.6 billion in daily trading volume, making it a prime target.
ZachXBT reported that between December 2024 and January 2025 alone, Coinbase users lost more than $65 million to phishing scams.
It noted:
“Our number is likely much lower than the actual amount stolen as our data was limited to my DMs and thefts we discovered on-chain which does not account for Coinbase support tickets and police reports we do not have access to.”
To mitigate risks, Coinbase advises users in February blog post, to enhance security by enabling two-factor authentication, using a dedicated email account, setting up an address allowlist, and leveraging Coinbase Vault for additional protection.
With scams becoming more sophisticated, will these measures be enough to curb mounting losses?
RevolutApp introduces $BONK incentive programme to educate users about crypto, pending DAO Council approval. The initiative aims to make crypto learning fun and accessible, highlighting the community-driven nature of the Solana ecosystem.
JoyPushd (PUSHD) has attracted significant investment from an anonymous investor, offering tokens at a competitive price in its presale stage, fueling speculation of a potential 20x increase and highlighting its promise in the crypto market as a decentralised peer-to-peer marketplace.
WeatherlyThe potential for AI cooperation between the US and China is hampered by underlying distrust and competition, particularly in military applications and content transparency. Despite efforts to establish common ground, challenges persist, highlighting the need for concerted efforts to address geopolitical tensions and foster mutual understanding.
WeiliangBitcoin hits $50k, bringing profits for investors, while Cardano whales explore Rebel Satoshi for new opportunities, presenting a promising investment frontier with its innovative features and strong community support.
MiyukiWorldcoin's token value surged after launching Sora, an AI model for video generation. The project aims to provide global identity inclusion through blockchain, facing competition and privacy concerns amidst its rapid growth.
WeatherlyConfusion arose on Gate.io when Binance listed $PIXEL, leading to concerns about potential intentional deception due to similarities with PixelVerse's token name. Investors should exercise caution and conduct thorough research amidst uncertainties surrounding Gate.io's listing practices and PixelVerse's credibility.
WeatherlyDogecoin's acceptance for pizza purchases with a 25% discount at a NYC pizzeria showcases its growing utility and mainstream appeal, reflecting a broader trend of cryptocurrency adoption in everyday transactions. Despite its origins as a joke, Dogecoin's community-driven enthusiasm, celebrity endorsements like Elon Musk's, and real-world applications beyond food and retail suggest its potential to revolutionise various industries.
MiyukiFerrari now accepts Dogecoin for purchasing luxury cars in the US, marking a milestone in cryptocurrency's mainstream adoption. This move reflects a growing trend of businesses adapting to consumer demand for digital payment options, with Dogecoin gaining traction beyond its meme origins.
WeiliangCircle has decided to stop supporting USDC on the TRON blockchain due to risk management concerns, possibly influenced by allegations of TRON's involvement in terrorism financing. Despite this, TRON's cryptocurrency, TRX, continues to perform well in the market.
MiyukiCircle discontinues USDC on Tron, citing risk management, impacting USDC holders and Tron's DeFi ecosystem. Options for transfer to supported networks provided amidst regulatory concerns and strategic shifts.
Alex