Chain detective ZachXBT revealed that a social engineering scammer named Ronaldd (real name Ronald Spektor) was accused of stealing $6.5 million from a victim last month by impersonating Coinbase customer service.
The incident occurred on October 7, when the victim received a call disguised as Coinbase customer service and was induced to visit a phishing website, resulting in the theft of funds. Chain tracking shows that the stolen funds flowed to the eXch platform and were converted into LTC and dispersed to multiple service platforms.
Just a few days later, Ronaldd showed off his Ledger Live account showing $3.1 million received on October 8 through screen sharing on Discord. Further investigation found that the TON address associated with his Telegram account showed that the funds came from multiple exchanges and were associated with other Coinbase withdrawal records, further proving the possibility of his involvement in this scam.
In addition, the address that recharged to his address was associated with multiple other Coinbase withdrawals, indicating that there are more potential victims of this scam.