Coinbase’s Crypto Carnage: $300M Stolen Annually, $65M in Two Months

by

Coinbase, the big kahuna of crypto exchanges, has been taking some serious heat over its inability to keep the sharks at bay while simultaneously clamping down on user accounts. According to a recent report by independent blockchain investigator ZachXBT, scammers are swiping more than $300 million annually from users, and Coinbase ain’t doing much to stop these attacks.

Many customers find themselves locked out of their accounts without so much as a “howdy,” leaving them high and dry when it comes to recovering their lost funds. Coinbase user Hudson Jameson had this to say:

“With 0 warning Coinbase has restricted my account from sending any crypto… They also said they couldn’t tell me why. BUT said I am able to convert the crypto to USD and withdraw the USD??? Seems super scummy and unprofessional.”

The report notes that at least $65 million vanished from Coinbase users between December 2024 and January 2025. The real number could be even higher as these sneaky scams continue to evolve. Impersonation, phishing, and fake communications remain the primary weapons in scammers’ arsenal, making it tough for victims to realize they’re being targeted until it’s too late.

Social Engineering: The Scammers’ Secret Sauce

Many fraudsters rely on social engineering to gain access to user accounts. A common scheme involves scammers calling users from fake Coinbase support numbers, claiming that unauthorized login attempts were detected. By using stolen personal data, they build trust and convince users to share sensitive information. Coinbase has warned customers that the company will never call them.

Phishing Tactics Cost Users Millions

Another widespread scam involves fraudulent emails disguised as official Coinbase communications. These messages contain fake case IDs and links to phishing websites. Once victims enter their credentials, scammers take over their accounts and drain funds within minutes. Some fraudsters even direct users to “secure” wallets, which they control, tricking people into voluntarily transferring their assets.

“[Scammers] sent a spoofed email which appeared to be from Coinbase with a fake Case ID further gaining trust. They instructed the victim to transfer funds to a Coinbase Wallet and whitelist an address while “support” verified their accounts security,” the report noted.

ZachXBT’s investigation uncovered a darker side to these operations. Criminal groups now run Telegram channels where they sell access to phishing control panels, making it easier for new scammers to exploit users. 

“Scammers clone the Coinbase site nearly 1:1 and allow the scammers to send different prompts to the target via spoofed emails using panels,” ZachXBT said.

Coinbase’s Failure to Block Known Theft Addresses

One of the biggest concerns is Coinbase’s failure to block known theft addresses using compliance tools. Many stolen funds are sent to addresses that could be flagged, yet these transactions continue unnoticed. Victims who contact Coinbase for assistance frequently report poor customer service and unresolved complaints.

Adding to user frustration, Coinbase discourages the use of VPNs, a tool that could enhance security. Meanwhile, attackers easily bypass existing restrictions, making the platform’s approach ineffective. Critics argue that the company’s policies punish legitimate users while doing little to stop criminals from operating freely.

Source: ZachXBT

ZachXBT has called on Coinbase to implement several urgent security changes. These include removing phone numbers as a default option for account recovery, creating safer account types for elderly users, and strengthening phishing detection tools. Without action, the losses will only grow, and user trust in the platform will continue to erode.

10/ So where does the blame lie?a) For the vast majority of the time these theft addresses are not being reported at all by Coinbase in popular compliance tools even after the thefts went on for weeks. b) Multiple victims who have contacted me get stuck with useless customer…

— ZachXBT (@zachxbt) February 3, 2025

Physical Crypto Attacks on the Rise

The surge in scams is just one piece of a growing security crisis in the crypto world. Physical attacks on crypto holders have become increasingly common. Reports show that there were 18 such cases in 2023, rising to 24 in 2024, and already eight incidents in January 2025 alone. This shift highlights how criminals are moving from cyber theft to direct physical coercion.

One particularly alarming trend is the rise of “wrench attacks.” Instead of hacking into systems, criminals now use physical violence to force victims to transfer their crypto holdings. Because digital assets can be moved instantly and globally, these crimes are efficient and difficult to track.

In response to this growing threat, security firms are stepping up. AnchorWatch now offers insurance against violent Bitcoin robberies, with backing from Lloyd’s of London. The policy covers up to $100 million in losses but excludes hacking incidents and government seizures. 

Read More

2025-02-04 00:18