How ZachXBT exposed a Coinbase impersonation scam using onchain clues
How an onchain investigator linked a Coinbase impersonation scam to $2 million in losses and why social engineering remains the real risk.
A convincing “Coinbase support” impersonation campaign was linked by onchain investigator ZachXBT to roughly $2 million in stolen crypto.
The attribution relied on corroboration across multiple signals, including onchain activity and Telegram or social media footprints rather than a single “magic” transaction.
Coinbase says its real support team will never ask for your password or 2FA codes or request that you move funds to a so-called “safe” address.