Crypto coinbase scam
-
Almost fell for this one. Of course as you read this you'll think it was obvious since you're biased knowing the outcome, but anyway...
I have a coinbase account with my crypto in it.
Two days ago I got an automated text saying it was Coinbase and here is the 6-digit MFA code I requested. I wasn't in coinbase at the time so figured it was either spam or someone did try to get into my account but couldn't get beyond without the code. So I ignored it, figured I'd get an email or call about the account activity if it was a legit attempt to get into my account.
Then today I get a call from Coinbase saying there was suspicious activity on my account and if it wasn't me, to press 1 and a representative would call me back.
A few moments later I get a call from, yes this is semi-racist, a very, very normal sounding American/white IT dude. He said someone with a flagged IP in Carson City, NV was trying to access my account and verified I was the account owner and that it wasn't me. I said no, it wasn't me for sure.
While on the phone with him, he then sent an email (from the address info@coinbase ... and yes I noticed there it wasn't coinbase.com just coinbase, so that was my first red flag) with a very real looking email with my case number and the representative's name. Verified I received the email, which I said I see it. He then said as a Coinbase representative, he'll never ask for my account credentials or even balance. He said that coinbase will now temporarily lock my account just to be safe and sent an email with a link to their secure portal to answer a few questions to verify the account activity wasn't me.
I clicked the link for the secure portal and it opened up a url of something like 45127coinbase.com with those numbers being my case ID. The first screen had me verify the activity wasn't me (the name of the person trying, their email address, their phone number), then it went to the next page at which point (true story) I told him I was grilling dinner for my 3 kids and didn't have time right now, so he said no problem, that he would call later tonight at 9pm when I said I would be free, and we ended the call.
All is fine, mostly, so far. While I was putting my kids to bed, I opened up the coinbase app and it all seemed normal, account information, balance, etc. I changed my password successfully, and also changed from SMS code MFA to using a more secure pass key.
Around 9pm, I get the return call from the representative and I told him I was able to change everything in the app and that I'm comfortable with where things are and that I don't need his help anymore as far as I can tell. He said ok that is good and that the only thing left is to "finish setting up the new wallet so we can whitelist it and transfer your funds" (major red flag to me), so I just told him I don't think anything else is needed and he said "ok I'll mark your case as resolved and will forward this to the team" (which at this point I knew was BS).
Anyway... I googled the guy's "name" and saw this is a relatively recent coinbase scam going around that is resulting quite a few folks having their account balances stolen.
Ok, not the most exciting read and in retrospect the red flags should've been clearer, but the fact that the call, text, email all were not marked as spam, all looked very normal from coinbase (I normally can spot a spam email quickly) and that the representative sounded completely normal and not sketchy at all.... I can see how some folks fall for the scam and once the crypto is gone, it's... gone.
-
Interesting. The scammers get more and more better with their scams.
