Source: DefiPlanet
Original Title: Canadian Scammer Impersonates Coinbase Support, Steals $2M in Crypto
Original Link: https://defi-planet.com/2025/12/canadian-scammer-impersonates-coinbase-support-steals-2m-in-crypto/
Quick Breakdown
A Canadian known as Haby stole $2 million by posing as a certain合规平台 help desk representative over the past year.
Blockchain investigator ZachXBT exposed the fraud through wallet traces and social media posts.
Funds went to gambling, parties, and social media boasts, highlighting the risks of social engineering.
Canadian poses as platform support in $2M theft
A Canadian individual, known online as Haby or Haverd, allegedly stole over $2 million in cryptocurrency by impersonating a certain合规平台 customer support representative. Blockchain detective ZachXBT uncovered the scheme on December 29, 2025, linking the suspect to multiple victims through on-chain analysis of Bitcoin addresses, Telegram accounts, and leaked videos. The scammer contacted users claiming account issues, convinced them to grant remote computer access, and drained wallets holding BTC, ETH, XRP, and other assets. One confirmed theft involved 21,000 XRP worth $44,000, with total losses exceeding $1 million from at least five users.
Victims downloaded remote tools and shared credentials after receiving spoofed calls and emails mimicking official platform branding. ZachXBT noted the suspect’s poor operational security, including frequent Telegram name changes and public boasts about scams on social media. The platform has long warned users never to share private keys or allow remote access, confirming no legitimate staff requests such data. The exposure came amid rising social engineering attacks in crypto, which topped the list of theft methods in 2025, per industry reports.
Social engineering threats escalate in 2025
The $2 million cryptocurrency theft by a Canadian scammer impersonating platform support highlights the increasing threat of impersonation fraud targeting centralized exchanges. This surge in attacks reflects the rapid growth of platforms, which now serve over 100 million users. Authorities in the U.S. and globally report a 20-30% year-on-year increase in these cases, where attackers exploit trust in support channels.
This incident underscores the ongoing challenge of accountability for crypto crime, as well as another in May 2025, in which a 2020 platform hacker moved $42 million in BTC and taunted forensic sleuth ZachXBT. Despite this, accountability tools are proving effective, with firms like ZachXBT aiding investigations by tracing stolen funds to luxury spending and gambling sites.
In response, exchanges are implementing enhanced security measures, including mandatory two-factor authentication, AI-driven phishing detection, and more frequent user alerts. Experts also advise users to adopt hardware wallets for significant holdings and to use official apps for direct verification, mitigating the risk of future exploits.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
Canadian Scammer Impersonates Support to Steal $2M in Crypto
Source: DefiPlanet Original Title: Canadian Scammer Impersonates Coinbase Support, Steals $2M in Crypto Original Link: https://defi-planet.com/2025/12/canadian-scammer-impersonates-coinbase-support-steals-2m-in-crypto/
Quick Breakdown
Canadian poses as platform support in $2M theft
A Canadian individual, known online as Haby or Haverd, allegedly stole over $2 million in cryptocurrency by impersonating a certain合规平台 customer support representative. Blockchain detective ZachXBT uncovered the scheme on December 29, 2025, linking the suspect to multiple victims through on-chain analysis of Bitcoin addresses, Telegram accounts, and leaked videos. The scammer contacted users claiming account issues, convinced them to grant remote computer access, and drained wallets holding BTC, ETH, XRP, and other assets. One confirmed theft involved 21,000 XRP worth $44,000, with total losses exceeding $1 million from at least five users.
Victims downloaded remote tools and shared credentials after receiving spoofed calls and emails mimicking official platform branding. ZachXBT noted the suspect’s poor operational security, including frequent Telegram name changes and public boasts about scams on social media. The platform has long warned users never to share private keys or allow remote access, confirming no legitimate staff requests such data. The exposure came amid rising social engineering attacks in crypto, which topped the list of theft methods in 2025, per industry reports.
Social engineering threats escalate in 2025
The $2 million cryptocurrency theft by a Canadian scammer impersonating platform support highlights the increasing threat of impersonation fraud targeting centralized exchanges. This surge in attacks reflects the rapid growth of platforms, which now serve over 100 million users. Authorities in the U.S. and globally report a 20-30% year-on-year increase in these cases, where attackers exploit trust in support channels.
This incident underscores the ongoing challenge of accountability for crypto crime, as well as another in May 2025, in which a 2020 platform hacker moved $42 million in BTC and taunted forensic sleuth ZachXBT. Despite this, accountability tools are proving effective, with firms like ZachXBT aiding investigations by tracing stolen funds to luxury spending and gambling sites.
In response, exchanges are implementing enhanced security measures, including mandatory two-factor authentication, AI-driven phishing detection, and more frequent user alerts. Experts also advise users to adopt hardware wallets for significant holdings and to use official apps for direct verification, mitigating the risk of future exploits.