Coinbase Users Hit by Fake Support Phishing — $4M Drained in One Week

A coordinated Coinbase phishing campaign drained an estimated $4 million from US victims in seven days. Scammers called users claiming suspicious activity, directed them to fake coinbase-security.com pages, and harvested 2FA codes. Some victims were coached to transfer crypto to a 'safe wallet' controlled by criminals. Coinbase warned customers that support never calls unsolicited and will never ask for seed phrases or remote screen access.