Coinbase customers are facing a serious wave of impersonation and social-engineering scams, but that is not the same as proof that Coinbase itself is being hacked every time someone loses cryptocurrency. Coinbase disclosed a 2025 data-theft incident in which customer-related information and internal documents were obtained and later used in social-engineering attempts. The company said it paid $311.2 million during 2025 for voluntary customer reimbursements and direct legal costs connected to that incident. That figure is not a verified total of all scam losses suffered by Coinbase users, nor does it create a universal reimbursement policy.
The practical question is which event occurred: a fake Coinbase employee manipulated you into sending funds; an attacker accessed your account or related email or phone service; or an unauthorized transaction occurred without your approval. The distinction determines what evidence exists, who may be able to act, and whether reimbursement is possible.
If money is at risk right now
- Stop sending money. End the call or chat.
- Do not share a password, one-time code, recovery phrase, seed phrase, private key or remote-access code.
- Do not install remote-control software or use a phone number or link supplied by the contact.
- Open the Coinbase app yourself or type the official website address. Use Coinbase’s authenticated support route to report the incident: Coinbase account-loss guidance.
- If takeover is possible, secure your email and mobile-carrier accounts from a clean device, then change compromised passwords.
- Save messages, emails, caller numbers, wallet addresses, transaction hashes, screenshots and exact times.
What is actually happening to Coinbase users?
“A Coinbase scam” describes several different events. Treating them as one makes it harder to respond correctly.
Fake Coinbase support
An impersonator claims a withdrawal was detected, the account was hacked or the account will be frozen. The caller then instructs the customer to move assets to a “safe” wallet, read out a two-factor code, disclose a password or install remote-access software. Coinbase says it will never call or text a customer instructing them to move assets or funds to a specific destination.
#1 Best Overall
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Data-assisted social engineering
A convincing caller may know a customer’s name, partial account details, transaction history or support-ticket information. That knowledge does not authenticate the caller. Coinbase reported that an unknown threat actor obtained information about certain customer accounts and internal Coinbase documents, including customer-service and account-management materials. The company later said the information was used for social-engineering attempts. Legitimate-looking details can therefore be stolen information rather than proof that the contact is genuine.
Unauthorized account access
Some losses involve a phished password, reused credentials, a SIM swap, a compromised email account, malware, stolen authentication codes, an unauthorized API key or a malicious wallet approval. A direct compromise of a customer account is different from a customer authorizing a transfer after being deceived.
Investment, romance and “wrong-number” scams
The FBI says cryptocurrency investment fraud is usually trust-based. A criminal may build a romance or friendship, present a business opportunity, send a wrong-number message or direct a victim to a fake investment platform. The victim buys cryptocurrency on an exchange such as Coinbase and sends it to a wallet or platform controlled by the criminal. Coinbase can be the purchase on-ramp without operating the fake investment site or receiving the final funds. See the FBI’s cryptocurrency-investment-fraud guidance.
Cryptocurrency kiosks and ATMs
The FBI reported more than 13,400 cryptocurrency-kiosk complaints in 2025, with losses exceeding $388 million. A government or law-enforcement official will not demand payment through a cryptocurrency kiosk. Its warning is available at IC3’s cryptocurrency-kiosk public service announcement.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsRank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
What the 2025 Coinbase incident established
Coinbase’s May 15, 2025 filing described an incident reported as of May 14. The company said certain customer-account information and internal Coinbase documentation had been obtained. It initially estimated approximately $180 million to $400 million in remediation costs and voluntary customer reimbursements. In its 2025 Form 10-K, Coinbase said it paid $311.2 million during 2025, consisting of voluntary customer reimbursements and direct legal costs connected to the incident. The filing said passwords and private keys were not compromised as a result of the incident.
Those disclosures establish a data-theft and social-engineering risk. They do not establish that every customer loss came from a compromise of Coinbase’s trading systems, that every scam victim was reimbursed, or that $311.2 million is the total amount customers lost. An advocacy filing estimated approximately $300 million in annual Coinbase-user losses, but that is an attributed estimate, not a Coinbase-reported or regulator-confirmed total: AFREF’s filing.
How an impersonation scam typically unfolds
- A victim receives an unexpected call, text or email about a withdrawal or security alert.
- The contact appears authentic through spoofed caller ID, copied branding or accurate account details.
- The impersonator creates urgency: move funds now, verify a code or avoid an account freeze.
- The victim sends cryptocurrency, approves a transaction, reveals a recovery phrase or grants remote access.
- The criminal drains the account or wallet, then may return as a fake “recovery” service.
The method works because it combines fear, technical language, real-looking information and cryptocurrency’s rapid settlement. It is not evidence that a victim was careless.
Red flags that identify the contact as a scam
- An unsolicited call or text about a security incident.
- A demand to move funds to a wallet selected by the caller.
- A request for a password, one-time code, seed phrase or private key.
- Pressure to act immediately or threats of account closure.
- A request to install remote-access software.
- A “test” transfer or a request to send funds to Coinbase Wallet.
- Payment demanded in cryptocurrency, including through an ATM.
- An upfront fee for guaranteed recovery.
Caller ID can be spoofed. Independently open the Coinbase app or type the official domain; never authenticate a contact with a number or link supplied in the message.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
- Quality materials: these steel crypto wallets are made of 304 stainless steel with a melting point of over 2500 Fahrenheit degrees, designed and tested to be preservative, fireproof, waterproof, and impact-resistant, and can serve you for a long time
- Products quantity: you will receive a 2-in-1 set of steel bitcoin wallets with matching lock screws, and 1 piece of metal plate marking pen, which is a matching set to help you protect your codes, passwords, and further importantly, your cryptocurrency
- Functions: with these steel crypto wallets you can record information such as fieldworks passphrase in tandem with the BIP39 word list, and they are also compatible with 12 or 24-word seed in most languages, suitable to store your private cryptocurrency information or for many instances where you may need a private cold storage system
- Suitable size: the cold wallet backups are compatible with BIP39 wallets, can work with most hardware wallets, supports up to 24 mnemonics seed phrases, convenient for you to use in coordination with other crypto seed storage devices and wallets
- Multiple ways of locking: you can use the matching screws to lock up the steel bitcoin wallets; You can also lock them up and hide them in other places if you still feel unsafe; The hole on the bitcoin wallet measures 6 mm/ 0.24 inch in diameter, suitable for hanging
What to do after cryptocurrency has been sent
- Stop communicating with the scammer and do not pay a second recovery fee.
- Record the blockchain transaction hash, destination address, amount, asset and time.
- Report the loss through Coinbase’s secure account-loss process: official Coinbase guidance.
- Submit an incident to the FBI’s Internet Crime Complaint Center with transaction details.
- Report the fraud to the FTC at ReportFraud.ftc.gov and notify local law enforcement.
- If a bank account or card funded the purchase, contact the bank or card issuer immediately.
- Change compromised passwords from a clean device and secure the related email and mobile accounts.
- For a self-custody wallet, revoke malicious permissions where appropriate, but do not click suspicious links or interact with unknown contracts without understanding the risk.
- For a large loss, consider a licensed attorney or qualified digital-forensics professional.
A confirmed blockchain transfer is generally difficult or impossible to reverse. Funds can sometimes be frozen or recovered through an exchange, intermediary, court process or law-enforcement seizure, but none is guaranteed.
How to tell which kind of loss occurred
| Situation | What happened | Important evidence |
|---|---|---|
| Impersonation scam | You authorized a transfer after a fake Coinbase employee or other criminal manipulated you. | Messages, call records, instructions, wallet address and transaction hash. |
| Account compromise | An attacker accessed Coinbase, your email, phone service or authentication method. | Login alerts, device history, password-reset messages, SIM changes and unauthorized transactions. |
| Unauthorized transaction | You did not approve the transaction and did not direct it. | Account records, timestamps, device information and evidence of access. |
| Self-custody theft | You approved a malicious contract or someone obtained the recovery phrase or private key. | Wallet address, approval records, transaction hash and the site or contract involved. |
| Fake investment platform | You bought crypto on an exchange and sent it to a criminal-controlled platform or wallet. | Platform URLs, chat history, payment records and blockchain destinations. |
Will Coinbase reimburse the victim?
There is no basis to promise reimbursement for every scam. Coinbase reported voluntary customer reimbursements connected to the 2025 data-theft incident, along with direct legal costs; that disclosure is not a universal reimbursement policy. Eligibility can depend on whether the transaction was unauthorized, how authentication was used, which Coinbase product was involved, applicable customer terms, and the facts surrounding any data or employee-access issue.
When contacting Coinbase, explain precisely whether you authorized the transfer, whether a caller impersonated Coinbase, whether the exchange or Coinbase Wallet was involved, and whether your email, phone or payment account was compromised. Preserve the original evidence rather than deleting the conversation.
Exchange custody and self-custody are different risks
Exchange account
Coinbase controls custody and may have fraud monitoring, account holds, transaction records and support procedures. The trade-off is exposure to phishing, account takeover, outages, platform policies and social engineering.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Self-custody wallet
You control the private keys, so there is no exchange custodian to freeze or recover assets. Losing a seed phrase, revealing it to a scammer or approving a malicious transaction can be irreversible.
Hardware wallet
A hardware wallet can reduce exposure to online credential theft, but it does not stop a user from approving a malicious transaction or transferring assets after a fake support call. It is appropriate only for people who can manage a recovery phrase securely.
Protection measures that address the real risks
- Use a unique, long password for Coinbase and a separately secured email account.
- Use phishing-resistant authentication where available; never disclose a one-time code to anyone.
- Set a PIN with your mobile carrier and protect email-account recovery methods.
- Enable account, withdrawal and security alerts.
- Bookmark official sites or enter the address manually instead of following unsolicited links.
- Keep only the amount needed for trading on an exchange. Use self-custody for long-term holdings only if you understand key management.
- Never share a wallet recovery phrase or private key, including with someone claiming to be Coinbase support.
Why the broader numbers matter—but do not answer the Coinbase question
The FTC said consumers reported $3.5 billion in losses to imposter scams in 2025, and the FBI’s 2025 Internet Crime Report recorded nearly $21 billion in reported cyber-enabled losses. Cryptocurrency investment fraud was among the costliest categories. These are economy-wide figures, not measurements of Coinbase losses. They show the scale of the threat without proving that a particular Coinbase transaction resulted from a Coinbase-system breach.
Beware the second scam: “recovery” services
People who have already lost money are targeted again. A person claiming to be an FBI agent, FTC investigator, lawyer, exchange employee or recovery specialist may promise guaranteed recovery and demand an upfront crypto payment. The FTC warns that legitimate authorities do not require people to move money to protect it or demand payment in cryptocurrency. No private service can guarantee that a confirmed blockchain transfer will be returned.
Bottom line
Coinbase customers are dealing with a persistent impersonation problem intensified by stolen customer information and the irreversible nature of crypto transfers. Coinbase’s $311.2 million in 2025 reimbursements and legal costs relates to the disclosed data-theft incident; it is not a clean measure of all customer scam losses and does not mean every victim qualifies for payment. Stop contact, secure email and phone accounts, preserve transaction evidence, report through Coinbase, IC3, the FTC and local law enforcement, and treat anyone promising guaranteed recovery as another likely scam.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
