Coinbase said it would review reimbursement for eligible retail customers who sent funds to the scammer as a direct result of its May 2025 data breach. The often-cited “up to $400 million” was not a customer-payment pool or an individual claim limit: it was the upper end of Coinbase’s preliminary estimate for combined remediation expenses and voluntary customer reimbursements.
Who may qualify for Coinbase breach reimbursement?
Coinbase’s May 15, 2025 statement said it would voluntarily reimburse retail customers who mistakenly sent funds to the scammer as a direct result of the incident, after reviewing the facts. The statement specified transfers made before the post was published. Coinbase’s SEC filing described the commitment as applying to eligible retail customers who previously sent funds to the threat actor as a direct result of the incident.
This is a narrow incident-specific commitment, not a promise to reimburse every crypto loss, every scam, or transfers made after the stated date. Coinbase did not publish a universal decision for any individual claim. Its statement said:
“Coinbase will voluntarily reimburse retail customers who mistakenly sent funds to the scammer as a direct result of this incident prior to the date of this post, following a review to confirm the facts.”
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.#1 Best Overall
Sale
Ledger Nano X - Classic Crypto Wallet with Bluetooth
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
For a claim, contact Coinbase through its official support channels and explain how the transfer relates to the incident. Do not rely on an unsolicited call, message, or link claiming to process reimbursement.
What does the $400 million figure mean?
In its May 2025 Form 8-K, Coinbase Global, Inc. estimated approximately $180 million to $400 million in expenses related to remediation and voluntary customer reimbursements. The company said this preliminary range reflected information available at the time; facts were still evolving, and further review of losses, indemnification claims, and recoveries could meaningfully increase or decrease it. Coinbase’s SEC filing
The range is a company-level estimate covering two categories of expense. It is not a $400 million fund reserved entirely for customers, nor a maximum payment available to one person. The filing did not establish a total customer payout or an individual reimbursement cap.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Coinbase also said it would not pay the attackers’ $20 million ransom demand and would establish a separate $20 million reward fund for information leading to their arrest and conviction. Those figures are distinct from the reimbursement estimate. Coinbase’s May 15, 2025 incident statement
What happened in the Coinbase data breach?
Coinbase said it received an extortion email on May 11, 2025, from an unknown threat actor claiming to have customer-account information and internal documents. The company said its investigation found that support-role contractors or employees outside the United States had been paid to collect information from internal systems they could access for work. Coinbase said security monitoring had independently detected access without a business need in earlier months, and that it linked the instances to a single campaign after assessing the email.
In its May 15 statement, Coinbase said criminals used cash offers to persuade a small group of overseas support insiders to copy customer-support data affecting less than 1% of its monthly transacting users. The alleged aim was to impersonate Coinbase and trick customers into transferring cryptocurrency. Coinbase said it fired the personnel involved, increased fraud monitoring, notified users whose information may have been accessed, declined to pay the ransom, and cooperated with law enforcement. Coinbase’s May 15, 2025 incident statement
Rank #3
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
What customer information was accessed?
Coinbase’s SEC filing said information accessed included the following categories. The company described its review as ongoing; the list does not establish that every affected account had every listed field exposed.
- Names, addresses, phone numbers, and email addresses
- The last four digits of Social Security numbers
- Masked bank-account numbers and some bank-account identifiers
- Images of government IDs, including driver’s licenses or passports
- Account-balance snapshots and transaction history
- Limited corporate information, including support-agent documents, training materials, and communications
Coinbase said passwords and private keys were not compromised, personnel involved could not access customer funds, and Coinbase Prime accounts were unaffected. Its blog additionally said login credentials and two-factor authentication codes were not obtained and that neither Coinbase’s nor customers’ hot and cold wallets were accessed. These are Coinbase’s statements, not an independent forensic finding. SEC filing · Coinbase incident statement
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →How is this different from Coinbase Account Protection?
Coinbase’s Account Protection is a separate benefit described on its Help page. It is not the May 2025 breach reimbursement promise.
Rank #4
- EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
- 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
- TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
- WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
- SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.
| Question | May 2025 breach commitment | Account Protection |
|---|---|---|
| Who may qualify? | Eligible retail customers affected by the incident | Eligible Coinbase One subscribers in supported regions |
| What event is covered? | Funds mistakenly sent to the incident scammer as a direct result of the breach | Certain unauthorized crypto withdrawals after account takeover |
| What requirements or exclusions apply? | Coinbase said it would review the facts; the public statement does not set out a universal award or individual cap. | Requires a passkey or security key as the primary authentication method. Excludes transactions the customer authorized after being deceived, mistakes, and fraudulent activity. The benefit is subject to coverage limits and terms. |
| What timing applies? | The May 15 blog described eligible transfers made before that post was published. | The Help page says a claim must be filed within 45 days and requests a police report, an IC3 report, suspected-loss dates, and estimated U.S.-dollar loss. |
| Is it insurance? | Not described as an insurance policy | Coinbase says Account Protection is not insurance. |
Account Protection’s current eligibility and terms can change, so check Coinbase’s live Account Protection page before relying on it. The two programs have different triggers and requirements; qualifying for one does not establish eligibility for the other.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What did Coinbase report about the financial impact later?
In its Q1 2026 financial results, Coinbase reported “Data Theft Incident losses (recoveries), net” of $306.7 million in Q2 2025, $48.0 million in Q3 2025, a $9.5 million recovery in Q4 2025, and $8.6 million in Q1 2026. Coinbase said the measure includes voluntary customer reimbursements, direct legal costs, and possible reward payments connected with an arrest and conviction. It is not a report of the amount paid to customers alone. Coinbase quarterly financial results
The cited company materials do not provide a definitive total number of affected customers, reimbursement claims, or customer payouts.
Best Value
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
How can Coinbase customers reduce scam risk?
Coinbase warned that criminals may impersonate the company using breach-related information. Treat an unexpected request to move crypto, disclose a password, or share a two-factor code as a warning sign.
- Never share your password or 2FA code, even with someone claiming to be Coinbase support.
- Do not move assets to a “safe” wallet or a new address at another person’s request.
- Use withdrawal allow-listing and strong two-factor authentication; Coinbase said hardware keys are best.
- If a call seems suspicious, hang up. If something feels wrong, lock your account in the app and contact Coinbase through its official channels.
Coinbase said it added extra ID checks on large withdrawals for flagged accounts, scam-awareness prompts, and the ability to delay high-risk transactions while monitoring them. It also described plans for a U.S. support hub and stronger controls and monitoring across support operations, insider-threat detection, and automated response. These measures are company-reported. Coinbase’s incident response and security advice
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
