Trader Jacob Canfield said he received a text message as if his two-factor authorization (2FA) had been changed. Then he received three phone calls posing as Coinbase support. Canfield was asked if he had traveled outside the United States and if he had made an email and 2FA change request. The user denied this information, after which the “support service” allegedly rejected his requests and sent a special code to confirm the cancellation.. The trader was referred to the so-called “security team” of the exchange to tell them the code to avoid being blocked for 48 hours.<br
“The scammers knew my name, email address and location. They sent a confirmation code from the email address [email protected],” Canfield tweeted.
Speaking to the attackers, Canfield said he didn’t need help and changed his password himself. In response, he heard that his account at the exchange will be blocked for 7 days if he does not provide the received code. After that, the user was finally convinced that he had been tricked by social engineering methods. Canfield suggested that he was targeted by hackers because of a possible data leak from a third party.
<blockquote
“After the first message, I immediately logged into my Coinbase account, changed my password and 2FA to reassure myself. I knew right away that it was a sophisticated scam.. 98-99% of people couldn’t figure it out and would unblock their accounts for the scammers,” the user is indignant.
Recall that in March, the creators of the Sandbox meta-universe warned about phishing emails on their behalf, which spread hyperlinks to malware to steal crypto-assets.