Cryptocurrency Theft Incident
Recent reports have emerged revealing a significant cryptocurrency theft involving fraudulent messages impersonating Coinbase, which resulted in the loss of 33.7 bitcoins from a Massachusetts family trust. The stolen bitcoin, valued at approximately $900,000 at the time of the incident, was taken from two wallets linked to a single account. In response to the theft, federal authorities have initiated legal proceedings to seize cryptocurrency associated with the crime, specifically targeting funds traced to a Binance account.
Details of the Phishing Scheme
According to the U.S. Attorney’s Office for the District of Massachusetts, the incident occurred in early June 2023 when a beneficiary of a trust fell victim to a phishing scheme. The beneficiary was in communication with Coinbase regarding the establishment of a new account for the trust when they received the deceptive texts, allegedly originating from the exchange on June 1 and 2. At that time, the trust’s two wallets, held under the beneficiary’s account with Coinbase, contained a total of 33.7 BTC, with 28.5 BTC attributed to the trust’s wallet.
The fraudulent texts prompted the beneficiary to divulge sensitive account information, including their password and login credentials, effectively granting scammers unauthorized access to both wallets. Following this breach, all bitcoins were swiftly transferred to other wallets without the account owner’s knowledge, a detail underscored by an affidavit from FBI Special Agent Connor Jorde.
Investigation and Recovery Efforts
Despite Coinbase’s firm security protocols, which explicitly state that staff members will never solicit passwords or verification codes from customers, this breach highlights the ongoing risks associated with cryptocurrency security. Investigators managed to trace 11.2 of the stolen bitcoins to a Binance account, where they were converted into monero, a cryptocurrency known for its privacy features. This conversion was carried out between June 5 and June 15, 2023. Additionally, approximately 75% of the converted funds were moved out of the account before authorities intervened.
In response to the FBI’s request, Binance froze the account in question, which at that point held around 758.55 monero. This freeze is part of a broader civil forfeiture effort initiated by Massachusetts prosecutors aimed at recovering assets linked to the crime. Notably, previous instances of fraud involving Coinbase have used varied tactics, including schemes where criminals induce users to transfer their cryptocurrency into wallets controlled by the perpetrators. However, this particular case showcases phishing as the primary method of deception.
Ongoing Legal Proceedings
In a related development, the Binance account implicated in the theft was reportedly registered under the name Enrique Mora Morales. Further investigation revealed discrepancies in the account’s documentation and a suspicious pattern of access from approximately 15 devices over a span of six months.
The ongoing civil forfeiture case allows for third parties to claim the seized funds, specifically the tether (USDT) transferred to a government-controlled wallet. This funds recovery process adds another layer of complexity to the legal proceedings surrounding the case, as authorities seek to ensure that any stolen funds are rightfully returned to the victims.
