A Brooklyn court has sentenced a 23-year-old man to four to 12 years in prison for stealing nearly 16 million USD from roughly 100 Coinbase users through a phishing and social-engineering campaign, closing a case that prosecutors say shows how cryptocurrency platforms and blockchain analysis can work together to dismantle impersonation fraud.
The Brooklyn District Attorney’s Office announced on Sep. 23 that Brooklyn Supreme Court Justice Danny Chun imposed the indeterminate sentence on Ronald Spektor, who had pleaded guilty on Sep. 2 to all 31 counts of his indictment, including first-degree money laundering, first-degree grand larceny and first-degree criminal possession of stolen property.
## How the scheme worked
According to prosecutors, Spektor contacted victims while pretending to work for Coinbase. His messages and calls warned users that hackers had compromised their accounts or placed their assets at risk, creating pressure to move cryptocurrency into supposedly secure wallets.
Victims believed the new wallets were under their sole control. In reality, investigators said, Spektor retained access and removed the assets once the transfers arrived. The stolen cryptocurrency then passed through exchanges, swapping services and mixing services before reaching cash-out points, with some funds routed to cryptocurrency gambling platforms and online stores.
Prosecutors calculated total losses at approximately 15.944 million USD from around 100 Coinbase users across the United States, more than 70 of whom were interviewed during the yearlong investigation by the Brooklyn District Attorney’s Virtual Currency Unit.
## The evidence trail
The case against Spektor rested on transaction records, blockchain analysis, digital forensics and evidence obtained through multiple search warrants. Investigators linked his home IP address to wallets that received stolen cryptocurrency from multiple victims across the country.
Coinbase itself played a material role, helping investigators identify victims, trace funds and gather the evidence used to bring criminal charges — a collaboration that echoes the exchange’s broader posture of working with law enforcement on account-takeover fraud.
Individual losses detailed in the indictment illustrate the scale. A California victim reported losing more than 1 million USD, while a Virginia resident reported a loss exceeding 900,000 USD. A Pennsylvania victim lost roughly 53,150 USD after receiving spoofed two-factor authentication messages followed by a call from someone claiming to represent Coinbase. A Maryland victim, told her wallet had been compromised, transferred approximately 38,750 USD from a wallet she believed she controlled.
## From not guilty to full plea
Spektor initially pleaded not guilty after his December 2025 indictment. At the time, attorney Todd Spodek told ABC7 that the transactions were “user-initiated actions” and said the defense disputed the prosecution’s case. Spektor later abandoned that position, pleading guilty to every count on Sep. 2, 2026. The sentence came three weeks after the plea.
Under the terms imposed by Justice Chun, Spektor must forfeit cash, cryptocurrency and personal property with an estimated value exceeding 500,000 USD and pay nearly 16 million USD in restitution. Prosecutors had sought a term of seven to 21 years and opposed the four-to-12-year sentence attached to the guilty plea. The District Attorney’s latest release did not identify an appeal or further criminal hearing following the sentencing.
District Attorney Eric Gonzalez described the operation as “a digital robbery of nearly 100 victims.”
## A warning for users
For cryptocurrency users, the case is a reminder of the mechanics of the most damaging category of crypto fraud. So-called support-desk impersonation scams do not require a hack of the exchange itself — they exploit the user’s trust and urgency. Security guidance consistently emphasizes that legitimate exchange employees never call users unsolicited to move funds to a new wallet, and that anyone instructed to transfer assets for “safekeeping” is almost certainly being defrauded.
The sentence also lands amid a broader enforcement push. Days earlier, the FBI convened a crypto forum targeting scams, hacks and North Korean threats, while U.S. and U.K. authorities have deepened cooperation on fraud networks. Cases built on blockchain forensics and platform cooperation — like this one — are increasingly the template prosecutors follow.
For the roughly 100 victims, restitution of nearly 16 million USD was ordered, though recovery in cases where funds passed through mixers and gambling platforms is typically partial at best.
Market snapshot (Sep. 24, 17:00 UTC, CoinGecko): BTC 84,494 USD, ETH 2,685.99 USD, SOL 117.05 USD.
31 counts, 16 million from about 100 victims, and he kept access to the wallets after the transfers landed. cold blooded. 4 to 12 years feels light for laundering that much.
the part that gets me is victims thought the new wallets were theirs alone. Coinbase will never call you. seed phrase goes to no one, ever.
4 to 12 years for 16 million stolen from 100 people seems almost light next to what some exchange founders caught
he pleaded guilty to all 31 counts in september, without that deal the ceiling would’ve been much higher
blockchain analysis tracing every transfer back is the quiet win here. these guys still think crypto means untraceable and then the DA hands them a chart of it all.
15.944 million routed through mixers and gambling sites and it still got traced end to end. the untraceable fantasy keeps costing these guys years
Justice Chun handing an indeterminate sentence for a phishing crew is a decent precedent. Coinbase impersonation calls are absolutely everywhere right now.
100 victims splitting nearly 16 million means six figures per person on average. he was hunting big accounts with weak opsec, not randoms
coinbase will never call you first. tattoo it somewhere
tattoo it and add support agents with urgent wallets to the same tattoo. the whole script depends on panic