ZachXBT Exposes Canadian Scammer Stealing Over $2 Million via Fake Coinbase Support
ZachXBT has identified a Canada-based scammer using the aliases Haby or Havard, who allegedly stole more than $2 million over the past year by impersonating Coinbase support through social engineering.
Evidence includes cross-referenced Telegram chats, social posts, and blockchain data. Notably, a December 30, 2024 theft involved 21,000 XRP (approximately $44,000), linked to other Coinbase-related thefts totaling about $500,000.
The suspect's Bitcoin address showed a balance around $237,000 in February 2025, with further tracing linking three additional Coinbase impersonation thefts worth over $560,000.
A leaked screen recording purportedly reveals the suspect on a victim call, showing the email [email protected] and a Telegram contact. The individual reportedly purchased expensive Telegram usernames and deleted older accounts to evade detection.
In a related context, a former Coinbase support agent in India was arrested over a data breach affecting nearly 70,000 users. Coinbase stated remediation costs around $307 million, refused a $20 million ransom, and launched a bounty program.
US authorities charged a 23-year-old Brooklyn resident with stealing about $16 million from roughly 100 Coinbase users using a similar impersonation scheme. Asset seizures and ongoing recoveries were also reported.
Crypto thefts remain widespread, with over $3.4 billion stolen across the sector from January to early December 2025. Users are urged to ignore unsolicited messages, never share passwords or recovery phrases, and contact support only through official channels.
