A Brooklyn resident has been handed a prison term of up to 12 years for orchestrating a sophisticated fraud that drained nearly $16 million from Coinbase customers.
On September 23, Ronald Spektor, 23, was handed a sentence ranging from four to 12 years following his guilty plea to a 31-count indictment. The charges stem from a fraudulent customer support operation that defrauded approximately 100 individuals across the United States, according to the Brooklyn District Attorney’s Office.
Authorities stated that Spektor impersonated a Coinbase employee, alerting users to fictitious hacking threats against their accounts. He then directed victims to transfer their cryptocurrency into wallets that appeared secure but were actually controlled by him.
The fraudulent scheme resulted in approximately $15.944 million in total losses, with some individuals suffering damages exceeding $1 million. Spektor pleaded guilty on September 2 to charges including first-degree money laundering, grand larceny, and criminal possession of stolen property.
The scam functioned by persuading victims to execute the transfers themselves after being convinced their digital assets faced imminent peril.
Prosecutors detailed one instance involving a Pennsylvania resident who received spoofed two-factor authentication messages. Before a caller claiming to be “Fred Wilson” from Coinbase security warned of an unauthorized crypto transfer, the victim transferred his assets, resulting in a loss of roughly $53,150.
Law enforcement had interviewed over 70 victims when charges were initially announced in December 2025. The subsequent sentencing documentation increased the estimated victim count to approximately 100 nationwide.
How Spektor Laundered the Stolen Cryptocurrency
Spektor’s criminal enterprise went well beyond the initial deception.
Prosecutors revealed that stolen cryptocurrency was funneled through multiple trades, exchanges, and mixing services before reaching cash-out destinations. The funds were converted into alternative tokens, transferred to gambling platforms, and spent at online retailers to purchase gift cards and digital assets.
Blockchain analysis, financial records, and search warrants ultimately linked Spektor to the operation. Prosecutors noted that his residential IP address was connected to several wallets tied to the stolen funds.
Investigators also discovered evidence that Spektor recruited other social engineers via online forums and managed a Telegram channel under the handle @lolimfeelingevil, where he allegedly boasted about his thefts. Records retrieved from his phone indicated that he discarded one hardware wallet after fraud allegations surfaced online and subsequently purchased a replacement.
However, the final sentence fell short of what prosecutors had requested.
Spektor agreed to plead guilty to the full indictment in exchange for a guaranteed sentence of four to 12 years. The district attorney’s office opposed this deal and urged Justice Danny Chun to impose a sentence of seven to 21 years, but the judge honored the earlier plea agreement.
The court also mandated that Spektor forfeit over $500,000 in cash, cryptocurrency, and personal property, alongside paying nearly $16 million in restitution.
This leaves the financial recovery outlook uncertain. The forfeiture accounts for only a small fraction of the estimated losses, and prosecutors did not specify how much stolen cryptocurrency has been recovered or what portion victims have actually received.
Coinbase cautions customers that its official support staff will never request transfers to new wallets, disclose seed phrases, or ask for passwords and authentication codes. This case highlights the ongoing challenge exchanges face in preventing impersonation scams that succeed before users ever have the chance to interact with legitimate support channels.
