Coinbase domain name allegedly used by scammers in large-scale attacks

Twitter users have shared security incidents surrounding the crypto exchange, including claims that scammers are using the domain name of Coinbase for attacks.

News Join us on social networks

Update (July 7, 21:33 UTC): This article has been updated to include Coinbase's response.

Coinbase users have taken to Twitter to report scams and phishing attacks involving the company's services and apps in recent weeks, including allegations that scammers are using the domain name from the crypto exchange.

The most recent case was disclosed on July 7 by a Twitter user identified as Daniel Mason, who allegedly received text messages and emails from scammers with links under the Coinbase.com domain.

>

The scammer contacted Mason using a real phone number, then triggered an email from a Coinbase.com domain, followed by a phishing text message directing him to a Coinbase subdomain URL, before to verify Mason's address, social security number and driver's license number. .

I founded an identity/security company. I am currently in the process of creating an authentication company. But my Coinbase account was *almost* phished.

This is the (2nd) most legitimate scam attack I have ever experienced personally. Wild story below.

— Daniel Mason (SF next week) (@dgmason) July 7, 2023

As Mason notes, the scammer spoke fluent and was a native English speaker. The fraudster allegedly said in a phone call that Mason would receive an email from Coinbase regarding an alleged breach of his account. Immediately an email arrived from help@coinbase.com. "Did he set up a business on my behalf?" Or access Coinbase mail servers?" Mason tweeted.

Mason's experience is one of many on the social media platform reporting security incidents involving the crypto exchange. A quick look at the Coinbase support page shows users complaining about several types of scams, including phishing on Coinbase Wallet and criminals using the company '...