Coinbase Phishing Scammer Gets 4 to 12 Years for $16M Theft
The case highlights how impersonation can turn a trusted exchange brand into a tool for stealing crypto, while the plea deal drew a shorter sentence than prosecutors sought.
The case highlights how impersonation can turn a trusted exchange brand into a tool for stealing crypto, while the plea deal drew a shorter sentence than prosecutors sought.
Marset's extradition closes a year-long fugitive hunt and brings a high-profile illicit-finance case to US federal court, where prosecutors will argue crypto was central to his laundering operation.
On-chain forensics traced $1.1M in months, but the underlying device-code auth vulnerability that powered EvilTokens is already being groomed for Gmail and Okta.
The advisory stops short of banning markets tied to a named person's words or actions, but sets a high bar that could narrow which event contracts clear supervisory review.
The breach reached beyond a wallet app: researchers say it could expose Keychain data, seed phrases and credentials, forcing affected users to create new wallets.
The case puts creator-reward fraud and coordinated engagement under scrutiny, with X seeking repayment and damages after terminating nine linked accounts.
The case puts creator monetization controls under scrutiny, with X seeking an additional $100,000 for investigation, remediation and prevention measures.
The case puts creator-revenue safeguards and engagement integrity under scrutiny, with X seeking repayment, damages, interest and legal costs.
The allegation focuses attention on the scale of financial crime and the difficulty of measuring taxpayer losses across fraud networks.
The allegation puts Polymarket’s growth-first culture and compliance controls under sharper regulatory scrutiny as prediction markets expand.
Checkout.com at one point rejected more than 80% of Polymarket US deposits as fraudulent, versus a roughly 1% industry norm, while the CFTC probes the firm ahead of a potential 2027 IPO.
The case underscores physical-security risks around crypto wealth, while investigators have not confirmed a crypto motive or identified any financial loss.
The allegations put AML controls and regulatory exposure at the center of Polymarket's expansion after its processor rejected more than 80% of deposits as fraudulent.
Chainalysis found AI-linked scam operations generated about 4.5 times more on-chain revenue, while the FBI recorded $893.3M in AI-related reported losses in 2025.
The campaign spans more than 100 countries and regions, putting crypto users at risk through a malware operation linked to North Korea.
The hardware remained intact, but recovery-phrase reuse and trusted email infrastructure gave attackers paths around the device.
The campaign targeted compromised Windows endpoints, not Coinbase, MetaMask or official extensions, while HP disclosed no victim count or aggregate loss.
The 24-hour ultimatum, with customer records threatened for sale, turns a fintech security incident into an extortion clock that Revolut and its regulators are now racing.
The group targeted crypto-heavy customers using blockchain analysis, and 680 accounts had identity documents and transaction histories exposed in the breach.
The trade doubled the initial outlay in a single hour, a return profile more common in memecoin launches than in sustained markets and a reminder of the asymmetric risk on both sides.