Behold he sent a screenshot which I will include below and it was a verified coinbase account on telegram chatting him up he ended up losing up to a thousand bucks to them before reaching out to me not for help but to convince me to join.
In reality, there has been a market for buying and selling social accounts including those with verified check marks. It's not safe as some people may see.
I'm curious though if your friend has clicked the check mark? because telegram premium users can attach an icon that looks like the verified check mark. It should show you such once you click it. I'm pretty sure scammers take advantage of this.
How did Coinbase support agents get bribed anyway? Are they a third-party company outsourced in India or something?
Most likely. From this article, we see "contractors working outside United States". I would assume they did this for the typical cutting down cost, hence they would likely be workers from developing countries. Most, if not all exchanges are probably doing the same.
Coinbase said the hacker “obtained this information by paying multiple contractors or employees working in support roles outside the United States to collect information from internal Coinbase systems to which they had access in order to perform their job responsibilities.” The support staff are no longer employed, the company said.