Fake Coinbase Migration Phishing Email

[Yaunfitda]

So in seems that there are new wave of Coinbase Phishing email attacks like the one below.



And from the looks of it, seems very legit, but upon closer inspection, the source of the email is very suspecting,

Code:

noreply@akamai.com

The thing is that this is a clever approach by the attackers, and reverse of what we have been seeing before. There is no phishing link that when you click or downloaded it, the malware will steal your credentials, like pass phrase.

Here, the attackers will give you to 12 digit mnemonic phrase and then let you transfer all your crypto to that wallet and once you transfer, there could be bot that will automatically transfer it to a new wallet that the attackers have control.

So if you got this email, delete it as this is an obvious phishing email from the attackers.

https://gbhackers.com/fake-coinbase-migration-messages-target-users/

[btcltcdigger]

Yeah i got that one as well, as soon as i saw the recovery keys in the email, i just loled and deleted the email.
Even if this was a legit Coinbase action, they wouldn't send you recovery phrase over email, ever!

[_act_]

The court mandated all users to manage their own wallet? This is how I will first know that it is a scam.

The second reason it is an obvious scam is that the seed phrase is sent through email. Coinbase will only refer to the Coinbase noncustodial wallet but users will have to generate the seed phrase themselves on the wallet.

It is a big scam.

[DYING_S0UL]

Looking back, I also got bunch of similar looking emails from fake Coinbase. They said something about changing my email and resetting the password. I was so confused, as Coinbase doesn't require email. The link to resetting to password was a phishing link. Poor design by the scammer.

The scammers probably got your email address from data leaks from various exchanges, crypto platforms. I wouldn't be surprised if I get anything similar to this since my old email address was also leaked. Btw, the content of the email you got looks legit. A newbie who just got into crypto world, would probably fall for scams such as this.

The best cure would be using a freshly created email or temp mail if possible. Also don't click any links blindly. Even better don't visit your email app unless necessary. For me, I rarely visit or read anything.

[DPHOR]

Have came across similar post and that gets me thinking about coinbase to issues wallet and seedphrase, though if you don't have experience enough to know and detect scam on time one would fall victim by using those seed phrase to import their funds over there and loses them entirely. That is why when such news comes out it's important to always share across here so people would be aware of these kinds of scam attempts.

[Ojima-ojo]

Have came across similar post and that gets me thinking about coinbase to issues wallet and seedphrase, though if you don't have experience enough to know and detect scam on time one would fall victim by using those seed phrase to import their funds over there and loses them entirely. That is why when such news comes out it's important to always share across here so people would be aware of these kinds of scam attempts.

Except such a person is a core newbie in the industry to make such a mistake of accepting a wallet that phrases are sent via email, is a scam and glaring for all to know at a spot, coin base happens to be most targeted lately and their users have to be very careful when dealing with information that is sent via emails to avoid being a victim at the end.

[Aanuoluwatofunmi]

This kind of scam can only captivate those that are new in the system, but not on experience users like us in cryptocurrency, we know the kind of exchange coinbase is and they can't claim to make a centralized exchange turned a decentralized one for nothing, moreover this can either come directly from the exchange or scammers intending to deceive the public on what is not, we have to be careful.

[Alpha Marine]

And from the looks of it, seems very legit, but upon closer inspection, the source of the email is very suspecting,

Code:

noreply@akamai.com

The thing is that this is a clever approach by the attackers, and reverse of what we have been seeing before. There is no phishing link that when you click or downloaded it, the malware will steal your credentials, like pass phrase.

This is very lame and that is why they mostly work on newbies.
How is it a non-custodial wallet if they are the ones to generate your secret phrase for you? That is the most obvious scam or red flag I've ever seen in phishing scams like these. Even CEXs don't generate a secret phrase for you. It just doesn't make sense at all.
Also, the first thing I saw before my eyes went further down the image was the email. Why would a company like Coinbase use "akamai" as an email? That's the first red flag.

If this works on a newbie or a not-so-tech-savvy person, I would understand, but if it works on a person who is not new to crypto and should know the basics, then I'm sorry, but I might have to blame the victim.

[Outhue]

This seems to be a scam that primarily targets inexperienced users, specifically those who have little understanding of how crypto wallets function.

I often receive similar scam emails, and I’ve become accustomed to them. I always avoid engaging with them, particularly because I don’t use Coinbase Wallet. In fact, I have a strong dislike for Coinbase Wallet and other crypto exchange wallets.

Firstly, they are all centralized, and secondly, I don’t trust them. My lack of trust stems from the fact that the wallets they create are closed source, which makes them unreliable. Generally, I wouldn’t recommend anyone use even the legitimate Coinbase Wallet.

[hugeblack]

Without a social attack, such attacks will not succeed because they require a beginner that trust in antivirus software and limited experience with cryptocurrencies. Therefore, it is essential to know the basics before purchasing cryptocurrencies.

I hope these platforms add a brief explanation as a prerequisite before creating an account.

[BenCodie]

That is quite a sophisticated attack. I do wonder how successful it is, considering that this would surely have to be timed similarly to when the user registers to the exchange in order to be effective. Also to then rely on them to transfer to the wallet is another barrier to completing the scam. I would hope it's not successful at all, and that people don't really import seeds from emails and then on top of that, transfer or try to use those wallets.

[philipma1957]

Without a social attack, such attacks will not succeed because they require a beginner that trust in antivirus software and limited experience with cryptocurrencies. Therefore, it is essential to know the basics before purchasing cryptocurrencies.

I hope these platforms add a brief explanation as a prerequisite before creating an account.

Well we want people  to understand holding crypto requires knowledge . So posting this type of thread is important.

When I was running a mine that earned decent money I used coinbase a lot.

My phone was a victim of a massive breach
 Over 100000 tracphones were
Sims card attacked via an inside job.

AND MY coinbase account was hacked.

But I have a second cell phone with Google author app for my exchange account .

So they could not take the funds out of the account.
They could. Not change my password
THEY could not steal the 45k in coins and cash.

My cost was 20 a month for the second cell with Google auth.

Save me big money.

[Felicity_Tide]

So if you got this email, delete it as this is an obvious phishing email from the attackers.

https://gbhackers.com/fake-coinbase-migration-messages-target-users/

The scamming approach is quite funny, though it is a very sensitive one. I think this is another interesting approach by scammers, even though email phishing is quite popular. The truth is, there are so many people that will fall for this scam, even when they don't use coinbase in the first place. Just because a mail is coming via Gmail, they just feel it is authentic, and must be coming from a well reputable organization, without even thinking that anymore can carry out impersonation.

"Transitioning to self-custodial wallets", and the scammer is issuing out phrases that ought to be personal, private and seen by just one person. I can't stop laughing, and I hope those who are new, understands how important seed phrases are, so they won't fall for all this.

[notocactus]

So in seems that there are new wave of Coinbase Phishing email attacks like the one below.

Code:

noreply@akamai.com

The thing is that this is a clever approach by the attackers

I don't see anything cleverly here!

The following email address is enough for me to know that it is scam and I immediately delete that email.

Code:

noreply@akamai.com

If it is from Coinbase, it must be noreply@coinbase.com, for example. This scam email address has nothing related to Coinbase, and you don't need to be too experienced in cryptocurrency to know that it's scam.

[Zaguru12]

So they could not take the funds out of the account.
They could. Not change my password
THEY could not steal the 45k in coins and cash.

My cost was 20 a month for the second cell with Google auth.

Save me big money.

I wouldn’t have said why keep such amount of money on your an online wallet like that but with your experience it could be that that’s the only choice you had then but that doesn’t stopped you from taking further steps from actually securing your funds on that wallet.

What I deduce from this, is practically what everyone on the forum says to newbies, do not hesitate or feel having a second layer of security on your wallet is redundancy or simply doing too much, $20 saved your $45k so why can’t one spend $100 on maybe hardware wallets to safe their funds been stolen.

This tricks aren’t going away scammers are getting creative with phishing scam and also creating Trojans so best way all day is to go totally offline

[Kemarit]

Without a social attack, such attacks will not succeed because they require a beginner that trust in antivirus software and limited experience with cryptocurrencies. Therefore, it is essential to know the basics before purchasing cryptocurrencies.

I hope these platforms add a brief explanation as a prerequisite before creating an account.

Very hard to say if this will not succeed or not, there could still be very naive crypto users up to this time that when they see email like this, they could have thought that this is legitimate.

For sure though that Coinbase might be aware of this attacks and could be giving warnings to their users already. And this criminals are evolving as much as we do, and with that, we should not trust anyone blindly.

[Russlenat]

This is a obvious scam since its sender is...

Code:

noreply@akamai.com

I don’t have an active account with Coinbase anymore, but it’s actually easy to spot emails that aren’t really from them.. you just need to check the sender carefully. So if we fall for a phishing email and get scammed, that’s really on us. This is also one of the reasons why there are so many scams in crypto, and why some people even believe crypto itself is a scam. But in reality, a lot of it comes down to user error and lack of education, especially since scammers are constantly evolving their tactics.

these are their emails.

https://help.coinbase.com/en/coinbase/privacy-and-security/other/is-this-email-really-from-coinbase

Emails from Coinbase never ask for your password, 2-step verification codes, or remote access to your computer. If you’re asked for this information, you can be sure the email isn’t from Coinbase.

Coinbase email addresses always end with “coinbase.com.”

Examples include:

@mail.coinbase.com

compliance-kyc@coinbase.com

contact@coinbase.com

contact@updates.coinbase.com

help@coinbase.com

info@cb.mail.coinbase.com

no-reply@coinbase.com

no-reply@info.coinbase.com

support@coinbase.com

[Alphakilo]

These types of emails supposedly from coinbase can't get to me any more.

Last year, I received an email a phishing email supposedly from coinbase  and I knew what it was because I had stopped using coinbase many years ago and there was no way I could have gotten such email.

Why is it mostly coinbase that I have seen with these types of emails most time. Why do scammers use them a lot. It is not like they are the number crypto exchange. My friends use Binance and coinbase is not even the third alternative for them. So what are scammers attraction the use of coinbase name.

[Publictalk792]

Looking back, I also got bunch of similar looking emails from fake Coinbase. They said something about changing my email and resetting the password. I was so confused, as Coinbase doesn't require email. The link to resetting to password was a phishing link. Poor design by the scammer.

The scammers probably got your email address from data leaks from various exchanges, crypto platforms. I wouldn't be surprised if I get anything similar to this since my old email address was also leaked. Btw, the content of the email you got looks legit. A newbie who just got into crypto world, would probably fall for scams such as this.

The best cure would be using a freshly created email or temp mail if possible. Also don't click any links blindly. Even better don't visit your email app unless necessary. For me, I rarely visit or read anything.

These emails try to trick people into changing their passwords by clicking on bad links. Scammers probably got your email address from when other cryptocurrency websites and platforms got hacked. Since your old email address was also hacked you might get more fake emails trying to trick you. Email you got looked real which is scary because people new to cryptocurrency might believe it and get tricked. To stay safe from these kinds of fake emails it is good idea to use a new email address just for this or a temporary email. Also be careful when clicking on links and try not to check your email unless you really need to. And one more suggestion is that always use a different email for main exchanges where you have some funds. And for other platforms use the same email which you are not using for exchanges. I think this can help to avoid these kind of emails.

[cryptoaddictchie]

This kind of scam can only captivate those that are new in the system, but not on experience users like us in cryptocurrency, we know the kind of exchange coinbase is and they can't claim to make a centralized exchange turned a decentralized one for nothing, moreover this can either come directly from the exchange or scammers intending to deceive the public on what is not, we have to be careful.

Thats true. Received a lot of emails not only coinbase but different cex and non custodial saying I needed to change or whatnot some of my details. Lol, these are tricks by scammers whose trying to gain access on your profile and details which will be used to hack or compromise your wallet. Its gonna be effective to newbies whose really not into crypto yet or doesnt have deep knowledge pertaining to security.