Brooklyn man sentenced to 12 years for stealing $16M from Coinbase users

A 23-year-old from Sheepshead Bay, Brooklyn, will spend up to twelve years in prison after running a phishing operation that siphoned nearly $16 million from approximately 100 Coinbase users. Ronald Spektor was sentenced on September 23 following a guilty plea to a 31-count indictment that included grand larceny and money laundering charges.

Brooklyn District Attorney Eric Gonzalez announced the sentencing, calling it a significant victory in the fight against cryptocurrency fraud. The scheme ran from April 2023 to December 2024, a stretch during which Spektor posed as a Coinbase representative and convinced victims to hand over access to their digital assets.

The playbook: fake support, real theft

Spektor’s method was a textbook social engineering attack. He contacted Coinbase users, impersonated company support staff, and warned them that their accounts were at risk of being hacked. The urgency was manufactured, but the fear was real enough to work.

Victims were then persuaded to transfer their crypto holdings into wallets Spektor controlled, believing they were securing their funds. Instead, their accounts were drained.

The losses were staggering on an individual level. At least one victim in California lost more than $1 million. Another in Virginia saw over $900,000 disappear. Across roughly 100 targets, the total haul approached $16 million.

If the crime itself wasn’t brazen enough, the aftermath certainly was. Spektor reportedly boasted about his exploits online using the handle @lolimfeelingevil.

Following the money through mixers and casinos

Once Spektor had the stolen crypto in his wallets, he laundered a significant portion through mixers, swapping services, and gambling platforms, three of the most common tools used to obscure the origins of illicit digital funds.

Mixers work by pooling crypto from multiple users and redistributing it, making individual transactions harder to trace. Swapping services convert one token into another, adding another layer of obfuscation. Gambling platforms, meanwhile, let users deposit crypto and withdraw what appears to be clean funds in the form of winnings.

Despite these efforts, investigators managed to trace enough of the activity to build a 31-count case. As part of his sentencing, Spektor was ordered to forfeit more than $500,000 in assets and pay nearly $16 million in restitution to his victims. So far, roughly $505,000 has been recovered, which means the vast majority of the stolen funds remain unaccounted for.

Spektor pleaded guilty on September 2, roughly three weeks before his sentencing. The 31-count indictment covered the full scope of his operation, from the initial phishing contacts through the laundering apparatus he built to clean the proceeds.

His sentence of four to twelve years represents one of the more substantial prison terms handed down for a crypto phishing operation in recent memory.

What this means for crypto security

Coinbase, the largest US-based crypto exchange, has repeatedly warned users that its support team will never ask customers to transfer funds to a new wallet or share sensitive credentials.

For law enforcement, the case demonstrates that crypto crimes are prosecutable even when sophisticated laundering is involved. The Brooklyn DA’s office worked the case through traditional investigative methods combined with blockchain analytics.

The roughly $15.5 million gap between what was stolen and what’s been recovered will likely haunt victims for years. Restitution orders are one thing. Actually collecting on them when the assets have been scattered across mixers and gambling platforms is another challenge entirely.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.