Crypto users are being warned about a new wave of phishing emails impersonating popular exchanges, such as Coinbase and Gemini. The fraudulent emails trick users into setting up wallets using pre-generated recovery phrases, giving scammers complete control over their funds.
These emails claim to be from Coinbase, urging users to transition to self-custodial wallets. They provide instructions to download the real Coinbase Wallet but also include pre-generated recovery phrases. If users follow the steps and transfer funds, scammers can access and drain their wallets.
The emails also mention a class-action lawsuit against Coinbase, falsely claiming the court has mandated users to manage their wallets.
One fake email reads:
“Coinbase will operate as a registered broker, allowing purchases, but all assets must move to Coinbase Wallet.”
However, the US SEC dropped its lawsuit against Coinbase, dismissing allegations that the exchange was an unregistered broker.
Coinbase is aware of the scam and has issued a warning. In a post on X, the exchange stated:
“We will never send you a recovery phrase, and you should never enter a recovery phrase given to you by someone else.”
Gemini users are also being targeted with similar fake emails. The emails claim a recent court decision requires them to create new wallets using the same recovery phrase scam.
Gemini was previously sued by the SEC for allegedly offering unregistered securities through its Earn program, but the regulator dropped the case.
Gemini has yet to comment on the phishing attack.
Phishing scams remain one of the biggest threats to crypto users. Blockchain security firm CertiK reports that crypto phishing attacks caused $1 billion in losses across 296 incidents in 2024 alone.
This email scam is just one of several recent attacks on the crypto community. At least three crypto founders recently revealed they stopped an attempt by North Korean hackers to steal sensitive data. The hackers posed as potential partners, arranging fake Zoom meetings before sending malicious links disguised as call redirections.
To stay safe from scammers, always protect your recovery phrase and never use one given by someone else. Verify any suspicious emails directly with the exchange’s official support. Enabling two-factor authentication (2FA) adds an extra layer of security to your accounts. Be cautious of urgent messages, as scammers often use pressure tactics to make you act quickly. Staying vigilant can help you avoid fraud and keep your information secure.
Crypto scams are becoming more experienced, but staying alert can help prevent losses. Always double-check emails, never share your recovery phrase, and report suspicious activity to your exchange. As the crypto space grows, so do the scams—don’t let scammers steal your hard-earned assets.
Mohit Raghuwanshi is an Indian journalist working at Coin Gabbar’s news desk, passionately following the ever-evolving crypto market. With a keen interest in blockchain technology and digital assets, he delivers in-depth reports on industry trends, regulations, and market movements. He holds a bachelor's degree in Journalism and Mass Communication and previously worked as a content writer at a PR agency, honing his skills in crafting compelling narratives and analyzing financial markets.
4 weeks ago
I never imagined I’d fall for a crypto romance scam but it happened. Over the course of a few months, I sent nearly $184,000 worth of Bitcoin to someone I genuinely believed I was building a future with. When they disappeared without a trace, I was left heartbroken, humiliated, and financially devastated. For a long time, I didn’t tell anyone. I felt ashamed. But eventually, while searching for answers, I came across a Reddit thread that mentioned Agent Jasmine Lopez a crypto recovery agent. I reached out, not expecting much. To my surprise, she treated me with kindness, not judgment. She used advanced tools like blockchain forensics, IP tracing, and smart contract analysis and with persistence and legal support, she was able to recover nearly 85% of what I lost. I know not everyone gets that kind of outcome, but thanks to recoveryfundprovider@gmail . com WhatsApp at +44 736-644-5035, I’ve started to reclaim not just my assets, but my confidence and peace of mind. If you’re going through something similar, you’re not alone and there is hope.
1 month ago
I am incredibly grateful to Gavin Ray and his Team for helping me recover $175,000 in such a short period from an online scam investment platform. Their professionalism, expertise, and relentless dedication made the entire process smooth and stress-free. I highly recommend their services to anyone seeking reliable assistance in financial recovery. Email: (gavinray78( @)-g m a i lc o m
1 month ago
"I am incredibly grateful to Sylvester Bryant for his exceptional expertise and assistance in recovering my USDC funds, which were lost to a phishing scam. Thanks to his diligent efforts, he successfully retrieved 480,000 worth of USDC that I thought was gone forever. If you or anyone you know has fallen victim to a similar situation, I highly recommend reaching out to Sylvester for professional assistance. You can contact him via email at Yt7cracker@gmail. com or through WhatsApp/text message at +1 512 577 7957. He is truly a reliable and skilled professional in recovering assets from online scams."