I got a call from someone claiming to represent Coinbase, wanting to help me secure my account.

<p>Coinbase won't call customers to warn them that their accounts may have been compromised. It's a common scam vector. Still, someone tried it on me.</p><p><em>You’re reading State of Crypto, a CoinDesk newsletter looking at the intersection of cryptocurrency and government. <a href="https://www.coindesk.com/newsletters/state-of-crypto" rel="nofollow">Click here</a> to sign up for future editions.</em></p><h1>Account compromise</h1><h4>The narrative</h4><p>Last weekend, an unknown California number called me. A helpful gentleman informed me that my Coinbase account had been compromised during its recent data breach and he was there to assist me in not losing my assets.</p><p>Oh no, the horror!</p><h4>Why it matters</h4><p>All right, so obviously this is a scam. Right after hanging up with this supposed help desk agent, I texted a Coinbase spokesperson to verify that at no point would the exchange <em>call</em> a customer to tell them their account was compromised. It's scam 101 — if you're getting a phone call informing you that your <a href="https://www.coinbase.com/blog/Consumer-Protection-Tuesday-Staying-Safe-From-Scammers" rel="nofollow">account's been compromised</a>, whether at a crypto exchange, a bank, the IRS, whatever, <a href="https://consumer.ftc.gov/articles/phone-scams" rel="nofollow">it's a scam</a>. Do not share your personal details and do not provide any passwords if you get a call like this.</p><p>There were a few flaws in the attempt to get me to, presumably, move my funds from my supposedly compromised Coinbase account to another address. But I'm hopeful that this can be a useful teaching moment for the nearly 70,000 people who have been affected by Coinbase's recent breach disclosure, as well as anyone else who receives a phone call claiming their information has been compromised. Here's how this went down.</p><h4>Breaking it down</h4><p>Let's start from the beginning. On Saturday, May 24, I received a call from a number I didn't recognize to my personal phone, not my public-facing work number. It being a weekend, one where I was actually visiting family in another state, I didn't pick up. Then the same number called back and I still didn't pick up (yes I know, riveting, but it's 2025 and you can leave a voicemail or text).</p><p>Ten minutes later, I received a third call from a different number, which I did pick up because at that point I was curious.</p><p>A fast-talking gentleman who called himself Riccardo told me he was part of Coinbase's Actions and Protections Department and that he was reaching out because my Coinbase account information had been compromised and a new email had just been added to my account.</p><p>I was pretty confused, for reasons I'll get into below. But I was also intrigued because there were immediately four red flags. For simplicity's sake, I'll refer to the caller as "the agent" from here on out, but to be absolutely clear, I doubt he is an actual customer service agent, representative or other employee of Coinbase, and he certainly was not reaching out to me as an authorized representative of the exchange.</p><p>First off, the phone call itself is a big red flag. Coinbase will never call a customer about a breach, but rather will contact customers via email, it previously <a href="https://x.com/CoinbaseSupport/status/1912686979486974193" rel="nofollow">said in a tweet</a>.</p><p>This is actually standard. The <a href="https://consumer.ftc.gov/articles/phone-scams" rel="nofollow">Federal Trade Commission website</a> notes there is a vast range of scams wherein someone will call you, and <a href="https://www.fnb247.com/education-center/news/identity-theft/protect-yourself-from-the-latest-bank-phone-call-scam/" rel="nofollow">numerous</a> <a href="https://www.fnbotn.com/is-it-really-your-bank-calling-or-an-imposter/" rel="nofollow">other</a> <a href="https://fcbot.com/beware-of-phone-scams" rel="nofollow">companies</a> have warnings that their employees will never proactively call a customer about account issues.</p><p>The agent I spoke to said they would freeze my account for 24 hours to ensure no funds could be stolen (thanks, I guess?) and that a supervisor would reach out to me (I continue to wait for this supervisor to call). This supposed freeze on my account can be extended to three months if there are multiple failed login attempts.</p><p>To wrap up the call, he said he'd send me an email summarizing all the details we'd discussed. On Saturday night, I received an email with the subject line "your case is under review."</p><p>The follow-up email this very helpful customer service representative sent was extremely informative.</p><p>For one thing, the email address they had associated with my account is a public-facing address, but is not the email address attached to my actual Coinbase account (in fairness, I forgot that part until I tried to find my login information a few days later).</p><img src="https://static.fwimg.io/img/feed/89065278be9fbc95a02d5cfdb512f9af.jpg" alt="email scam 1" title="email scam 1"><p>Gmail initially (correctly) flagged this email as spam. I moved it to my inbox, where Gmail then showed me that the sender (<a href="mailto:help@info-coinbase.com" rel="nofollow">help@info-coinbase.com</a>) was not the actual sender — the email arrived via learnindonesian.online. Even the <a href="http://info-coinbase.com/" rel="nofollow">info-coinbase.com</a> part is sketchy — for one thing, Coinbase's website is <a href="http://coinbase.com/" rel="nofollow">coinbase.com</a>, though it does send emails from <a href="mailto:info@info.coinbase.com" rel="nofollow">info@info.coinbase.com</a> — still, you wouldn't expect a hyphen in a support email domain. For another, the info-coinbase domain was first created in November 2024 (according to an <a href="https://lookup.icann.org/en/lookup" rel="nofollow">ICANN lookup</a>) and isn't a real website.</p><img src="https://static.fwimg.io/img/feed/341440eecb300d63ebd8d2987aca3c98.jpg" alt="scam email 2" title="scam email 2"><p>The email headers were also not super helpful in terms of providing any sort of identifying information, but they did confirm that the sender appeared to have tried to obfuscate their information.</p><p>Curiously, the "Visit Coinbase" link at the bottom appeared to link to the actual Coinbase website and there do not appear to be any hidden embedded images or other attached files in the email at all. I'm not totally sure what's going on there. A real scammer could have embedded a virus of some sort into the email or even a tracking pixel. Another common tool scammers might use is putting in a phishing link in place of a legitimate one in an email, tricking the user into going to a website intended to steal their login information (this is not legal, technical or any other sort of advice; if you decide to try and scam somebody using information you gleaned from this newsletter, stop it).</p><p>While scammers might sometimes know how much their intended victims have in a wallet or account, the person who called me did not appear to have that information (as I have zero crypto in my Coinbase account).</p><p>I called the number back on Friday to see what might happen. No one picked up. I guess my account must be secure now.</p><h1>Stories you may have missed</h1><ul><li><strong><a href="https://www.coindesk.com/policy/2025/05/29/stand-with-crypto-removes-soulja-boy-from-nj-governor-rally-after-discovering-sexual-assault-fine" rel="nofollow">Stand With Crypto Removes Soulja Boy From NJ Governor Rally After Discovering Sexual Assault Fine</a>: </strong>Stand With Crypto announced Soulja Boy and 070 Shake would headline a "get out the vote rally" next week ahead of New Jersey's governor primary election. SWC removed Soulja Boy a day later after discovering he was found liable for sexual battery and assault charges and ordered to pay $4 million last month, in a case stemming from 2021.</li><li><strong><a href="https://www.coindesk.com/policy/2025/05/29/sec-task-force-chief-says-crypto-traders-need-to-be-growups-not-cry-to-government" rel="nofollow">SEC Task Force Chief Says Crypto Traders Need to be Growups, Not Cry to Government</a>: </strong>SEC Commissioner Hester Peirce told the Bitcoin 2025 Las Vegas audience that it's fine to invest in speculative assets, especially if there's no federal regulator with close oversight, but those investors can't ask for a bailout when prices sink.</li><li><strong><a href="https://www.coindesk.com/policy/2025/05/29/u-s-house-republicans-officially-introduce-crypto-market-structure-bill" rel="nofollow">U.S. House Republicans Officially Introduce Crypto Market Structure Bill</a>: </strong>House Republicans have formally introduced the Digital Asset Market Clarity Act, its market structure bill, just weeks after circulating a discussion draft.</li><li><strong><a href="https://www.coindesk.com/news-analysis/2025/05/29/crypto-staking-doesnt-violate-us-securities-law-sec-says" rel="nofollow">Crypto Staking Doesn't Violate U.S. Securities Law, SEC Says</a>: </strong>The SEC's latest staff statement looks at staking and how the securities regulator might evaluate that part of the crypto ecosystem.</li><li><strong><a href="https://www.coindesk.com/policy/2025/05/29/sec-files-to-dismiss-regulators-long-running-lawsuit-against-binance" rel="nofollow">SEC Files to Dismiss Long-Running Lawsuit Against Binance</a>: </strong>The SEC and Binance filed a joint stipulation to drop the regulator's case against Binance.</li><li><strong><a href="https://www.coindesk.com/policy/2025/05/29/suspects-in-manhattan-crypto-kidnapping-torture-case-plead-not-guilty-as-investigation-widens" rel="nofollow">Suspects in Manhattan Crypto Kidnapping, Torture Case Plead Not Guilty as Investigation Widens</a>: </strong>News broke over the weekend that a crypto investor had been kidnapped and tortured for his Bitcoin keys. Two suspects accused of perpetrating the kidnapping have been arrested and pled not guilty.</li><li><strong><a href="https://www.coindesk.com/policy/2025/05/30/trump-s-memecoin-dinner-questioned-by-top-democrat-on-house-judiciary-committee" rel="nofollow">Trump's Memecoin Dinner Questioned by Top Democrat on House Judiciary Committee</a>: </strong>Jamie Raskin, the top Democrat on the House Judiciary Committee, wrote a letter to U.S. President Donald Trump calling on him to publish the names of his guests at last week's memecoin dinner.</li></ul><h1>This week</h1><img src="https://static.fwimg.io/img/feed/d90dc45ab616331faf618f76cad79f11.jpg" alt="soc 052725" title="soc 052725"><p>Friday</p><ul><li>15:00 UTC (11:00 a.m. ET) A federal judge held a telephone hearing to assess Roman Storm's defense argument that the Department of Justice may have withheld information. The judge ruled that in her view, the <a href="https://www.coindesk.com/policy/2025/05/30/judge-declines-to-order-doj-to-review-records-in-roman-storm-case" rel="nofollow">DOJ did not have to review its materials</a> and had not withheld information that rose to the level of affecting proceedings.</li></ul><h1>Elsewhere:</h1><ul><li><strong>(<a href="https://www.washingtonpost.com/health/2025/05/29/maha-rfk-jr-ai-garble/" rel="nofollow">The Washington Post</a>) </strong>The White House published a "Make America Healthy Again" report that cited nonexistent studies and references — with telltale signs that AI may have been used to generate at least some parts of the report.</li><li><strong>(<a href="https://www.federalreserve.gov/publications/files/2024-report-economic-well-being-us-households-202505.pdf" rel="nofollow">The Federal Reserve</a>) </strong>The Fed said 8% of adults who responded to a survey said they held cryptocurrency in the U.S., down from 12% four years ago.</li></ul><img src="https://static.fwimg.io/img/feed/71fba231b908a254f4221e3ac2b75496.jpg" alt="soc twt 052725" title="soc twt 052725"><p><strong></strong></p><p>If you’ve got thoughts or questions on what I should discuss next week or any other feedback you’d like to share, feel free to email me at <a href="mailto:nik@coindesk.com" rel="nofollow">nik@coindesk.com</a> or find me on Bluesky <a href="https://bsky.app/profile/nikhileshde.bsky.social" rel="nofollow">@nikhileshde.bsky.social</a>.</p><p>You can also join the group conversation on <a href="https://t.me/CDstateofcrypto" rel="nofollow">Telegram</a>.</p><p>See ya’ll next week!</p>

State of Crypto: Someone Tried to Scam Me (Probably)

有人打電話給我，聲稱代表Coinbase，想幫我保護我的賬戶。

<p>幣安不會給客戶打電話警告他們的賬戶可能已被入侵。這是一個常見的詐騙手段。儘管如此，還是有人對我嘗試了這招。</p><p><em>你正在閱讀加密貨幣狀態，這是一份由CoinDesk出品的關注加密貨幣和政府交叉領域的新聞通訊。<a href="https://www.coindesk.com/newsletters/state-of-crypto" rel="nofollow">點選此處</a>訂閱未來的版本。</em></p><h1>賬戶入侵</h1><h4>敘事</h4><p>上週末，一個來自加州的陌生號碼給我打電話。一位熱心的先生告訴我，我的幣安賬戶在最近的資料洩露中已被入侵，他在這裡幫助我不失去我的資產。</p><p>哦不，太可怕了！</p><h4>為什麼這很重要</h4><p>很明顯，這是一個詐騙。結束通話這個所謂的幫助臺座席後，我立即給幣安發了一條簡訊，確認交易所絕不會給客戶打電話告知他們的賬戶已被入侵。這是詐騙的基本套路——如果你接到電話說你的賬戶已被入侵，無論是加密交易所、銀行、國稅局還是其他機構，這都是詐騙。收到這樣的電話時，不要透露個人資訊，也不要提供任何密碼。</p><p>這個企圖讓我把資金從所謂被入侵的幣安賬戶轉移到另一個地址的嘗試存在一些漏洞。但我希望這可以成為一個有用的教育時刻，對於近7萬受到幣安最近資料洩露影響的人，以及任何收到聲稱資訊已被入侵的電話的人。以下是事情的經過。</p></p><p>如果你對我下週應該討論的內容有想法或問題，或者有任何其他反饋，歡迎傳送郵件至 <a href="mailto:nik@coindesk.com" rel="nofollow">nik@coindesk.com</a> 或在 Bluesky 上找到我 <a href="https://bsky.app/profile/nikhileshde.bsky.social" rel="nofollow">@nikhileshde.bsky.social</a>。</p><p>你也可以加入 <a href="https://t.me/CDstateofcrypto" rel="nofollow">Telegram</a> 群組對話。</p><p>下週再見！</p>

加密貨幣現狀：有人試圖詐騙我（可能）

貝萊德與Uniswap合作，將代幣化債券基金引入DeFi領域，推動UNI價格飆升。圖片來源：Diaro
貝萊德持續擴展其在去中心化金融（DeFi）領域的佈局，此舉為……鋪平了道路。

貝萊德與Uniswap合作，將代幣化債券基金引入DeFi領域，導致UNI價格飆升……

Polymarket 上一玩家 1 年交易 61,793 次，狂賺 10.6 萬美元。

蚊子肉，滾出 10 萬美元利潤

貝萊德亞太區iShares主管尼古拉斯·皮奇表示，即使在亞洲，對加密貨幣進行適度的投資組合配置也可能推動大量資金流入市場。

他在Consensus大會的一個小組討論會上發表了上述言論……