Security1 publisher2 min readPublished
Brooklyn man gets four to 12 years for posing as a Coinbase representative to take nearly $16 million
Ronald Spektor, 23, was sentenced to four to 12 years for posing as a Coinbase representative and taking nearly $16 million from about 100 users. The victims moved the money themselves, into a wallet they were led to believe only they controlled.
The Watch · Security desk
What happened
- Ronald Spektor, 23, of Brooklyn was sentenced on September 23, 2026 to four to 12 years in prison by Brooklyn Supreme Court Justice Danny Chun.
- Posing as a Coinbase representative, he told users a hacker threatened their assets and persuaded them to move their funds to a new wallet.
- The Brooklyn DA's office puts the loss at approximately $15,944,000, taken from about 100 US-based Coinbase users.
- Spektor pleaded guilty on September 2, 2026 to all 31 counts, including first-degree money laundering and first-degree grand larceny.
- The court ordered him to forfeit cash, crypto and property worth more than half a million dollars and to pay almost $16 million in restitution.
Compiled by The WatchSomething wrong?How this is made
Why it matters
- exposure Each transfer was authorized by the victim, so exchange login protections do not stop this pretext. Any customer who acts on an unsolicited warning that their account has been hacked is exposed.
- cost Victims carry most of the loss until restitution is actually collected, and the property seized so far covers only a small fraction of what was taken.
- contradiction The DA promised to aggressively pursue these cases, but the court went below the office's request. By pleading guilty to every count, Spektor secured a four-year minimum.
Victims were led to believe the new wallet was under their sole control [5]. Spektor could get into it [5]. The release does not explain how he kept that access or which channel carried the first contact. The DA's office lists email, text messages, phone calls and look-alike websites as the usual routes for phishing aimed at Coinbase users, and it calls those users popular targets [11].
Spread across about 100 victims, approximately $15,944,000 comes to roughly $159,000 each on average [1]. He also hired help. According to the release, he used online forums to recruit others to work for him as social engineers [12].
Investigators built the case over about a year from transaction records, blockchain analysis, digital forensics and several search warrants [2][10]. Spektor's own home IP address was linked to multiple wallets the crypto was stolen from [10]. He had bragged online under the handle @lolimfeelingevil [13].
The proceeds were swapped repeatedly across exchanges and sent through mixing services until they reached cash-out points, where they were bet, converted to cash or spent on gift cards and digital assets [9]. Large portions went to gambling services and online storefronts [9]. The forfeited property, valued at more than half a million dollars, is about 3 percent of the loss [2].
District Attorney Eric Gonzalez said, "This case should put crypto scammers on notice: we will follow the digital trail wherever it leads and aggressively pursue those responsible." [7] His office asked for seven to 21 years [6]. Justice Danny Chun imposed four to 12 [1]. That was the sentence promised in exchange for the guilty plea, and it was agreed over the office's objection [6].
What to watch
- Whether any of the social engineers Spektor recruited through online forums are identified or charged.
- How much of the almost $16 million restitution order is collected beyond the roughly half a million dollars forfeited.
- Whether the DA or Coinbase disclose which channel, phone, text or email, carried the first contact to victims.