Ronald Spektor sentenced to 12 years for $16 million Coinbase phishing scam

Ronald Spektor, a 23-year-old Brooklyn man, has been sentenced to four to 12 years in prison for orchestrating a sophisticated social engineering scheme that stole $15,944,000 from nearly 100 Coinbase users across the United States. Spektor posed as an exchange representative, using spoofed alerts to trick victims into transferring crypto to wallets he controlled. He then laundered the funds through multiple exchanges and gambling sites. Spektor must pay full restitution and forfeit over $500,000 in assets.

Sentencing and restitution

• ▪Justice Danny Chun imposed the four-to-12-year sentence on Ronald Spektor over the objection of prosecutors, who had requested a sentence of seven to 21 years
• ▪Justice Danny Chun sentenced Ronald Spektor on September 23, 2026, to an indeterminate prison term of four to 12 years
• ▪Ronald Spektor was ordered to pay nearly $16 million in restitution and forfeit cash, cryptocurrency, and personal property valued at more than $500,000

The phishing and social engineering scheme

• ▪Ronald Spektor used online forums to recruit helpers to act as social engineers and stage simulated hacking attempts to deceive victims
• ▪Ronald Spektor, a 23-year-old Brooklyn man, ran a yearlong phishing and social engineering scheme that stole nearly $16 million from approximately 100 Coinbase users
• ▪Ronald Spektor contacted Coinbase users posing as an exchange representative, falsely claiming their assets were exposed to a hacker to persuade them to move funds to wallets he controlled
• ▪Ronald Spektor used spoofed two-factor-authentication messages and emails under the name James Wilson or Fred Wilson to make his fraudulent Coinbase security warnings appear credible to victims

Victims and financial losses

• ▪The total losses from Ronald Spektor's Coinbase phishing scheme amounted to $15,944,000, with victims spread across the United States
• ▪Individual victim losses from Ronald Spektor's Coinbase phishing scheme included a California victim who lost over $1 million, a Virginia victim who lost over $900,000, and a Pennsylvania victim who lost approximately $53,150

Laundering and spending of stolen funds

• ▪Ronald Spektor laundered cryptocurrency stolen from Coinbase users by swapping it repeatedly across different exchanges and consolidating it at cash-out points to convert into other tokens, cash, and gift cards
• ▪Ronald Spektor spent large portions of the stolen cryptocurrency proceeds on online gambling services and online storefronts

Arrest and guilty plea

• ▪Ronald Spektor pleaded guilty on September 2, 2026, to a 31-count indictment including first-degree money laundering, first-degree grand larceny, and first-degree criminal possession of stolen property
• ▪Ronald Spektor was arrested in December 2025 and initially pleaded not guilty before changing his plea to guilty on September 2, 2026

Investigation and evidence

• ▪Ronald Spektor's phone, seized by investigators, contained 12 cryptocurrency wallets tied to at least 140 deposits traced back to 90 victims, with one wallet holding approximately $6.3 million
• ▪Investigators linked Ronald Spektor to his $16 million Coinbase phishing scheme using transaction records, blockchain analysis, digital forensics, and his home IP address, which was tied to multiple victim wallets

Online allegations

• ▪After allegations about Ronald Spektor began circulating online, he got rid of a hardware wallet, bought a replacement, and told his helpers to replace their equipment
• ▪Independent blockchain investigator ZachXBT publicly identified Ronald Spektor in a social media thread in November 2024 prior to Spektor's arrest

Debatable claims

• ▪Ronald Spektor's 4-to-12-year prison sentence is too lenient
• ▪Coinbase should compensate the victims of Ronald Spektor's phishing scam