A Brooklyn courtroom sentenced Ronald Spektor, 23, of Sheepshead Bay, to 4 to 12 years in prison on September 23, 2026, after prosecutors said he posed as Coinbase support staff and persuaded roughly 100 people to move their cryptocurrency into wallets he controlled. The scheme drained nearly $16 million before investigators closed in. Spektor gambled away about $6 million of the stolen funds along the way, according to the Brooklyn District Attorney’s Office, which built the case inside its Virtual Currency Unit.
How the Coinbase Impersonation Worked
Spektor’s method followed a script Coinbase later described in detail once it began helping prosecutors trace the case. He contacted victims by phone or message claiming their accounts were under attack from hackers and that their crypto needed to move into a new, secure wallet to stay safe. The wallet was his. Once a victim transferred funds there, Spektor emptied it and moved the proceeds through cryptocurrency exchanges, gambling platforms and online retailers to cover the trail. Prosecutors said the approach worked repeatedly across roughly 100 separate victims over the life of the scheme, each one contacted with a version of the same false emergency rather than a single large target. Coinbase said in a post on the case that it found no evidence its own systems were breached, and that the company will never ask a customer to move funds to a "safe wallet," or request a two-factor code, a seed phrase or a password-reset link.
What a scam call leaves behind: The scheme in this case relied on urgency to keep victims from checking who they were really talking to, and it left little paperwork once the wallets emptied. The first-hour recovery plan and the fraud evidence and report log inside The Senior Fraud Defense & First-Hour Recovery Kit lay out what to document and in what order.
The Sentence, Restitution and Forfeiture
Spektor pleaded guilty on September 2, 2026, to a 31-count indictment covering first-degree money laundering, first-degree grand larceny and first-degree criminal possession of stolen property, according to the Brooklyn District Attorney’s Office. A judge sentenced him three weeks later to 4 to 12 years in prison and ordered restitution of almost $16 million, matching what prosecutors said victims lost. The court also ordered forfeiture of cash, cryptocurrency and personal property worth more than $500,000, recovered during the investigation. District Attorney Eric Gonzalez said the case "should put crypto scammers on notice: we will follow the digital trail wherever it leads." The sentence closes a case that moved from indictment to guilty plea to sentencing within several months, a pace prosecutors credited to the blockchain records Coinbase turned over once it was served with lawful requests.
Where the Stolen Cryptocurrency Went
Spektor routed the stolen funds through a mix of exchanges, gambling platforms and online retailers rather than holding them in one place, prosecutors said. Messages recovered during the investigation showed he lost about $6 million of it gambling with cryptocurrency, money that was effectively gone once it passed through betting platforms rather than sitting in a wallet investigators could seize. The court’s forfeiture order covered cash, cryptocurrency and property worth more than $500,000 that investigators did manage to recover, a fraction of the nearly $16 million restitution figure Spektor now owes.
The Brooklyn DA’s Virtual Currency Unit
The case was built inside the Brooklyn DA’s Virtual Currency Unit, led by Unit Chief Alona Katz alongside Assistant District Attorney Kevin Zhen, with virtual currency analysts Sam Weaver and Paul Stenzel tracing the blockchain transactions. The office’s Detective Bureau and Digital Evidence Lab Unit, run by Chief Jingu Chong, handled the digital forensics connecting Spektor’s communications to the wallets receiving victims’ funds. Coinbase said it worked alongside that team, preserving account records and communication patterns under lawful requests and helping trace funds once they moved on-chain. That kind of cooperation between an exchange and a local prosecutor is relatively new territory for a case this size, and Brooklyn prosecutors pointed to it as one reason the office secured a guilty plea rather than taking the case to trial.
Recognizing the "Safe Wallet" Script
The tactic prosecutors described in Spektor’s case is common enough that the Federal Trade Commission has published guidance describing nearly the identical pattern: an unexpected message claiming fraud or risk, followed by instructions to buy or move cryptocurrency to fix it. The commission’s advice is direct: no legitimate company or government agency contacts people that way, and anyone who gets such a message should close it rather than call a number the message itself provided. Coinbase’s own warning echoes that point for its own platform, saying it will never ask a customer to move funds to a "safe wallet" in the first place.
Where to Report a Similar Scheme
The Federal Trade Commission’s guidance points anyone who receives a similar message toward several separate channels rather than one central hotline: ReportFraud.ftc.gov for the commission itself, CFTC.gov/complaint for the Commodity Futures Trading Commission, sec.gov/tcr for the Securities and Exchange Commission, and ic3.gov for the FBI’s Internet Crime Complaint Center, alongside the cryptocurrency exchange involved. Spektor’s victims and investigators used a version of that same trail in reverse, working from exchange records back to the wallets and, eventually, to Spektor himself. The commission’s guidance treats a fast report as useful even when the funds already moved, since the same wallets and accounts often turn up again in a later case.
Coinbase, which assisted the Brooklyn DA’s investigation from the start, said the pattern behind this case is one it has flagged to customers repeatedly: a message that manufactures urgency around account safety is usually the surest sign that the message itself is the danger.
The Minutes Before a Crypto Wallet Empties
A scheme like Spektor’s counts on a victim acting inside minutes, before there is time to call an exchange directly or check on any other account the same caller might try next. Once a transfer clears, the case becomes a matter for prosecutors and blockchain investigators rather than customer service, and the accounts that stay untouched are often the ones a family member or spouse catches in time.
The Senior Fraud Defense & First-Hour Recovery Kit sets out the family code word and the free credit-freeze steps for a household deciding how to verify a caller and lock down accounts before money moves again.
See how the family code word works in The Senior Fraud Defense & First-Hour Recovery Kit.
This article was produced with AI assistance and reviewed by a human editor. Every figure links to the court filing or company statement it came from.
