Christian Nieves ran phone-based Coinbase phishing center.
Victims installed wallets with embedded malicious seed phrases.
Over $4M stolen; proceeds spent mainly on Roobet gambling.
Christian Nieves, also known by the aliases Daytwo and PawsOnHips, orchestrated a phone-based phishing scam from a small call center in New York. Posing as Coinbase support agents, his operation preyed on unsuspecting victims through well-crafted deception.
The Phishing Wallet Trap
Victims were instructed to create what they thought were legitimate Coinbase wallets. Unbeknownst to them, these wallets were hosted on phishing websites. These sites came preloaded with malicious seed phrases—secret phrases that allow full access to the wallet. Once victims transferred funds, Nieves and his team quickly drained them away.
$4 Million and The Gambling Connection
The scam unraveled once authorities traced over $4 million in stolen crypto. Much of this illicit gain was immediately converted and sent to Roobet, a well-known gambling platform. This pattern of quick laundering via gambling sites helped obscure the trail of stolen funds.
How The Scam Worked
Impersonation on Call – Scammers posed as Coinbase support, initiating contact via phone to convince targets of the “problem.”
Phishing Wallet Setup – Victims were guided to fake sites where they created wallets seeded with malicious phrases.
Unauthorized Transfers – Once control was gained, scammers drained wallets.
Laundering Funds – Stolen crypto was quickly funneled into Roobet, complicating recovery efforts.
ZachXBT: New York-based social engineering scammer Christian Nieves (aka Daytwo/PawsOnHips) defrauded over $4 million by impersonating Coinbase support. Operating a small scam call center, Daytwo lured victims into creating Coinbase wallets on phishing sites embedded with…
— Wu Blockchain (@WuBlockchain) June 23, 2025
Lessons & Prevention Tips
Always verify support channels: Genuine Coinbase support will never call unsolicited; always go through official channels.
Never enter seed phrases from links: Always generate your own securely.
Use two‑factor authentication (2FA): Adds essential protection to your accounts.
Recommended news :
Coinbase Scam: How Christian Nieves Stole $4M
Trump Media Unveils $400M Buyback, Keeps Bitcoin Strategy
SUI and AAVE Surge in DeFi, But BlockDAG’s $0.0020 Window and July 7 Miner Shipment Dominate Headlines!
Veda Secures $18M Led by CoinFund to Enhance DeFi Vaults
ProCap: $1B Bitcoin SPAC Led by APompliano
The post Coinbase Scam: How Christian Nieves Stole $4M appeared first on CoinoMedia.
