Coinbase KYC Verification Scam

E-Mail received:

Date: 12/08/2025 03:17

From: Coinbase no-reply@info.coinbase.com.cwxr.nl

To: Coinbase no-reply@info.coinbase.com.cwxr.nl

Subject: Confirmation of Account Ownership Required

Dear Client,

We have detected suspicious activity on your account that is consistent with known fraud patterns. As a precautionary measure to protect your funds, your account has been temporarily restricted. High-risk features — including the ability to buy, sell, receive, and withdraw cryptocurrency — have been disabled to ensure the safety of your account. These actions were taken in full compliance with our Know Your Customer (KYC) policy, internal security protocols, and enterprise risk management framework. The measures were implemented under the direct oversight of the National Cyber Investigative Joint Task Force (NCIJTF) to uphold platform integrity and safeguard user interests.

Our investigation reveals that you may have interacted with unauthorized third-party platforms. It appears that you unknowingly clicked on suspicious links from promoted search results on social media related to cryptocurrency news or analysis, or on misleading ads with crypto-related content — such as trading platforms, new tokens, low-rate exchanges, or market data. These links pretended to be legitimate platforms or exchanges and redirected you to phishing websites designed to access your devices, send fake tokens, perform fake airdrops, or drain assets by establishing unauthorized wallet connections. This interaction may have led to the installation of malicious software, compromised browser extensions, or exposure to unregulated cryptocurrency services operating outside of our control.

We have detected a recent login attempt to your account from an unrecognized device. This activity does not match your usual login behavior and has been blocked and flagged for further investigation. Our threat analysis suggests that unauthorized third parties may have deployed malicious software — including malware, spyware, or ransomware — to exploit connected devices in order to access your account, extract financial or personal data, or infiltrate your network infrastructure — such as private Wi-Fi networks or mobile hotspots — with the intent of initiating transactions without your consent.

To help protect your account and comply with legal KYC requirements for reactivating your account and restoring full functionality — verification is required. As part of our security measures, this verification process is intended to confirm account ownership, prevent unauthorized access, and help protect your assets from cyber threats and coordinated attacks carried out by sophisticated cybercriminal organizations.

We are not liable, and our platform cannot be held responsible, for any loss of assets resulting from failure to complete the KYC verification process, refusal to comply with verification requirements, or non-compliance with our security policies. Breach of our rules or obligations leads to the suspension of your account and the termination of our services. The purpose of this action is to avoid potential risks to our platform in accordance with our security policies and KYC requirements. Loss of assets due to non-compliance with our rules is non-recoverable under the Terms and Conditions of our policy.

Important Security Notice: Please be aware of scammers. In the event that suspicious activity is detected on your account, you will receive an official email notification from us with instructions.

Thank you for your understanding and cooperation, as we continue to ensure compliance with regulatory requirements.

Best regards,
The Coinbase Team

E-Mail received:

Date: 30/10/2025 01:45

From: Coinbase Security do_not_reply_support@coinbase.com.id.bc1qt.com

To: Coinbase Security do_not_reply_support@coinbase.com.id.bc1qt.com

Subject: Login From New Device