The renowned security researcher ZachXBT recently denounced a Canadian citizen for the theft of more than 2 million dollars. According to the report, the attacker used various social engineering scams to impersonate Coinbase technical support over the past year. Cybersecurity expert Kamina Bashir detailed that these manipulative tactics have become the primary threat to the Web3 ecosystem.
The suspect, identified under the alias “Haby” or Havard, allegedly carried out his fraudulent operations since late 2024. On the other hand, the investigation directly links multiple Bitcoin wallet transactions with the theft of funds exceeding 560,000 dollars. The analyst shared screenshots of group chats where the individual bragged about his illicit earnings. The evidence includes leaked videos of fraudulent calls made by the alleged Canadian criminal recently.
The criminal operation was not only limited to the Coinbase platform but systematically affected various users. Likewise, transactions of approximately 21,000 XRP were detected that were stolen through direct deception of unsuspecting victims.
The attacker spent the stolen money on luxuries such as bottle service, gambling, and exclusive social media usernames. The suspect’s lack of operational security allowed for his rapid identification through selfies posted on his Instagram account.
Human vulnerability exceeds technical breaches in the cryptographic environment
This case highlights an alarming trend where human psychology is the primary target for modern cybercriminals. Therefore, social engineering scams are displacing purely technical attacks due to their effectiveness and lower execution complexity.
Thus, criminals manipulate trust and urgency to gain access to users’ private keys. The Kerberus security report confirms this worrying reality for today’s digital investors. Impersonating well-known brands generates a false sense of security in potential victims of these attacks.
Additionally, the researcher urged Canadian authorities to intervene immediately to prosecute the person responsible for these acts. ZachXBT noted that although Canada is often lax in prosecuting these crimes, the amount of evidence is overwhelming.
Therefore, it is expected that this case will serve as a necessary precedent for punishing computer crimes in the region. The suspect showed zero remorse for the losses caused to the people who were scammed. Local authorities already know the individual due to previous incidents involving swatting and personal threats.
What security measures should users adopt to avoid being victims of these deceptions?
Digital education and verification of official sources are the best defense tools for any asset owner. However, phishing campaigns have become so sophisticated that even experienced users can fall into the trap. Therefore, it is vital to distrust any unsolicited communication that asks for sensitive data or access to personal wallets.
The use of physical multi-factor authentication is essential to protect savings held in criptocurrencies. The industry faces a human security crisis that requires urgent attention and continuous education.
The outlook for the next year suggests that attacks based on human behavior will continue to increase steadily. Likewise, international cooperation between researchers and law enforcement will be crucial to dismantle these global scammer networks.
On the other hand, the transparency of the underlying technology remains the best ally to track and expose malicious actors. Tracing funds allows for the identification of real identities behind anonymous Telegram profiles. The crypto community must stay alert to new methods of advanced psychological manipulation.
