iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A Brooklyn man who pleaded guilty to stealing cryptocurrency from about 100 Coinbase users was sentenced to four to 12 years in prison on September 23, 2026, the Brooklyn District Attorney’s Office said. Prosecutors said Ronald Spektor impersonated Coinbase support and tricked customers into transferring crypto to a wallet he could access. They estimated victims’ losses at approximately $15.944 million.
What sentence did Ronald Spektor receive?
Brooklyn Supreme Court Justice Danny Chun sentenced Spektor, 23, of Sheepshead Bay, Brooklyn, to four to 12 years in prison, according to the Brooklyn District Attorney’s Office. Spektor pleaded guilty on September 2, 2026, to all 31 counts in the indictment, including first-degree money laundering, first-degree grand larceny, and first-degree criminal possession of stolen property.
Prosecutors had sought a sentence of seven to 21 years. The DA said Spektor’s plea agreement called for the four-to-12-year term over the prosecution’s objection.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchHow did the Coinbase scam work?
The DA described the scheme as phishing and social engineering, not a breach of Coinbase’s systems. Spektor allegedly posed as a Coinbase representative and told customers that hackers threatened their assets. He persuaded them to transfer cryptocurrency to a new wallet they believed they controlled; prosecutors said Spektor could access that wallet and then emptied the accounts.
According to the DA, he moved the stolen assets through cryptocurrency swaps, mixing services, gambling services, and online storefronts to launder them. The reported method depended on deceiving users into authorizing transfers—not on a demonstrated compromise of Coinbase’s database or platform.
What do the loss, restitution, and forfeiture figures mean?
The DA’s September 23, 2026 sentencing release gives several related figures that describe different things:
| Figure | What it refers to |
|---|---|
| Approximately $15.944 million | The estimated losses suffered by about 100 U.S.-based Coinbase users, according to the DA’s yearlong investigation. |
| Almost $16 million | The restitution Spektor was ordered to pay, according to the DA. |
| More than $500,000 | The DA’s estimate of cash, cryptocurrency, and personal property forfeited. |
The forfeiture figure is not the same as the loss estimate or the restitution order. At the earlier indictment stage, the DA reported that more than $500,000 in allegedly stolen assets had been seized—about $105,000 in cash and approximately $400,000 in cryptocurrency. That December 2025 seizure snapshot should not be mistaken for the final forfeiture valuation.
How did investigators connect the scheme to Spektor?
The DA said investigators used transaction records, blockchain analyses, digital forensics, and evidence from multiple search warrants. Prosecutors reported that Spektor’s home IP address was linked to multiple wallets from which cryptocurrency was stolen. The investigation also recovered messages and documented online recruiting and bragging, according to the sentencing release.
In its December 2025 charging announcement, the DA said Coinbase helped identify the perpetrator and defrauded customers, provided evidence, and assisted law enforcement with tracing and recovering funds. The office also credited blockchain-intelligence company Flashpoint with assistance.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How can you avoid a fake crypto-support call?
The DA’s practical warning is simple: Coinbase and most other companies will never call customers and ask them to move cryptocurrency to a “safe wallet.” A caller ID, sender name, or lookalike web domain can be spoofed, so a convincing-looking contact is not proof that a message is genuine.
Quick Recap
- Stop before transferring. Treat urgency, threats of account loss, or instructions to move crypto as warning signs.
- Verify independently. End the call or stop replying, then contact the company through its trusted in-app support channel rather than a number or link supplied by the caller.
- Protect account access. Use strong account protections, including two-factor authentication or a security key where supported. Check current official account and device instructions for compatibility.
- Do not rely on a security tool to defeat impersonation. A security key can strengthen account protection, but the DA’s account does not establish that any one product would have prevented this scam.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
