Ronald Spektor, a 23-year-old Brooklyn man, has received a four-to-12-year prison sentence after prosecutors linked him to a cryptocurrency phishing operation that allegedly drained nearly $15.944 million from about 100 Coinbase customers.
Brooklyn Supreme Court Justice Danny Chun handed down the sentence on September 23, 2026. Spektor, a Sheepshead Bay resident, had pleaded guilty on September 2 to all 31 counts in the indictment, ending an investigation that the Brooklyn District Attorney’s Office had pursued for roughly a year.
The charges included first-degree grand larceny, first-degree money laundering and first-degree criminal possession of stolen property, along with related offenses. Prosecutors had sought seven to 21 years in prison and objected to the shorter sentence reached through the plea agreement.
How Spektor Allegedly Stole Nearly $16 Million
The scheme allegedly began with victims receiving communications from someone posing as a Coinbase employee. The impersonator claimed hackers had gained access to their accounts and instructed customers to move their cryptocurrency to protect their holdings.
The victims believed the wallets they were directed to use were secure and under their own control. Investigators alleged that Spektor could access the wallets, allowing him to take the cryptocurrency after the transfers were made.
Rather than attacking Coinbase’s technology directly, the operation relied on phishing, impersonation and psychological pressure to persuade users to voluntarily transfer their assets.
Authorities identified approximately 100 victims and interviewed more than 70 of them. The reported losses varied considerably.
One California victim lost more than $1 million, while a Virginia resident lost over $900,000. Other victims included a Pennsylvania resident who reportedly lost about $53,150 and a Maryland resident whose losses were approximately $38,750.
Investigators said the stolen crypto was subsequently moved through swapping and mixing services, gambling platforms and online marketplaces before being converted. Such transactions can make it more difficult to follow the original source of cryptocurrency.
Authorities used blockchain transaction records, digital forensic analysis and evidence obtained through search warrants to build the case against Spektor. Prosecutors also alleged that his home IP address was associated with wallets that received cryptocurrency stolen from victims.
The investigation resulted in the seizure of approximately $105,000 in cash and $400,000 in cryptocurrency. Those figures reflect assets seized during the investigation and do not establish the final amount of any forfeiture.
Coinbase Cooperated With the Investigation
Brooklyn District Attorney Eric Gonzalez said the office’s Virtual Currency Unit played a central role in tracing the digital evidence behind the alleged operation.
Gonzalez said investigators followed the movement of the stolen cryptocurrency and used digital evidence to identify the person prosecutors accused of carrying out the scheme.
Coinbase Chief Legal Officer Paul Grewal also said the exchange assisted investigators. According to Grewal, Coinbase helped identify Spektor and the customers who were targeted, supplied evidence for the prosecution and assisted authorities in tracing and recovering stolen funds.
The case has also renewed warnings about cryptocurrency impersonation scams. The Brooklyn District Attorney’s Office said Coinbase and other legitimate businesses generally do not call customers and tell them to transfer cryptocurrency into a “safe wallet.”
Fraudsters can manipulate caller ID, sender names and imitation domains to make fake communications appear genuine. Users should verify suspicious requests through official support channels within the relevant app or website and avoid making rushed transfers when someone demands immediate action.
