BTC stolen on Coinbase. Had 2FA. Inside job? Seeking advice.

[physans]

BTC stolen on Coinbase. Seeking advice.

I hadn't logged into my coinbase account since 2016. I finally decided to sell my BTC so I powered up my 2 factor authentication device (a separate phone that is never left on) and went to login. Password didn't work, even though I input it correctly. I requested a reset and finally got a response from coinbase customer service a month later - They said they won't restore my password and that my account was zeroed out in 2018! 

This was quite the shock, especially considering that I have two factor authentication, the device was off, my secret key was secure (I've been a programmer since age 5 and went to a top 5 school for my Computer Science degree).

I searched all email history and had emails from 2016 when I opened the account - but no emails from 2018 when my balance was stolen. I never received any other email alerts about my account - until the day I recently went to login after 4+ years - when I suddenly got multiple emails from coinbase.

This makes me suspect it was an inside job, possibly by a database administrator or someone with high-level access working there. They could have zeroed out many accounts that weren't logged into in a long period of time. Value was close to $75k.

 

To add insult to injury, Coinbase won’t reply to my follow up emails and they won't restore access to my account. I have filed a complaint but nothing has happened.

Do you guys have any recommended courses of action?

Highly disappointed by Coinbase!

 

[HAL1000]

Get a hardware wallet - not your keys, not your crypto. Sorry for your loss and all I know is, my wife and kids are always the first to be put under the spotlight and the lie detector

Coinbase is supposed to be the most secure and best exchange in terms of security, but you might be right, maybe they have some high level access thief, looking to pilfer from what the thief may think are dormant accounts eeek.

[King34Maine]

3 hours ago, physans said:

BTC stolen on Coinbase. Seeking advice.

I hadn't logged into my coinbase account since 2016. I finally decided to sell my BTC so I powered up my 2 factor authentication device (a separate phone that is never left on) and went to login. Password didn't work, even though I input it correctly. I requested a reset and finally got a response from coinbase customer service a month later - They said they won't restore my password and that my account was zeroed out in 2018! 

This was quite the shock, especially considering that I have two factor authentication, the device was off, my secret key was secure (I've been a programmer since age 5 and went to a top 5 school for my Computer Science degree).

I searched all email history and had emails from 2016 when I opened the account - but no emails from 2018 when my balance was stolen. I never received any other email alerts about my account - until the day I recently went to login after 4+ years - when I suddenly got multiple emails from coinbase.

This makes me suspect it was an inside job, possibly by a database administrator or someone with high-level access working there. They could have zeroed out many accounts that weren't logged into in a long period of time. Value was close to $75k.

 

To add insult to injury, Coinbase won’t reply to my follow up emails and they won't restore access to my account. I have filed a complaint but nothing has happened.

Do you guys have any recommended courses of action?

Highly disappointed by Coinbase!

 

It could very well have been some malware on the phone you used to login to your Coinbase account. There are some very sophisticated spoofing malware out there. Had this one happen to me a year ago: https://iwantleverage.com/security/phishing-attacks-are-more-cunning-than-ever/

[Euphorbia]

It's suspect that they won't restore your account yet tell you the balance is zero. If they don't trust that you're the owner of the account, why are they giving you private information about it?

[Guest]

So was the phone compromised? Never login to an exchange on a phone in my opinion. 

[HenrySeldom]

8 hours ago, physans said:

BTC stolen on Coinbase. Seeking advice.

I hadn't logged into my coinbase account since 2016. I finally decided to sell my BTC so I powered up my 2 factor authentication device (a separate phone that is never left on) and went to login. Password didn't work, even though I input it correctly. I requested a reset and finally got a response from coinbase customer service a month later - They said they won't restore my password and that my account was zeroed out in 2018! 

This was quite the shock, especially considering that I have two factor authentication, the device was off, my secret key was secure (I've been a programmer since age 5 and went to a top 5 school for my Computer Science degree).

I searched all email history and had emails from 2016 when I opened the account - but no emails from 2018 when my balance was stolen. I never received any other email alerts about my account - until the day I recently went to login after 4+ years - when I suddenly got multiple emails from coinbase.

This makes me suspect it was an inside job, possibly by a database administrator or someone with high-level access working there. They could have zeroed out many accounts that weren't logged into in a long period of time. Value was close to $75k.

 

To add insult to injury, Coinbase won’t reply to my follow up emails and they won't restore access to my account. I have filed a complaint but nothing has happened.

Do you guys have any recommended courses of action?

Highly disappointed by Coinbase!

 

Not saying you're lying, but the big tell that something is not right is that you claim to have a "secret key" for a Coinbase account. Sorry, but doesn't make sense. 

[xrp_sea]

12 hours ago, HenrySeldom said:

Not saying you're lying, but the big tell that something is not right is that you claim to have a "secret key" for a Coinbase account. Sorry, but doesn't make sense. 

I think he means the secret key for his 2-factor authentication device, which makes sense. I would continue to try to work with Coinbase, and if that doesn't work, file a report with the authorities. CB has a reputation for poor customer service. Did you keep any old statements to verify your account and balance?

Edited May 20, 2021 by xrp_sea

[Montoya]

Good luck working with Coinbase right now. Given the disastrous shape of their exchange currently, I wouldn't expect to hear back from their service department for a month. 

[NMNR]

You should raise this to a relevant consumer advice bureau and also inform Coinbase you will raise this with the SEC if they don't take action.