Phishing scams targeting Coinbase users resulted in a total loss of $46 million in March 2025.
Cybercriminals used techniques like address poisoning and wallet spoofing to deceive users into transferring digital assets to fraudulent addresses.
Coinbase is actively investigating the situation and warns users that it would never ask for login credentials, API keys, or fund transfers.
To mitigate the risk of falling victim to scams, Coinbase recommends using a dedicated email address, enabling two-factor authentication, setting up an address allowlist, and storing assets in Coinbase Vault.