Fact Checked by
CryptoNews Editorial Team
Author
Everyone is asking the same question today. ‘Who is Ronald Spektor?’ Spektor, 23, of Sheepshead Bay, Brooklyn, was sentenced on September 23, 2026, by Brooklyn Supreme Court Justice Danny Chun to four to 12 years in prison for orchestrating a Coinbase phishing and social engineering scheme that prosecutors said stole roughly $15.944M from about 100 users.
Spektor pleaded guilty on September 2, 2026, to the entire 31-count indictment, closing out a case the Brooklyn District Attorney’s Office had spent about a year building around one of the more elaborate cryptocurrency theft operations to hit Coinbase’s retail customer base.
The plea covered first-degree grand larceny, first-degree money laundering, first-degree criminal possession of stolen property and related counts. Prosecutors had pushed for seven to 21 years and objected to the shorter negotiated term, according to the Brooklyn District Attorney’s Office.
The gap between the sought sentence for Ronald Spektor, and the one handed down underscores how plea negotiations can blunt defendants’ theoretical exposure, even in large-scale cryptocurrency theft cases.
Who is Ronald Spektor, and How Did He Pull Off the $16M Coinbase Scam?
According to the Brooklyn District Attorney’s Office, someone claiming to be a Coinbase representative contacted victims and warned that a hacker had compromised their accounts.
Believing they were securing their holdings, users moved cryptocurrency into wallets they thought remained under their sole control but that were allegedly accessible to Spektor, the core mechanic of crypto phishing built on urgency rather than any technical exploit of Coinbase’s systems.
More than 70 of the roughly 100 identified victims were interviewed during the investigation. Reported losses varied widely: a California resident lost more than $1M, a Virginia resident lost more than $900,000, a Pennsylvania victim lost about $53,150, and a Maryland victim lost about $38,750.
Investigators said the stolen assets were subsequently run through swapping and mixing services, gambling platforms and online storefronts before conversion – a laundering pattern similar to what investigators have traced in other high-profile crypto-linked money laundering cases.
Prosecutors tied Spektor to the scheme through transaction records, blockchain analysis, digital forensics and search-warrant evidence, including an alleged link between his home IP address and wallets from which cryptocurrency was stolen.
Investigators seized approximately $105,000 in cash and $400,000 in cryptocurrency from Spektor during the probe, though that figure reflects assets recovered at the time rather than a confirmed final forfeiture order.
Got a Gut Feeling? It Could Pay Out Big on Polymarket
District Attorney Speaks, and Coinbase’s Chief Legal Officer Details the Exchange’s Role in Catching Spektor
Brooklyn District Attorney Eric Gonzalez framed the sentencing as vindication for the office’s Virtual Currency Unit. “Today’s sentencing holds the defendant accountable for a brazen, long-running social engineering scam that amounted to a digital robbery of nearly 100 victims,” Gonzalez said.
“Our Virtual Currency Unit painstakingly pieced together the digital proof that identified the defendant behind this sophisticated scheme, followed the money that he stole, and compiled iron-clad evidence against him. This case should put crypto scammers on notice: we will follow the digital trail wherever it leads and aggressively pursue those responsible.”
Coinbase Chief Legal Officer Paul Grewal said the company helped identify Spektor and the customers he defrauded, provided evidence to support the charges, and assisted law enforcement in tracing and recovering stolen funds, cooperation that speaks to how exchange customer-facing security tooling increasingly factors into prosecutions like this one.
The Brooklyn District Attorney’s Office reiterated the same warning it issued at the time of the original indictment: Coinbase and most legitimate companies will never call customers or ask them to move crypto to a “safe wallet.”
Caller ID, sender names, and lookalike domains can be spoofed, so verify requests only through official in-app support channels, and treat any request pressuring an immediate transfer with extra scrutiny rather than speed.
Earn $50 and Enter $300K Prize Draw on EdgeX
