The question making the rounds is: Who is Ronald Spektor? The 23-year-old Sheepshead Bay, Brooklyn, resident was sentenced on September 23, 2026, by Brooklyn Supreme Court Justice Danny Chun to four to 12 years in prison for running a Coinbase phishing and social engineering operation that prosecutors said took approximately $15.944 million from around 100 victims.
Spektor pleaded guilty on September 2, 2026, to all 31 counts in the indictment, bringing an end to an investigation that the Brooklyn District Attorney’s Office had spent roughly a year developing into a sophisticated cryptocurrency theft operation targeting Coinbase retail users.
His guilty plea included charges of first-degree grand larceny, first-degree money laundering, first-degree criminal possession of stolen property and other related offenses. Prosecutors had sought a sentence of seven to 21 years and opposed the shorter negotiated sentence, according to the Brooklyn District Attorney’s Office.
The difference between the sentence prosecutors requested and the four-to-12-year term ultimately imposed highlights the role plea agreements can play in reducing potential prison exposure, even in major cryptocurrency theft cases.
Who Is Ronald Spektor and How Did the $16M Coinbase Scam Work?
According to the Brooklyn District Attorney’s Office, victims were contacted by someone posing as a Coinbase representative. The caller allegedly told them that hackers had gained access to their accounts and that immediate action was needed to protect their cryptocurrency.
Believing they were moving their assets to safety, victims transferred crypto to wallets they believed were under their exclusive control. Prosecutors alleged that Spektor could access those wallets, allowing him to take the funds. The scheme relied primarily on deception, urgency and social engineering rather than exploiting a technical vulnerability in Coinbase’s systems.
Investigators identified roughly 100 victims, with more than 70 interviewed during the investigation. The losses differed substantially between victims. One California resident reportedly lost more than $1 million, while a Virginia resident lost over $900,000. A Pennsylvania victim lost approximately $53,150, and a Maryland resident reportedly lost around $38,750.
Authorities said the stolen cryptocurrency was moved through a combination of swapping and mixing services, gambling platforms and online stores before being converted. Investigators described the movement of funds as a laundering pattern seen in other major cryptocurrency-related cases.
Prosecutors connected Spektor to the operation using transaction records, blockchain analysis, digital forensic evidence and material obtained through search warrants. Investigators also allegedly identified a connection between Spektor’s home IP address and wallets involved in receiving stolen cryptocurrency.
During the investigation, authorities seized approximately $105,000 in cash and $400,000 worth of cryptocurrency from Spektor. Those amounts represent assets recovered during the investigation and do not necessarily reflect the final amount subject to forfeiture.
DA and Coinbase Detail Spektor Investigation
Brooklyn District Attorney Eric Gonzalez described the sentence as an important result for the office’s Virtual Currency Unit. Gonzalez said the case involved a long-running social engineering operation that targeted nearly 100 victims and resulted in what he characterized as a digital robbery.
According to Gonzalez, investigators reconstructed the digital evidence used to identify Spektor, traced the movement of the stolen funds and assembled evidence supporting the prosecution. He also warned that cryptocurrency scammers would continue to face efforts to track transactions across the blockchain.
Coinbase Chief Legal Officer Paul Grewal said the exchange assisted investigators by helping identify Spektor and the affected customers, providing evidence for the case and supporting efforts to trace and recover stolen cryptocurrency.
The case also underscores the importance of recognizing common cryptocurrency impersonation scams. The Brooklyn District Attorney’s Office repeated its warning that Coinbase and most legitimate companies will not call customers unexpectedly or instruct them to transfer cryptocurrency to a so-called “safe wallet.”
Caller ID information, sender identities and lookalike websites can all be manipulated by scammers. Users should therefore verify account-security requests through official in-app support channels and be particularly cautious when someone pressures them to move cryptocurrency immediately.

More Stories
Bitcoin Drops to $83,300 as Bond Yields Reach 2007 High
Traders See Four Fed Rate Hikes by June 2027 as Bitcoin Falls Below $83K
Bitcoin Shrugs Off Rising Bond Yields Over the Long Term, Data Shows