A recent investigation has shed light on a social engineering scam where the perpetrator, known as Ronald Spektor (or Ronaldd), allegedly played a pivotal role in stealing $6.5 million from a single victim last month.

The victim, based in the US, reached out on October 7, 2024, after receiving a phone call from a spoofed number impersonating Coinbase support, which led them to a phishing website.

Following the theft, tracking revealed that the stolen funds were funneled through eXch on Ethereum and Bitcoin before being converted into Litecoin and transferred to multiple services. However, the case took a more personal turn when, just a day after the theft, Ronald was seen flaunting $3.1 million received via Ledger Live during a Discord screenshare on October 8, 2024.

Further investigation tied Ronald to the fraud through a now-deleted Telegram channel, where a wallet address linked closely to the $6.5 million theft was revealed. The connection was strengthened when a TON address tied to Ronald’s Telegram number was traced back to multiple exchanges. Through timing analysis, it was found that these exchanges had processed withdrawals from Coinbase, suggesting additional victims of impersonation scams.

Public data breaches have exposed more about Ronald, including his email, New York IP address, and full name, linking him to other known scams. Tragically, the victim deleted their X account after receiving poor advice, further hindering the investigation.

While it’s unclear who Ronald’s accomplices were, Ledger screenshots show only $3.1 million of the stolen $6.5 million, leaving much still unanswered. Ronald’s Telegram account has since been deleted, adding to the mystery surrounding the case.

Disclosure: This is not trading or investment advice. Always do your research before buying any cryptocurrency or investing in any services.

Follow us on Twitter @nulltxnews to stay updated with the latest Crypto, NFT, AI, Cybersecurity, Distributed Computing, and Metaverse news!