Ronald Spektor, a 23-year-old Brooklyn man who stole as much as $16 million with his sophisticated social engineering operation, has been sentenced to a whopping 12 years behind bars.
He has been handed an indeterminate prison term of four to 12 years, according to the Brooklyn District Attorney’s Office.
Spektor has stolen from a total of 100 victims scattered across the United States.
He pleaded guilty on Sept. 2 to the entire 31-count indictment against him. The counts included first-degree money laundering, first-degree grand larceny, first-degree criminal possession of stolen property as well as some other offenses.
Notably, the prosecutors had sought a substantially longer term of seven to 21 years.
Spektor has also been ordered to forfeit cash, cryptocurrency, and other personal property valued at more than $500,000 and to pay restitution.
A sophisticated scheme
Coinbase was not at fault because the scheme did not stem from an infrastructure vulnerability.
Spektor was able to convince actual Coinbase customers that he worked for the company and that their cryptocurrency was in immediate danger.
Spektor would contact Coinbase users while posing as legitimate representatives of the exchange.
Victims were warned that hackers had compromised, or were about to compromise, their accounts.
They were then instructed to move their assets to a supposedly secure cryptocurrency wallet. He was able to convince the gullible victims that they alone would control the new wallet. Of course, in reality, Spektor could access it.
In some instances, the victims were persuaded to surrender wallet seed phrases. Their cryptocurrency was then withdrawn and routed through wallets linked to Spektor.
One Pennsylvania victim, for example, received a call in September 2024 from someone claiming to be "Fred Wilson" from Coinbase security. The victim had received spoofed two-factor-authentication messages appearing to come from Coinbase and Google right before the call. This helped to make the warning that his account had been compromised appear credible. He eventually lost approximately $53,150.
There were also substantially larger losses. A California victim lost more than $1 million, and a Virginia victim lost more than $900,000.
Investigators said stolen cryptocurrency was repeatedly swapped and then exchanged for other cryptocurrencies, converted to cash, and spent on digital goods.
Large portions of the proceeds ended up at gambling services and online storefronts.
Spektor allegedly used encrypted messaging platforms such as Telegram and Discord to discuss successful thefts.
Digital forensics, as well as evidence obtained through multiple search warrants, connected him to the scheme. Investigators were also able to associate his home IP address with multiple crypto wallets that received the stolen crypto.
Spektor was arrested in December 2025. He initially pleaded not guilty. His lawyer claimed that the prosecution’s allegations were based on incomplete information. Earlier this month, however, he pleaded guilty to all 31 counts, opting not to take the case to trial. Three weeks later, he received the aforementioned four-to-12-year sentence.
Arman Shirinyan
Dan Burgin
