1/ Meet Sushil Chouhan, An Indian national who owns a scam call center in New Delhi, India. He has been scamming thousands of innocent people since November 2023.

RT @anydesk: Something big happened in London. 🚨. @ScammerPayback @trilogymediainc @JimBrowning11 @_JohnHammond @G9Agent @NanoBaiter @Kit….

15/ This entire heist came down to simple mistakes. 1. No 2FA on his Coinbase account. 2. Full screen share access handed over without a second thought. To be fair, he was an elderly man who truly believed he was connecting to a “Coinbase secure server.” That is all it took.

14/ Thank you @CagneyAvah (A victim advocate) for helping me get ahold of him one last time. We broke everything down and fully educated him about how the scam worked. In the end, a bit of teamwork and perseverance saved this victim.

13/ For the first time, he changed his Coinbase password just in case Shelby wasn’t who she claimed to be. He even demanded she send an official email from Coinbase to prove she was real.

12/ He didn’t know who to believe. The strangers calling to warn him or the scammer pretending to be Coinbase support guiding him deeper into the trap.

11/ I finally got the victim on the phone and laid everything out. I walked him step by step through how the scam worked, how Shelby was watching his screen, and how close he was to losing everything.

10/ Even after his son warned him, the victim picked up the phone and called the scammer back. He was so completely convinced he was talking to real Coinbase support that he kept reopening ConnectWise, believing it was the “secure server” protecting his money.

9/ When I called the victim, he ignored every attempt to reach him. The scammer had already told him to reject all unknown numbers. With time slipping away, I called his son as a last resort.

8/ This victim held almost $850,000 in bitcoin. Trying to steal that much money wasn’t about skill. It was pure luck they stumbled onto such a massive target. Scammers google search: "Can i send 1 million crypto in a day" lol

7/ In this case, the scammer Shelby was walking the victim through “securing” his account. He called the phone number on the fake website, and she tricked him into installing ConnectWise on his iPhone.

6/ I spotted one scammer, “Shelby” (Fake name), logging every phone call and storing future victims details in a simple notepad. (Data includes). 1. General victim information. 2. Coinbase login credentials. 3. Seed phrases/private keys

5/ These fraud groups operate out of India, like most small crypto scam rings targeting US victims. This is their exact location and IP address I traced during the scam. IP Address: 223.190.82.191.Exact Coordinates: 28.5787325,77.2574381

4/ The scammers use Google Voice numbers and launch ConnectWise Screenshare software to take remote access of their victims' computers. This is the control panel they use to spy on victims

3/ I called them pretending to be a victim. Within minutes, I breached their computers and took remote control of their entire network.

2/ This group is a low-tier scam operation. They poison Google search results by advertising a fake coinbase login page. This is the exact same website used in the scam.

1/ Recently I hacked a group of crypto scammers impersonating @Coinbase support and they are trying to steal $800K from ONE victim!. This thread reveals how I stopped the scammers in real time and recovered $846,259.53 in Bitcoin.👇

14/ Most of this happens in invite-only group chats, but we've managed to gain access to the computers of some of the admins involved. We can see the phone calls, chat logs, wallets, live audio of ongoing scams, and so much more. That being said, if I reveal too much right now,.

13/ We're in the middle of an active investigation and while I’d love to expose the scammers, their structure, and their private group chats, I have to be careful with what I say here. These scammers aren’t just stealing, they’re actively celebrating when victims get drained,

12/ If they get someone to believe the initial pitch, they move on to the next step by messaging a telegram bot called @spoofmailer_bot. The bot will email the victim, spoofing off of "help@coinbase". The email also contains instructions for a so-called “recovery process,” which

11/ Even though these chats make it seem like people don’t fall for this scam, the reality is very different. Scammers still manage to trick multiple people every single day. (Screenshots taken from google for example purposes)