ZachXBT: US Attacker Poses as Wallet Customer Service in Scam, Steals at Least $5 Million in Crypto Assets
August 10th, on-chain detective ZachXBT revealed that a U.S.-based attacker, Tiffany Milanovich, is suspected of conducting fraud by impersonating a hardware wallet and centralized exchange customer support, stealing at least $5 million worth of crypto assets.
ZachXBT stated that Tiffany mainly played the role of a "phone scammer," pretending to be a staff member of a trading platform or wallet support to trick victims into handing over account access. She once recorded phone taunts to the victim after transferring the funds and publicly flaunted extravagant spending.
It was disclosed that in June 2026, a victim fell for a forged BitcoinIRA email attack, resulting in the transfer of $1.2 million worth of BTC and ETH from a Trezor wallet. ZachXBT mentioned that the perpetrator then boasted about the funds in a Telegram group, with other attackers named "bled" and "harm" suspected of providing phishing infrastructure.
Furthermore, in October 2025, Tiffany and her gang allegedly stole about $500,000 worth of Bitcoin from a Coinbase user by impersonating customer support. In February 2026, she also displayed what appeared to be the stolen fund balance in a Discord call, bragging with other attackers.
ZachXBT claimed that Tiffany is also accused of using victims' funds for gambling and taunting them during the scam. Currently, the relevant accounts have been reported, and the Shuffle platform has confirmed it will take banning actions.
ZachXBT stated that some attackers also seemingly exaggerate the theft amount through methods like faking wallet screenshots or altering videos to enhance their influence in the underground scene.