After a Disappointing Quarter, Is Coinbase Doing Enough to Stop Email Scams?

Coinbase has had a rough few months. The largest U.S. crypto exchange reported weaker results for the second quarter of 2025. Revenue dropped by more than a quarter, and trading activity slowed sharply. At the same time, the company faced one of its most serious security incidents to date, a breach that exposed sensitive customer details. Attackers are now using that stolen data to send convincing phishing emails and text messages, tricking people into giving up access to their funds.

We look at these events together. What caused the earnings slip? What exactly happened in the breach? And, more importantly, are the new protections Coinbase rolled out strong enough to stop this wave of scams?

The Q2 Financial Shock

Coinbase posted total revenue of $1.5 billion, falling short of analyst forecasts of $1.59 billion. Transaction revenue dropped to roughly $764 million, marking a 39% decline compared to the same quarter last year. Subscription and service income fell to $656 million, coming in lower than analyst projections.

Adjusted net income fell steeply to about $33 million, down from nearly $294 million in Q2 2024,  a drop of around 90%.
Operating expenses rose 15%, including $307 million tied to breach-related investigations and reimbursements.
Investors didn’t like the tone: Coinbase shares dropped 6–11% after hours.

Anatomy of the Data Breach

On May 11, 2025, Coinbase revealed that hackers had paid off overseas support staff to gain access to customer information. Hackers accessed personal details of under 1% of Coinbase’s active monthly customers.

Stolen information included names, email, photo ID, masked SSNs, bank details, and transaction history, but not passwords or private keys.
Hackers demanded a $20 million ransom. Coinbase refused. Instead, it pledged a $20 million reward for tips leading to arrests.
The company estimates total costs, including legal, support, and reimbursements, could run between $180 million and $400 million.

Rise of Email & Phishing Scams Targeting Users

Since the breach, there’s been a surge in phishing scams pretending to be Coinbase support. These include wallet migration notices, fake withdrawal alerts, and urgent verification emails.
Scammers now use leaked names and partial account info to add credibility in calls, emails, and texts. Some targets have lost millions, reports suggest at least $65 million stolen around Dec 2024–Jan 2025 alone.
On Reddit, users warn of emails saying “authenticate your account in 48 hours”; they look real and have almost fooled many.
These schemes mix email, SMS, and voice calls to trick victims into revealing 2FA codes or confirming seed phrases.

Coinbase Responses & Security Measures

Coinbase published a detailed blog on May 15 explaining what data was taken and what safeguards it added. The blog clearly stated that no login credentials or crypto funds were exposed. The company is reimbursing any user who lost funds directly due to these scams. Affected users received notice via email starting May 15.

Coinbase has introduced added steps for flagged accounts, such as ID checks for large withdrawals and mandatory scam-awareness prompts during the login flow.
They also opened a U.S.-based support hub, increased insider-threat detection, automated fraud response, and launched simulated attack drills to test systems.
On its security page, Coinbase urges users to hover over links, check sender domains, avoid clicking precipitously, and forward suspicious messages to.

Are These Measures Enough?

There are clear strengths in Coinbase’s approach:

• Transparency about breach details and refusal to pay ransom builds trust.
• Investments in user protection, added support safeguards, and reimbursements show accountability.
• User education and dedicated policies to forward phishing emails help boost awareness.

Still, gaps remain:

• Scammers now have real names, partial IDs, and transaction history, making their emails so convincing that it’s hard to spot fraud.
• Losses are already large, estimates exceed $65 million in just a few months, and full figures may be higher.
• Preventing phishing requires user vigilance, which varies widely across demographics.

Additionally, the broader crypto ecosystem faces systemic threats from romance scams, Pig‑Butchering fraud, and fraud rings that no single exchange can fully control.

Conclusion

Coinbase’s Q2 performance was clearly under pressure. A sharp revenue drop and massive breach costs dented its strong gains earlier in the year. Yet, when it came to responding, Coinbase opted for transparency, refunds for victims, stronger support infrastructure, and clear security advice. These steps show real effort.
Still, with stolen data now in the hands of fraudsters, user protections face a high bar. College‑level email reminders and blog posts can only go so far.  We need to watch if Coinbase continues to bolster automated phishing tools, educate users in-app, and use machine learning to detect scams before they hit inboxes. Only time will tell if their response truly keeps pace with the evolving threat.

FAQS:

Disclaimer:

This content is for informational purposes only and not financial advice. Always conduct your research.