Canadian Hacker 'Haby' Accused of $2M Theft via Coinbase Support Impersonation

Canadian Hacker 'Haby' Accused of $2M Theft via Coinbase Support Impersonation

Blockchain investigator ZachXBT reports that Canadian threat actor 'Haby' used Coinbase support impersonation to steal funds later spent on luxury usernames, clubs, and gambling in the Vancouver area.

BTC
XRP

Fact Check
The evidence strongly supports the truthfulness of the statement. The primary source is an investigative thread from the highly authoritative (0.95) on-chain sleuth ZachXBT, who is the origin of the accusation. This source directly alleges that a Canadian threat actor named 'Haby' stole over $2 million by impersonating Coinbase support staff. This central claim is consistently and directly corroborated by multiple secondary sources, including news reports from Live Bitcoin News, Rootdata, and MEXC. While these secondary sources have lower authority scores, their complete agreement on every key detail (nationality, alias, method, and amount) reinforces the primary claim. Another social media source also amplifies the original report. There is no conflicting evidence presented. The sources that are not relevant discuss entirely different cybersecurity incidents, individuals, or companies, and do not contradict the specific claims about 'Haby'. The statement accurately reflects that this is an 'accusation', not a legal conviction, which is precisely what the sources describe: a public accusation based on an investigation by a well-regarded crypto sleuth. The consistency across all relevant sources and the high authority of the primary source lead to a high confidence assessment.
    Reference123
Summary

On Dec. 30, ZachXBT identified Canadian hacker 'Haby' as responsible for stealing over $2 million in cryptocurrency in the past year by posing as Coinbase customer support. The blockchain investigator traced the stolen funds to purchases of rare social media usernames, club-related expenses, and gambling activities. 'Haby' is suspected to be located near Abbotsford, Vancouver. Previous findings linked him to thefts of 21,000 XRP worth approximately $44,000 and multiple incidents affecting at least five Coinbase users, with losses exceeding $1.06 million. On-chain analysis connected his BTC address, and his Telegram and email accounts were exposed.

Terms & Concepts
  • XRP: A digital asset associated with the Ripple payment protocol, used for fast and low-cost transactions.
  • BTC address: A unique identifier for receiving Bitcoin transactions on the blockchain.
  • Coinbase: A major U.S.-based cryptocurrency exchange platform used for buying, selling, and storing digital assets.