Forum Discussion
Fraudulent activity by a TMobile employee switching my SIM # to a new device to steal funds
Hello, Sorry for the long post to follow. Here is what happened to me recently. On Sunday 1/19/2020 around 2:30pm, I noticed that I lost T-Mobile network connection. Everybody around me, in...
Gosh, that's a nightmare of a situation especially considering you may not be able to get those funds back from coinbase. I know that with every day passing you need more answers. Unfortunately, this is a situation that only our fraud team can handle. I hate to repeat the same info you've been given multiple times, but we have to allow the fraud department to research what exactly happened which will determine the outcome.
Hey Aznfrenchboyca, this just happen to me 2 days ago. I lost network for about 10-15 minutes and got my signal back. I didn't know what happen till the next day after I did some more searching. Look in your deleted emails and restore any deleted emails. You will find all the details password being changed and transactions from CoinBase. They hacked by switching SIM and getting the text to reset your email account. Once the got in, they were able to reset your password for CoinBase and get pass the 2FA when they had your cellphone number.
I also called Tmobile to verify my SIM was switched and was switched back after 10-15minutes. They also told me it was a glitch. I have a PIN Setup too but they were able to bypass that somehow. I asked how did they switch it and they said it was in store and a tech may have accidently switched it. Seems like this is very well coordinated scheme by a Tmobile employee or someone with Tmobile account access. It took them less than 15minutes to switch SIM, reset/change my email password with phone number, reset/change CoinBase password. Then get money out from CoinBase. I removed my banking info from CoinBase. It is not secure enough to keep it on there.
the IP address logged to change my password is 141.98.25.168 and it's from the United Kingdom. I wonder if it's the same people since I got hacked only a few weeks from yours.
