CNBC exec almost lost his crypto in minutes and was saved by an AI chatbot. Here’s how to spot impersonation scams

Nobody is just too sensible to get scammed. Just ask Jason Gewirtz, the vp of stories at CNBC.

As he revealed in a column for CNBC, Gewirtz lately got here shut to handing entry to his total cryptocurrency portfolio over to somebody posing as a Coinbase safety consultant (1). Business journalists are sometimes educated to be skeptical and alert to monetary fraud, but this rip-off was so convincing that Gewirtz practically fell for it.

What saved him was having to droop the decision to attend a piece assembly. With the convincing voice now not pressuring him to act, Gewirtz was ready to take a beat and acknowledge a number of crimson flags from the decision. He even used synthetic intelligence, in addition to a contact of his who used to work at Coinbase, to determine what was occurring.

While Gewirtz was ready to duck the rip-off, not each sufferer is so fortunate. In truth, Gewirtz’s shut name is a reminder that scams have gotten extra subtle, and that if a veteran information govt at a significant community practically obtained tricked, nearly anybody can.

Like most individuals, Gewirtz doesn’t often choose up the telephone when it shows an unknown quantity. But since this explicit name confirmed a San Francisco quantity, the situation of Silicon Valley and one in all CNBC’s key bureaus, Gewirtz determined to reply.

The man on the telephone, who launched himself as Brian Miller from Coinbase’s safety workplace, informed Gewirtz that his account had been focused by suspicious login makes an attempt from Frankfurt, Germany. The man framed the decision as a protecting measure, saying the purpose was to cease a scammer earlier than any harm occurred.

To make the story extra convincing, the person leaned on key particulars in order to disarm Gewirtz’s skepticism. Spoofing the decision with a 650 space code was the opening technique; different strategies included referencing delicate private knowledge and sending emails that appeared to come from official Coinbase addresses.

Playing psychological video games was additionally key. The caller repeatedly emphasised urgency, warning {that a} scammer in Germany was actively attempting to entry Gewirtz’s account to make transfers.

Read More: The common web value of Americans is a shocking $620,654. But it almost means nothing. Here’s the number that counts (and how to make it skyrocket)

“He’s trying to make another transfer,” the person on the telephone informed Gewirtz, “but I have it on hold so he can’t.”

The worry of dropping entry to his crypto stored Gewirtz on the road, even when some particulars — such because the point out of a photograph in Gewirtz’s account that he was positive he by no means uploaded — didn’t add up.

It wasn’t till he obtained off the telephone and ran the addresses from the emails the caller had despatched by means of Claude — an AI chatbot from Anthropic — that Gewirtz realized he may very well be getting scammed. When Claude flagged the e-mail addresses as “almost certainly a PHISHING scam,” Gewirtz rapidly realized he had simply dodged a bullet.

“I said to myself, ‘thanks, Claude,’ while also thinking, ‘that was close.’”

Unfortunately, Gewirtz’s shut name isn’t all that uncommon, because it displays a pointy rise in crypto rip-off makes an attempt which can be turning into more durable to spot and simpler to imagine. According to Chainalysis, impersonation scams concentrating on cryptocurrency customers surged by greater than 1,400% yr over yr in 2025, with losses estimated at $17 billion (2).

Using AI to improve their talents, these scammers have a tendency to create worry and urgency to prey on their victims. And as Gewirtz’s story has proven, this playbook has the potential to idiot even skilled professionals.

Scamming strategies are continually evolving, however there are a number of key crimson flags that ought to elevate suspicion:

• Unsolicited calls about “suspicious activity” in your accounts

• Requests for passwords or private info

• Fear techniques that scare you into motion

• Instructions to switch funds to one other account

Furthermore, corporations akin to Coinbase and different crypto platforms don’t sometimes name their prospects asking for passwords, 2FA codes or to transfer their funds (3). If you obtain any communication that appears even barely suspicious, belief your instincts and run some checks earlier than doing what’s requested.

Here are some good habits to undertake:

• If one thing feels off throughout an unsolicited name, grasp up and contact the corporate immediately utilizing its official telephone quantity

• Be suspicious of worry techniques that urge you to take quick motion

• If you obtain an e-mail, examine the handle rigorously for small deviations from the corporate’s reliable addresses. For instance, Gewirtz acquired emails from @live-coinbase.com, which barely differs from Coinbase’s official @coinbase.com e-mail handle

• Never click on on hyperlinks in unsolicited emails or textual content messages, as that might lead to phishing web sites which can be designed to steal private info or set up malware

• If you might be alerted to an emergency together with your accounts, independently confirm what you’re being informed by accessing your account by means of the official web site as an alternative of hyperlinks despatched to you

Join 200,000+ readers and get Moneywise’s finest tales and unique interviews first — clear insights curated and delivered weekly. Subscribe now.

We rely solely on vetted sources and credible third-party reporting. For particulars, see our editorial ethics and guidelines.

CNBC (1); Chainalysis (2); Coinbase (3); Trustdale (4).

This article supplies info solely and shouldn’t be construed as recommendation. It is offered with out guarantee of any form.