Hey, this is Brett Miller contacting you from the Coinbase security team. Do I have the pleasure of speaking with [NAME] today?

Alright, perfect. Please note that I am calling from a recorded line for quality assurance purposes.

The reason for the call today, [NAME], is that we’ve noticed some suspicious activity involving your Coinbase account, associated with your email address [EMAIL]. I can see that a new device logged in from Richmond Virginia, as well as an attempted withdrawal from a flagged IP address. Just to confirm, was this you?

Okay, that’s not good to hear. I also see an attempted email change and password reset for your Coinbase account, the email change being to a Mohammad25@gmail.com. Was that you?

Got it. Well, [NAME], I see that your normal login location is from [LOCATION], and this new device is from Richmond, Virginia. This is definitely fraudulent activity.

[SIR/MAM], in case this call gets disconnected, are you able to write down this ticket number for me? Perfect. Let me know when you're ready. The ticket number is 5292809.