ZachXBT Exposes $5M Crypto Scam Suspect Impersonating Exchange Support

Woofun AI reports that on-chain analyst ZachXBT has publicly identified Tiffany Milanovich as the perpetrator behind a series of crypto thefts totaling at least $5 million, as detailed by CryptoPotato. Milanovich is accused of impersonating hardware wallet and centralized exchange customer support teams to deceive victims into handing over their digital assets, allegedly operating under the alias "Patricia Massie" during the initial phase of her crimes.

The deeper driver of the initial breach occurred in June, when Milanovich sent phishing emails that compromised a Trezor wallet. This specific attack netted approximately $1.2 million in Bitcoin and Ethereum, marking the first significant financial loss attributed to her impersonation tactics. The success of this operation relied heavily on the victim's failure to verify the authenticity of the communication source.

Notably, the criminal activity escalated in October 2025, when she reportedly gained control of a Coinbase account, stealing an additional $500,000 in Bitcoin.

Woofun AI data shows that subsequent behavioral evidence of guilt included call recordings that ridiculed victims, alongside flaunting ill-gotten gains through gambling, luxury purchases, and balance-verification posts on Telegram and Discord. These actions demonstrate a blatant disregard for legal consequences and a pattern of psychological manipulation.

Structurally, the case highlights the growing sophistication of social engineering attacks in the cryptocurrency space, even after a search warrant was issued in Connecticut. Impersonating trusted support channels is a tactic that exploits user trust, with the scale of the losses underscoring the critical need for heightened vigilance regarding private keys and recovery phrases. The persistence of these activities despite law enforcement intervention reveals significant gaps in current platform security measures.

This marks a pivotal moment for the role of on-chain analysis in combating crypto crime, as tracing blockchain transactions and linking them to real-world identities assists law enforcement and deters future attacks.

However, it also raises questions about the security protocols implemented by major platforms like Coinbase and Trezor, pushing for stronger user education and robust legal proceedings. The outcome of these cases will set important precedents for how such incidents are handled within the digital asset ecosystem.