@coinbase_claim (Telegram)

@coinbase_claim is the same brand-wrap impersonation pattern as the giveaway variant, with the suffix chosen to catch a different moment: someone who believes they have money, an airdrop or a refund waiting to be claimed. That framing is the whole trick. A "claim" implies the money is already yours, so handing over a wallet connection or a recovery phrase feels like collecting rather than sending. It is not — a wallet connection to a malicious contract can empty the wallet in one signature, and a recovery phrase hands over everything permanently. Generated by the GACS exchange-typo seeder and listed temporarily, ahead of any confirmed report.

Originally published on GACS — Global Anti-Crime & Safety. Verify the latest status of this report at https://gacs.app/scam/coinbase-claim-telegram-107ae4. Browse the full public scam registry, see live scam alerts, or report a scam. © GACS · Licensed CC BY 4.0 with attribution to gacs.app.

1. 1Register a Telegram handle wrapping the Coinbase brand with "claim".
2. 2Target users expecting a refund, airdrop or account recovery.
3. 3Send a claim link or a connect-wallet request.
4. 4Drain the wallet on signature, or harvest the recovery phrase.

• Handle matches the brand-wrap impersonation pattern for Coinbase.
• Generated by the GACS exchange-typo seeder; not yet confirmed by community reports.

Limits of this evidence: Pattern-based listing, no confirmed attack observed. Coinbase support does not initiate contact on Telegram.

A post promises free tokens, a prize draw, or that any crypto you send will come back multiplied. Entry requires reposting and dropping your wallet address in the replies. The address harvest is the real product: it feeds later dusting, phishing and targeted approaches, and anyone who actually sends funds never sees them again.

• "Send X, get 2X back" — no legitimate exchange has ever run this
• Asks you to post your wallet address publicly
• A countdown or a "only 5 winners" scarcity hook
• Replies are filled with fake winners posting thanks

• FTC — Cryptocurrency giveaway and celebrity-impersonation scams
• FBI IC3 — Cryptocurrency fraud reporting

Sources and method

• Coinbase — Avoiding phishing and scams

  Coinbase never asks for your recovery phrase.

• CISA — Recognize and report phishing

  General guidance on claim-link phishing.

• GACS impersonation sweep

  Generated by our brand-impersonation sweep, which enumerates the handle shapes fraudsters build around major exchange names and checks whether each one exists and is active.

• 1 community report

  Independent submissions from people who ran into this. Reports are matched on the identifier, not the name, so renaming does not reset the count.

Checked against our live signals at listing time and re-checked whenever the identifier appears in a new report or feed update. This listing has also been reviewed by hand: the narrative above was written from the observed evidence, not generated. If you believe this listing is wrong, you can appeal it and we will re-check the evidence.