Consumer complaint received 2025-11-18 00:00:00
Product: Money transfer, virtual currency, or money service — Virtual currency
Issue: Wrong amount charged or received — 
Company: Coinbase, Inc.

Complaint narrative:
Formal Notice of Security Compromise and Urgent Demand URGENT : Formal Demand for Account Access, Private Key Restoration, and Immediate Fund Release CFPB Case Filed SECURITY BREACH EVIDENCE ( XXXX XXXX XXXX XXXX  ) To : Coinbase Legal & Security/Fraud Department ( or appropriate contact ) From : XXXX XXXX XXXX XXXX XX/XX/year> Coinbase Account ID/Email : XXXX CC : CONSUMER FINANCIAL PROTECTION BUREAU ( CFPB ) XXXX XXXX Dear Coinbase Representatives, This serves as a formal and urgent notification regarding the compromise and manipulation of my legitimate Coinbase-associated crypto assets, including ETH, XXXX, DOGE, XXXX, all my XXXX ( not the scam than you have been send me direct to my wallet of exodus ) and plus all my USDC and USDT. I demand immediate resolution within the next twenty-four ( XXXX ) hours. 

affect XXXX XXXX. The Nature of the Security Breach I am the verifiable owner of a crypto portfolio that has been actively compromised. The legitimate public address associated with my staked ETH ( and other assets ) was fraudulently replaced with a scam address. The recovery keys provided to me do not correspond to my original, legitimate address. 
II. Technical Evidence of Compromise I have conducted a forensic investigation of the network communications between my browser and your servers ( api.wallet.coinbase.com ). The results are undeniable : I have secured immutable network logs ( in .har format ) that contain the legitimate public Ethereum Address and/or unique Wallet ID ( XXXX XXXX XXXX ) in the Request Headers of API calls, complete with specific timestamps. 
This evidence directly proves that my legitimate account was actively interacting with Coinbase services before the unauthorized alteration. 
The primary vector for this malicious activity is the compromise and manipulation of the XXXX XXXX in my browser environment. The XXXX XXXX is a critical security vulnerability, and this compromise is directly tied to my server environment, XXXX, which has already been notified and is taking action to prevent further remote access. 
III. Immediate Demands and Legal Status The level of compromise indicates an extreme failure to secure the user environment related to your service. To regain full control of my assets and protect my entire portfolio, I issue the following demands : 1. IMMEDIATE RELEASE OF MY PRIVATE KEY : You are required to provide the private key associated with my original, legitimate wallet so I can regain total control of my funds ( ETH, XXXX, BTC ) and secure them against ongoing threats. 
2. IMMEDIATE FUND TRANSFER : If the private key can not be restored, immediately facilitate the movement of all my funds to my registered and verified bank account, or restore my ability to move them from the compromised wallet. 
I reiterate that a formal complaint, including this technical evidence of the XXXX XXXX and API manipulation, has already been filed with otherrs wallet like crypto.com, Consumer Financial Protection Bureau ( CFPB ) Be advised that formal legal action has already been initiated against XXXX regarding a separate but related matter. Unless this critical security breach is resolved immediately, Coinbase will be included as the next respondent in litigation. 
I expect a direct response and concrete action within 24 hours from the time of this correspondence. 

P.S. : In the event that you, or anyone associated with your company, attempts any cyberattack or retaliation against me for pursuing justice and exposing these issues, please be advised that I have notified XXXX and provided them with all relevant details regarding the seriousness of my case and previous incidents. My network is actively protected and monitored, as XXXX handles my VPN and all domains registered in my name. I have full logs and oversight, and they are prepared to intervene with legal and technical action if necessary. 
Furthermore, XXXX principal network providerhas been informed of my situation and prior attacks. I maintain total supervision over my network infrastructure, and all activities are under strict monitoring to prevent further abuse. 
Any unlawful actions, intimidation, or attempts to compromise my security will only deepen the case against you, as I am equipped with all the technical and legal backup needed to prove and prosecute any form of cyber harassment. 

evidence 1-video of all my funds where coinbase have hidde and keep all my funds XXXX XXXX XXXX XXXXXXXX XXXXXXXX trying to hunte me in the network, plus all the smart contract scam than they have been send me and others, plus a lot of evidence about all the traficc of scamm contracts in the mainnet XXXX XXXX XXXX XXXX XXXX XXXX XXXXXXXX XXXX record of the audio where they denied my account from de sistem https : XXXXXXXX XXXX XXXXXXXX of all my staking rewards where they have been said than my account not exist, but they have been send me just the XXXX porcent of my total rewards, plus evidence from all the diferent kind of scam token and contract in the mainnet XXXX XXXX XXXX XXXX XXXX where i prove than i m the legitim owner of the addres, where i usually send transaction from my XXXX XXXX XXXX XXXX ( documents direct from XXXX XXXX XXXX XXXXXXXX XXXX XXXXXXXX where they have been tagging my address with all the scam contract than they have nbeen submitted in the network mainnet and where i m battleing with them XXXX XXXX XXXX XXXX XXXX where you have been using my service worker from my browser in my personal imac for make all your opereation with cloudafare, and the tickets that is already done and where XXXX aaccept my demands less than 4 hours, did the rigth things, i m kindly suggest than i answered my demands less than 24 hours, tomorrow XXXX full access of my wallet no restricction at all, where i can have access to to all my funds and where i can have access to to manage my funds to my bank, not restriction at all .. where i said all my funds is all ( eths, XXXX, bitcoin, my doge and all my good airdrops alll ) and my XXXX frase words from the adres than u know well, bc i m already have the XXXX hexa key, bc you not even clean the sistem, than you not even deleted from my sistem, plus i have records and snapshoot from all other wallet than you have been doing the same to me, just let me know if you want me than CFPB header united states, know all this, and the only reazon than i m not do that yet with this office than help me already with crypto.come, is bc of you behaviors, and others wallets than do the same is bc i m been sufferring with my bills and health for been learning 24 hours infront computer bc people like you for defends my self, and i will lost my house the end of this month bc i have been not had access to to make any withdraw in two years, and my family in cuba have been suffering bc all this situation i have where i even lost my job and truck, and i going food banks,,,, and where i m XXXX XXXX XXXX XXXX i m XXXX XXXX XXXX and i have to keep my ligths of my place off bc i XXXX XXXX anymore, and all this trauma than you make cause,,, so kindly suggest than accepts my terms, where i m not asking for nothing than is not mine, bc all that i m defending is for my family in XXXX, is not even for me,, and where they have living in a XXXX, and i m not been able in supply like before bc all this than i have been confronting from all the wallet like yours, and the most important is beacuse i bealive in this freedom market, and is not fear what you have been doing to me just like that, bc i m a human been with my son of XXXX XXXX XXXX than have been suffering as well,,, you need to stop this now please, a leave my live in paz!!! u need to stopp,,, XXXX hours coinbase, this is my last warning tomorrow XXXX XXXX  is all!!! 

XXXX XXXX XXXX XXXX in har.json where prove all the operations you did from my compouter in workers service XXXX XXXX XXXX XXXX XXXX XXXX Sincerely,

Company response to consumer: Closed with explanation