ZachXBT Identifies Suspect in $5M Crypto Theft Impersonating Exchange Support

Prominent on-chain analyst ZachXBT has publicly identified Tiffany Milanovich as the alleged perpetrator behind a series of crypto thefts totaling at least $5 million. According to a report by CryptoPotato, Milanovich is accused of impersonating hardware wallet and centralized exchange customer support teams to deceive victims into handing over their digital assets.

How the Scheme Unfolded

Milanovich allegedly operated under the alias “Patricia Massie” in June, sending phishing emails that compromised a Trezor wallet. This attack netted approximately $1.2 million in Bitcoin and Ethereum. In October 2025, she reportedly gained control of a Coinbase account, stealing an additional $500,000 in Bitcoin.

The thefts were not limited to financial loss. Reports indicate that Milanovich mocked victims by leaving call recordings that ridiculed them, and she flaunted her ill-gotten gains through gambling, luxury purchases, and balance-verification posts on Telegram and Discord. Even after a search warrant was issued in Connecticut, she allegedly continued her criminal activities.

Implications for Crypto Users

This case highlights the growing sophistication of social engineering attacks in the cryptocurrency space. Impersonating trusted support channels is a tactic that exploits user trust, and the scale of the losses underscores the need for heightened vigilance.

For everyday users, the key takeaway is to verify all communications from wallet providers or exchanges through official channels. Never share private keys or recovery phrases, and be cautious of unsolicited messages that request sensitive information or urge immediate action.

Why This Matters

The identification of Milanovich by ZachXBT demonstrates the role of on-chain analysis in combating crypto crime. By tracing blockchain transactions and linking them to real-world identities, analysts can assist law enforcement and deter future attacks. However, it also raises questions about the security measures implemented by major platforms like Coinbase and Trezor.

As the crypto industry matures, incidents like this push for stronger security protocols and more robust user education. The legal proceedings against Milanovich will be closely watched, as they could set precedents for how such cases are handled.

Conclusion

The case against Tiffany Milanovich is a stark reminder of the risks inherent in the digital asset ecosystem. While the full extent of the losses and the legal outcome remain to be seen, the incident underscores the importance of due diligence and the growing role of blockchain intelligence in protecting users.

FAQs

Q1: Who is ZachXBT?
ZachXBT is a well-known independent on-chain analyst who investigates cryptocurrency fraud and theft by tracing blockchain transactions. He has been instrumental in identifying numerous scammers and recovering stolen funds.

Q2: How can I protect myself from phishing scams?
Always double-check the sender’s email address, avoid clicking on links in unsolicited messages, and contact the company directly through official channels if you suspect foul play. Never share your private keys or recovery phrases.

Q3: What should I do if I’ve been a victim of a crypto scam?
Immediately report the incident to the platform involved, file a complaint with local law enforcement, and consider reaching out to blockchain analytics firms or communities like ZachXBT’s for assistance in tracking the stolen funds.