Indian National Is Sentenced To Prison For $20 Million Dollar Fraud Scheme Involving Fake Cryptocurrency Exchange Websites

CHARLOTTE, N.C. - A citizen of the Republic of India was sentenced to prison today for stealing more than $20 million from hundreds of victims through the use of fake or "spoofed" websites mimicking the cryptocurrency exchange website Coinbase, announced Dena J. King, U.S. Attorney for the Western District of North Carolina. U.S. District Judge Kenneth D. Bell ordered Chirag Tomar, 31, to serve 60 months in prison followed by two years of supervised release.

Jason Byrnes, Special Agent in Charge of the United States Secret Service, Charlotte Field Office, joins U.S. Attorney King in making today's announcement.

According to filed court documents and today's sentencing hearing, from as early as June 2021, Tomar and his co-conspirators engaged in a spoofing scheme to steal millions in cryptocurrency from hundreds of victims located worldwide and in the United States, including in the Western District of North Carolina. Spoofing, as it pertains to cybercrime, is when a malicious cyber actor disguises an email address, sender name, or website URL to convince victims they are interacting with a trusted source. Court documents show that Tomar and his co-conspirators executed the fraud by spoofing Coinbase, one of the largest virtual currency exchanges in the world, that allows customers to buy, sell or trade cryptocurrencies.

Coinbase operated a "Pro" version of its exchange, which was found at the URL "Pro.Coinbase.Com." According to court documents, Tomar and his co-conspirators spoofed the Coinbase Pro website by using a similar fake URL, CoinbasePro.Com, and created a fraudulent website to mimic the authentic website. Once victims entered their login credentials into the fake website, an authentication process was triggered. In some instances, victims were tricked into providing their login and authentication information of the real Coinbase website to fraudsters. Other times, victims were tricked into allowing fake Coinbase representatives to execute remote desktop software, which enabled fraudsters to gain control of victims' computers and access their legitimate Coinbase accounts. The fraudsters also impersonated Coinbase customer service representatives and tricked the users into providing their two-factor authentication codes to the fraudsters over the phone. Once the fraudsters gained access to the victims' Coinbase accounts, the fraudsters quickly transferred the victims' Coinbase cryptocurrency holdings to cryptocurrency wallets under the fraudsters' control.

Court documents show that, in February 2022, a victim located in the Western District of North Carolina attempted to log into his Coinbase account through the fraudulent website. The spoof website immediately notified the victim that his account was locked and prompted the victim to use a number provided to call a fake Coinbase representative. The fake representative tricked the victim into providing his two-factor authentication information, ultimately gaining access into the victim's real Coinbase account. Using the information, fraudsters stole cryptocurrency from the victim's Coinbase wallet worth over $240,000.

According to court records, Tomar used the victims' stolen log-in credentials to access the victim accounts and transfer the victims' cryptocurrency holdings to wallets controlled by Tomar. After Tomar received the stolen cryptocurrency, he would convert it to other forms of cryptocurrency and move the funds amongst many wallets controlled by Tomar. Ultimately, the cryptocurrency was converted into cash which was then distributed to Tomar and his co-conspirators.

Tomar used the victims' funds to pay for his lavish lifestyle, including to purchase Audemars Piguet and other expensive watches, to buy luxury vehicles like Lamborghinis and Porsches, and to make trips to Dubai, Thailand and elsewhere.

On December 20, 2023, Tomar was arrested at the Atlanta airport upon entering the United States. On May 20, 2024, Tomar pleaded guilty to wire fraud conspiracy. Tomar remains in federal custody and will be transferred to the custody of the Federal Bureau of Prisons upon designation of a federal facility.

U.S. Attorney King commended the U.S. Secret Service for their investigation of the case and thanked the FBI in Nashville for their invaluable assistance.

Assistant U.S. Attorney Matthew T. Warren of the U.S. Attorney's Office in Charlotte is prosecuting the case.