Onchain investigator ZachXBT named a US-based threat actor, Tiffany Milanovich, who is tied to at least $5 million in crypto theft through fake support calls.
According to his findings, Milanovich worked as a “caller,” phoning victims while posing as support staff and talking them into surrendering access to their funds. He said she recorded herself taunting victims after draining them.
Milanovich worked as part of a group. As the caller, she impersonated the hardware wallet and centralized exchange support.
A separate actor using the aliases “bled” and “harm” supplied the phishing-panel infrastructure, according to the report.
In June 2026, a victim lost $1.2 million in Bitcoin (BTC) and Ethereum (ETH) after the group drained the victim’s Trezor wallet. The attack began with a spoofed BitcoinIRA email sent under the alias “Patricia Massie.” ZachXBT said the bulk of the stolen funds remain dormant onchain.
An earlier theft in October 2025 cost a victim $500,000 in Bitcoin after the group drained a Coinbase account. ZachXBT said Milanovich complained about her cut and posted a screenshot of the withdrawal herself.
Follow us on X to get the latest news as it happens
Milanovich openly displayed stolen proceeds, luxury purchases, and casino gambling on social media, the investigator said. She allegedly gambled a victim’s funds at a casino. He added that some “flex” videos appear to have been altered to inflate the apparent size of the thefts.
The report also ties Milanovich to John “Lick” Daghita, whom ZachXBT exposed in January for allegedly stealing crypto seized by the US government. Daghita was later arrested in Saint Martin in March.
“Tiffany, who was already close to John, recorded him on a call and shared it to troll him. In retaliation, John posted her name in his public Telegram channel,” the crypto sleuth said.
These scams sit within a growing wave of impersonation fraud. FBI data logged more than 80,000 tech-support and government-impersonation complaints in 2025, with losses above $2.9 billion. Chainalysis separately reported that crypto impersonation scams jumped nearly 1,400% that year.
Subscribe to our YouTube channel to watch leaders and journalists provide expert insights
The post ZachXBT Traces $5M Crypto Thefts to US-Based Support Impersonation Scammer appeared first on BeInCrypto.
The U.K.’s Financial Conduct Authority is exploring how tokenized gold could fit into wholesale markets, including its use as collateral. The discussions come as London
South Korea will expand its crypto Travel Rule to all transfers between registered virtual asset service providers (VASPs), removing the current 1 million won (about $700) threshold.The country’s Cabinet approved amendments to the Enforcement Decree of the Act on Reporting and Using Specified Financial Transaction Information on Tuesday.Under the changes, the Travel Rule will apply to all transfers between registered crypto service providers regardless of value. Receiving platforms will also be required to obtain sender and recipient information and may request missing information or reject transactions when required data is unavailable.Removing the threshold is intended to prevent users from circumventing the rule by splitting transfers into smaller amounts, according to the Financial Intelligence Unit. It cited one case in which a user bought Tether USDt (USDT) after depositing about 200 million won into a crypto exchange and then made 216 withdrawals, each worth less than 1 million won.Related: South Korea plans stablecoin rules as opposition pushes crypto tax repealSouth Korea tightens rules for overseas exchanges, personal walletsThe amendments also introduce new Anti-Money Laundering (AML) requirements for transfers involving overseas crypto exchanges and personal wallets.Registered local VASPs will be required to determine which transfers they allow based on the risk posed by the counterparty. Transfers to low-risk overseas exchanges will be permitted, while transfers involving other foreign exchanges and personal wallets will generally be allowed when the sender and recipient are the same person.However, transactions involving counterparties deemed high risk will be prohibited.Crypto platforms will also have to establish their own suspicious transaction monitoring systems for transfers worth at least 10 million won involving foreign exchanges or personal wallets.South Korean authorities said suspected money laundering involving overseas exchanges and personal wallets has increased as gaps in existing AML rules governing such transfers have been exploited.The decree also strengthens registration requirements for crypto service providers, including financial health, internal controls, staffing and infrastructure standards, while expanding scrutiny of major shareholders.The VASP registration provisions will take effect on Aug. 20, although existing providers will have an additional year to comply with some financial, staffing, infrastructure and internal control requirements. The expanded Travel Rule and other transfer-related AML requirements will take effect six months after the decree is promulgated.Asia Express: Thailand’s 0% crypto tax. Bitcoin Red Team forced to use Chinese AI
The escalation in Yemen’s conflict risks broader regional instability and could draw in more international actors, complicating peace efforts. The post Houthis escalate Yemen conflict
Trump Media & Technology Group (DJT) posted a $238.1 million net loss for the second quarter of 2026, with unrealized markdowns on its crypto and
Blockchain Bodega is here and you know the vibes. We’re at the intersection of hip-hop culture and web3, exploring this new digital frontier. Who better to guide you through these uncharted lanes than Ock Chain – The Bitcoin Boss and the Consensus Corner Boys?
Ock Chain doesn’t just cook up random details about cryptocurrency; he lives it. Ock’s been deep in the game since Bitcoin was just a baby.
And let’s not forget about the Consensus Corner Boys. They’re our skilled crew of blockchain enthusiasts. They’re here to educate, entertain, and enlighten.
Welcome to Blockchain Bodega!
Copyright © 2023 Blockchain Bodega. All rights reserved.