hey anyone from @coinbase here? 

so some just tried to scam me over the phone pretending to be coinbase support.

i played along to see how far they go, but they were able to send me an email from no-reply@info.coinbase.com as a confirmation of legitimacy.

that’s a useful attack vector.

from email addresses are, unfortunately, fairly easily to spoof. you'd need to view the full email headers to figure out the real origin.

yep. only thing is it does not show up properly if you are using the mail app on your iphone.

based.li // /mfers // standing desk connoisseur

ooof, and "signed-by: info.coinbase.com" is baaad