@tricil.eth
timeline of events:
2:27pm: i get this weird sms with a paypal recovery code number. that's odd
3:09pm: two emails from google workpace about an inquiry i'd made and a support rep will follow up soon
5:22pm: said rep calls me (this was actually legit and glad i'd answered as he notified me that google'd granted them access cuz they had my ID and utility bill and were able to set their device as primary on my account - we locked down my account and kicked out the bad actor
6:20pm: "ledger" calls while receiving a similar email as to google that states the employee name and case number and the ledger guy was kinda fishy i'm like "i don't have ledger recover and how can my seed phrase be compromised" but regardless i opened up my desktops Ledger Wallet app and it was logged out and wanted my seed phrase? (that's not how ledger fucking works - i almost got G. Love'd)
7:11pm: Coinbase "new login" from Frankfurt Germany email
7:13pm: Coinbase Purchase Failed email for 0.65307578 BTC (and uh thank fuck that didn't go thru but wait for the below)
7:20pm: "coinbase" calls again with a simultaneous email identifying whom will be calling and they were telling me how my ledger (aren't you coinbase tho?) was compromised and to send the funds to Phantom(?) anyways i got disconnected from the guy and tried to call back and the number was disconnected. Odd. So i went thru Coinbase itself and then they were like "yeah we didn't call you and that purchase didn't happen but let's lock your account"
by this time i'd already enabled Lockdown Mode which made the actual coinbase recovery hard because safari don't play, i had to use Chrome
finally got off the phone with Real Coinbase around 9:00pm