Veteran on-chain investigator Zachxbt, who has over one million followers, has exposed another perpetrator behind a multi-million-dollar crypto crime. His latest investigation targets Tiffany Milanovich, a woman operating a scam ring out of the United States. Total stolen funds linked to her activities have reached $5 million. Her primary modus operandi involved posing as customer support staff, targeting hardware wallet and centralized crypto exchange users who were facing technical difficulties.
Once victims were convinced they were speaking with official support staff, Tiffany deployed social engineering tactics. She guided confused users step by step until they handed over full access to their digital assets. After seizing control, she immediately drained the wallets of all funds. While losing assets in minutes was devastating for victims, the scammer took her actions a step further.
Mocking Victims Over the Phone
According to evidence presented by Zachxbt, Tiffany was not satisfied with just taking the funds. She was recorded intentionally calling victims right after draining their wallets. During the voice calls, her sole intent was to insult and laugh at the panic of people who had just lost their money. She made no attempt to disguise her voice, suggesting the perpetrator felt immune to law enforcement tracking.
The $5 million in illicit proceeds was not laundered through sophisticated methods. Instead, Tiffany spent the stolen funds on luxury goods, publicly flaunting her lavish purchases across her personal social media accounts. This ostentatious lifestyle ultimately left a critical digital footprint, allowing the on-chain investigation community to link her real-world identity to transaction trails on the blockchain.
One Final Security Rule
This scam proves that the weakest link in digital asset security remains the owner. While network encryption is robust, deceiving humans is far easier and cheaper than cracking computer code. For anyone holding crypto on exchanges or hardware wallets, the rule is simple: no legitimate support staff will ever ask for passwords, recovery phrases, or instruct you to transfer assets under the guise of technical troubleshooting. When you hear such requests, hang up the phone.
Reported by @zachxbt on X.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
