ZachXBT Traces $5M Crypto Thefts to US-Based Support Impersonation Scammer

Onchain investigator ZachXBT named a US-based threat actor, Tiffany Milanovich, who is tied to at least $5 million in crypto theft through fake support calls.  According to his findings, Milanovich worked as a “caller,” phoning victims while posing as support staff and talking them into surrendering access to their funds.

He said she recorded herself taunting victims after draining them. How the Impersonation Scheme Worked Milanovich worked as part of a group.

As the caller, she impersonated the hardware wallet and centralized exchange support.  A separate actor using the aliases “bled” and “harm” supplied the phishing-panel infrastructure, according to the report.  In June 2026, a victim lost $1.2 million in Bitcoin (BTC) and Ethereum (ETH) after the group drained the victim’s Trezor wallet.

The attack began with a spoofed BitcoinIRA email sent under the alias “Patricia Massie.” ZachXBT said the bulk of the stolen funds remain dormant onchain. An earlier theft in October 2025 cost a victim $500,000 in Bitcoin after the group drained a Coinbase account.