Trenton Richard David Johnston, a 20-year-old Canadian man, has pleaded guilty to conspiracy to commit money laundering in connection with a $13.04 million cryptocurrency fraud scheme. According to U.S. court documents, Johnston and several co-conspirators posed as employees of Google, Trezor, and other companies to gain access to victims' cryptocurrency holdings. The operation began around January 2024 and relied on social engineering tactics rather than technical exploits, as reported by U.S. prosecutors. In one specific case cited in court filings, Johnston allegedly convinced a victim that their Google email and Coinbase accounts had been compromised, leading to the theft of about $41,000 worth of Ether. Weeks later, prosecutors said the group targeted a California resident by pretending to be representatives from Google and hardware wallet provider Trezor, after persuading the victim that someone was attempting to access their wallet, the scammers drained roughly $13 million in Bitcoin from the account. As reported by CBC News, Johnston reportedly texted a co-conspirator after one theft: "bro we rlly actually did some crazy [expletive] [expletive]."
The stolen funds financed an expensive lifestyle in Miami and Los Angeles, with approximately $1.19 million spent over three months on luxury vehicles, jewelry, private jet travel, accommodation, and other personal expenses. As reported by prosecutors, Johnston allegedly purchased and rented high-end vehicles including a Lamborghini Aventador SVJ and two BMWs, with stolen funds also paying for a private jet, rental property in North Miami, and travel expenses for guests. With assistance from exotic car rental business owner Brandon Michael Tardibone, who has also pleaded guilty to money laundering, the expenses ranged from car rentals in Los Angeles to "plane tickets for two girls from New York." The stolen cryptocurrency was valued at approximately $3.7 million at current market prices when Johnston surrendered the assets, with none of the assets recovered according to investigators. Johnston has agreed to be deported back to Canada after sentencing, as reported by CBC News.
Authorities linked Johnston to the scheme after a traffic stop in March while he was driving a Rolls-Royce Cullinan, with investigators later seizing electronic devices and handwritten notes that prosecutors said connected him to the fraud operation. According to court records, Johnston was found to be carrying 21 suspected amphetamine tablets in a Hermes bag and had a "strong odour of freshly burnt marijuana" in the vehicle. During the traffic stop, witnesses revealed that Johnston didn't have a real job but had made a fortune by scamming crypto holders, with all three passengers in the SUV confirming they were living off his generosity. After seizing Johnston's computer, cell phone and handwritten notes with codes to access crypto accounts, federal agents with U.S. Homeland Security Investigations pieced together the brazen fraud scheme. Court records also show that Johnston overstayed a US tourist visa after entering the country from Ontario in 2024, as reported by CBC News.
Security experts emphasize that social engineering attacks continue to drive major crypto losses, with Coinbase users among the most frequent targets. According to Cyvers chief executive and co-founder Deddy Lavid, many of the industry's largest thefts now stem from human manipulation rather than sophisticated code attacks. He noted that cryptocurrency transactions can be completed quickly and are often difficult to reverse, allowing attackers to profit after gaining a victim's trust for only a short period. Recent investigations by blockchain investigator ZachXBT estimated that social engineering scams targeting Coinbase users alone resulted in at least $65 million in losses between December 2024 and January 2025, with separate findings documenting another case involving a New York-based scammer accused of stealing more than $4 million from Coinbase customers. Lavid emphasized that education alone is unlikely to stop such attacks, suggesting that exchanges, wallet providers, custodians, and banks need systems that can identify suspicious activity and laundering patterns before funds leave customer accounts.
