Crypto Investigator Flags Alleged $5M Scam Ring

Key Highlights

• Blockchain investigator ZachXBT has accused U.S. based Tiffany Milanovich of being linked to at least $5 million in crypto thefts.
• The alleged scams targeted users of hardware wallets and centralized exchanges through fake support calls.
• ZachXBT says onchain records, chat logs, recordings, and a Connecticut search warrant helped connect Milanovich to the scam

Blockchain researcher ZachXBT has put a spotlight on an alleged crypto support scam network accused of stealing at least $5 million from victims. The investigator named U.S. based Tiffany Milanovich, claiming she acted as a caller who posed as wallet or exchange support to gain access to victims' funds.

Who Is Tiffany Milanovich?

According to ZachXBT, Milanovich allegedly worked as a “caller” in the scam group. Her role was to contact victims while pretending to represent a crypto exchange or wallet company.

The aim, according to the investigator, was to convince victims to provide information or access needed to move their crypto.

ZachXBT also claims Milanovich openly showed luxury purchases, casino activity, and stolen funds on social media. In one case, the investigator said she recorded herself speaking to victims after their money had been taken.

The claims have not been established as facts in court, and Milanovich's response to the allegations was not included in ZachXBT's post.

How the Alleged Scam Worked?

One of the largest cases highlighted by ZachXBT happened in June 2026, when a victim reportedly lost around $1.2 million in Bitcoin and Ethereum.

The investigator said Milanovich and other members of the group drained the victim's Trezor hardware wallet after a fake BitcoinIRA email was sent using the name “Patricia Massie.”

After the theft, ZachXBT said the stolen funds largely remained untouched onchain.

The investigator also linked another person using the names “bled” and “harm” to the phishing tools allegedly used by the group.

Another $500K Coinbase Theft

ZachXBT also pointed to an earlier case from October 2025, when a victim allegedly lost around $500,000 in Bitcoin from a Coinbase account.

According to the investigator, Milanovich and her group carried out the theft, while she later complained about the amount of money she received from the crime.

ZachXBT said she also shared a screenshot showing the withdrawal.

The investigation further claims that Milanovich used stolen funds in other ways, including gambling. In one case, she allegedly used a victim's stolen crypto at a casino while speaking to and mocking the victim.

Onchain Data Created a Trail

While the alleged scammers tried to hide their activity, blockchain transactions created a record that could be followed.

ZachXBT identified several wallet addresses connected to the cases and said some funds were moved through different services.

In another case from February 2026, the investigator said Milanovich allegedly showed off crypto balances during a Discord call with another threat actor.

ZachXBT linked a wallet to about $100,000 in funds and said the address later held around 631,000 DAI, with money coming through several instant exchanges from Monero.

The investigator also warned that some social media videos may have been edited to make the amount of stolen crypto appear larger than it actually was.

Authorities Already Have a Warrant

ZachXBT said Milanovich herself shared an image of a search and seizure warrant from Connecticut. The document was dated before some of the thefts described in the investigation.

The investigator also said Milanovich mentioned having a booked flight while claiming her funds had not been touched.

ZachXBT's case against her is based on more than blockchain transactions. The investigator says the evidence includes chat messages, recorded calls, social media posts and onchain data.

That combination could make the alleged activity easier for investigators to trace and connect.

ZachXBT's findings remain allegations, but the reported trail of wallet movements, recordings and online posts could provide investigators with important evidence if formal legal action follows.