According to U.S. prosecutors, a young Canadian orchestrated a massive cryptocurrency theft worth more than $13 million, funding a lavish lifestyle in Miami and Los Angeles complete with luxury cars, expensive jewelry, and private jet flights. The defendant, Trenton Richard Johnston, pleaded guilty on Tuesday to conspiracy to commit money laundering in relation to the scheme.
Social engineering at the heart of the charges
Court documents reveal that around January 2024, Johnston and his associates launched a scheme targeting cryptocurrency users. Prosecutors detailed how the group impersonated employees of Google, Trezor, and other major crypto firms, gaining unauthorized access to victims’ accounts. Trezor, notably, manufactures hardware wallets designed to keep users’ private keys offline for maximum security.
Glossary: Social engineering is a deceptive technique targeting human behavior rather than technical vulnerabilities. Attackers pose as trusted institutions or individuals to trick users into surrendering passwords, verification codes, or wallet access.
The case records show that, in February, one victim was convinced their Google email and Coinbase accounts were compromised, allowing the theft of roughly $41,000 in Ether. Less than a month later, another California-based victim was duped by scammers posing as Google and Trezor representatives. In this incident, a wallet containing about $13 million in Bitcoin was completely drained.
Cyvers CEO and co-founder Deddy Lavid pointed out that today’s largest crypto thefts often stem from manipulative tactics targeting people, rather than complex software exploits.
Stolen assets funneled into luxury spending
Prosecutors stated that around $1.2 million of the stolen crypto was spent in just two months on luxury expenses in Miami and Los Angeles. A significant portion of this sum went toward purchasing and renting high-end vehicles—with Brandon Tardibone, a car rental business owner who also pleaded guilty to money laundering, facilitating many transactions. The splurges included two BMWs and a Lamborghini Aventador SVJ.
Investigation files indicate stolen funds also paid for private jet charters, renting a house in North Miami, and airfare for two people from New York. Prosecutors alleged that all these luxury expenses were covered with proceeds from the crime.
Lavid emphasized that crypto transactions, which occur almost instantly and are typically irreversible, make these types of attacks particularly dangerous.
Traffic stop leads to a breakthrough in case
The investigation gained momentum in March when Johnston was pulled over for speeding in a Rolls Royce. Authorities found 21 pills suspected to be amphetamines in the vehicle. Further examination of his seized laptop, phone, and handwritten notes revealed clues linking him directly to the orchestrated fraud.
Following his arrest, Johnston handed over approximately 53.16 Bitcoin and 275.23 Ether to authorities—cryptocurrencies worth a combined $3.7 million at current prices. Prosecutors recommended a sentence of between 51 and 63 months in prison for Johnston, citing his guilty plea and full cooperation. Charges of wire fraud could be dropped as part of the agreement. Tardibone faces a recommended sentence of 27 to 33 months.
U.S. officials rack up similar convictions
This case stands as one of the latest in a series of high-value crypto crime prosecutions by U.S. authorities. In April, a California resident received a 70-month prison sentence for his role in a $263 million crypto crime ring linked to social engineering and home burglary. In February, a Chinese national was sentenced to 20 years by a U.S. federal court for conducting a global crypto scam that defrauded mostly American investors of over $73 million.
Cyvers cybersecurity executives argue that educating users is no longer enough. They say wallet providers, exchanges, custodians, and banks must implement real-time security checks capable of detecting suspicious behavior and risky wallets before any funds leave the account.
