SCAM ALERT: I just had a very convincing phishing attack

So I just had someone try a phishing attack on me and it was the most impressive one I have ever come across. I will explain in detail what occurred so that you can protect yourself.

&

I got a phone call (first red flag) from someone claiming to be from Coinbase support. It was a British guy who sounded like your average support person. They said that Coinbase had recently been under a data breach and my 2 factor authentication had attempted to be changed from an IP address in Europe and wanted to know if I was currently travelling abroad.

&

First thing I immediately did was lock my coinbase account. Then I said no I wasn't abroad and he assured me the change request had been cancelled. He said if you check your email then you can see a few days ago Coinbase support sent out an email talking about new data breaches and phising attempts.

&

They had sent one, from the real Coinbase (he uses this to gain authority). Then he said Coinbase doesn't normally make proactive phone calls but special circumstances around this data breach lead to them calling accounts with high account balances (mine is low, red flag). Then he said I will send you an email right now from Coinbase support official email for you to live verify that I am authentic.

&

I waited a moment, and a real email appeared from coinbase support. Screenshot here: https://i.imgur.com/B1vmoFH.png

&

At this point I was still on high alert and was 100% sure this was a scam but I was impressed at the ingenuity. There must be a portal to submit support tickets if you know someone's email. While I was waiting on the email to arrive (I was never going to give it to him) he said this should have just sent to (insert my email). So he had basic info about me.

&

He said the email address on file was also recently attempted to change, can you confirm if this is not one of your known email addresses? I said sure, and he then read an email address which was my [email protected].

&

Having my full name also would have given him more authority if I wasn't on alert.

&

At this point my account is on full lockdown and an ID is needed to unlock it so I wanted to see where this would go, where does the scam end up.

&

He says, I'm going to send you a new email from Coinbase support that will have options for you to input a new password. For now your account has been placed on a 48 hour temporary hold and then read me out a temporary password for which I could use to access my account during that time.

&

This time I knew the email that would show up wouldn't be from actual Coinbase support, but I wanted to see what it looked like. So I waited, and he was patient to wait with me. Then he said, while we are waiting I have also prompted the system to send you a text to the number on file with the account, did you receive that?

&

I checked my phone and I had received a string of texts meant to look like Coinbase support. Another authority gain for him already knowing my phone number.

&

The texts looked like this: https://i.imgur.com/SwgKTnS.png

&

I immediately knew that this is where the scam part happens. I read over the texts and then said to the guy, how much money do you guys make with this?

&

He said, what? I said this was pretty impressive, you guys must make a lot of money. I especially liked the touch of using Coinbase ticketing system to generate a real coinbase email and referencing the recent real coinbase data breach email as a point of authority.

&

He started laughing then hung up.

&

Then I got this text follow up: https://i.imgur.com/y6U4NNE.png

&

Stay safe out there friends. Obviously if you are on high alert even this phishing attempt wont get you but if you are operating on auto pilot I could see this working on many people.