A 19-year-old Canadian with a flair for impersonating tech support just admitted to one of the more theatrical crypto heists of the year.
Trenton Johnston pleaded guilty this week in U.S. District Court in Miami to conspiracy to commit money laundering, after federal prosecutors said he and his co-conspirators drained at least $13.04 million from victims by pretending to be employees of Google, Trezor, and other crypto firms. The plea deal lets Johnston dodge wire fraud charges that could have carried up to 40 years, and sentencing guidelines now suggest he will get something closer to four or five years instead. The 20-year-old, who had a birthday in custody, has also agreed to be deported back to Canada once he serves his time. His co-defendant, a Miami man identified in the plea papers as Tardibone, pleaded guilty on the same day.
The scheme itself ran for months and was, in retrospect, depressingly low-tech. There were no zero-day exploits, no novel smart contract drains, no clever blockchain forensics workaround. Investigators say Johnston and his crew simply called and emailed victims while pretending to be the people those victims already trusted. The funds were then moved across wallets and exchanges fast enough to make recovery nearly impossible for the people who lost them.
The scam was almost embarrassingly simple
According to the plea filing, the group posed as support staff from Google, hardware wallet maker Trezor, and various exchanges, told victims their accounts had been compromised, and walked them through "verification" steps that ended with the victims moving their own crypto into attacker-controlled wallets. It is the same social engineering script that has been quietly bleeding crypto holders dry for years, dressed up with enough technical jargon to sound official. Everyone in this space has been told a hundred times that real support staff never call out of the blue and ask you to move your assets, but in the moment, with a stranger calmly explaining that "someone in Russia is trying to access your wallet," that lesson tends to evaporate. The fact that one teenager and a handful of co-conspirators were able to clear more than thirteen million dollars this way tells you how often the script still works. None of this required them to break any cryptography. They just needed someone on the other end of the phone to want to be helpful.
$1.19 million in three months, mostly on horsepower
Once the money landed, Johnston apparently decided that subtlety was for other people. Court documents allege he ran through roughly $1.19 million in luxury spending over about three months earlier this year, with the help of what the plea filing describes as an exotic car dealer who seemed remarkably uncurious about where a teenager's funds were coming from. The shopping list reads like a parody of a crypto vision board: a Lamborghini Aventador SVJ, two BMWs, jewelry, and a private jet rental for good measure. The CBC's coverage of the plea deal lays out the receipts in painful detail. Prosecutors say spending patterns like this are exactly how investigators traced the laundering operation back to him, which is what tends to happen when the proceeds of a quiet phone scam start showing up as a bright orange supercar at a dealership.
This is not even Canada's first big teen crypto heist
Johnston joins what is becoming an unfortunate pattern of Canadian teenagers ending up at the center of huge cryptocurrency thefts. A separate Hamilton man, arrested as a teenager over a single-day $48 million Canadian SIM-swap theft a few years back, is currently in U.S. prison after pleading guilty to yet another crypto theft spree he allegedly ran while out on bail. None of these cases involve breaking the cryptography behind Bitcoin or Ethereum. They are old-fashioned con jobs that happen to settle in digital assets, which makes the funds easier to move quickly and much harder to claw back once the transfer lands on chain. The result is a steady stream of young defendants, eye-watering dollar figures, and victims who often have very limited legal recovery options once the coins are gone.
What this should remind everyone holding crypto
The detail worth underlining here is that real Google support, real Trezor support, and real Coinbase support will not phone you, email you out of nowhere, or text you asking you to "move your funds to a safe wallet." If you hear those words, the call is the threat. Hardware wallets remain the right answer for serious balances, but a hardware wallet only protects you up to the point where you yourself approve the wrong transaction. Slowing down for ten seconds before approving anything would have saved Johnston's victims more than $13 million between them, and it is still the single highest-return habit anyone in crypto can build. As for Johnston, he traded a possible 40 years for something closer to four or five and a one-way ticket back to Canada, which makes the Aventador rather expensive on an hourly basis. The bigger lesson is the one that keeps repeating across these cases: the cryptography is rarely the weak link in crypto, the human at the keyboard usually is.
---------------
Author: Cedric Holloway
New York Newsroom
Breaking Crypto News
