American woman found herself at the center of a $5 million cryptocurrency theft scheme — investigation details
The high-profile case of the theft of $5 million in digital assets has reached a new level: at the center of attention is U.S. citizen Tiffany Milanovich, linked to a series of sophisticated attacks on cryptocurrency users. This is not about code hacking, but about classic social engineering, perfected to a fine art.
Milanovich, according to my information, played the role of a "call operator" in the criminal group. She called victims, posing as a customer support employee of crypto services, and convinced them to hand over control of their funds. After draining their accounts, she recorded videos mocking the victims—a level of cynicism rarely seen even in the most high-profile cases.
The Attack Scheme
The mechanics of the crimes were refined down to the smallest detail. Milanovich pretended to work in the real support teams of hardware wallets and centralized exchanges. The infrastructure for phishing sites was provided to her by accomplices under the pseudonyms "bled" and "harm." In June 2026, one victim lost $1.2 million in Bitcoin and Ethereum after trusting a fake email from BitcoinIRA signed by Patricia Massi. The funds were withdrawn from a Trezor wallet, and notably, most of the stolen assets remain untouched to this day—the funds are still on on-chain addresses.
In October 2025, the group struck again: a victim lost $500,000 in BTC after funds were withdrawn from a Coinbase account. Milanovich, according to available information, complained about her "small share" and even published transaction screenshots—apparently to confirm her status within the group.
Traces of Luxury and Casinos
Milanovich's spending was anything but modest. On social media, she openly showcased purchases of luxury goods and casino bets made with other people's money. Moreover, some of the "boastful" videos were edited to make the theft amounts appear even larger than they actually were—a psychological tactic designed to intimidate and keep victims silent.
Interestingly, the investigation links Milanovich to John "Lick" Dagita, who was previously accused of stealing cryptocurrency seized by U.S. authorities. Dagita was arrested in March on Saint Martin, pointing to possible international connections of this group.
A Trend That Cannot Be Ignored
Such schemes are just the tip of the iceberg. The FBI recorded more than 80,000 complaints about impersonation of tech support staff and government agencies in 2025 alone, with losses exceeding $2.9 billion. Chainalysis, in turn, notes a nearly 1,400% increase in such attacks in the crypto sector over the past year.
My conclusion: this case is a stark reminder that in cryptocurrencies, the main vulnerability is not the code, but the human. As long as users believe calls "from support" and click links in emails, such groups will keep finding new victims. Always verify contacts through official channels and remember: no reputable exchange or wallet will ask you to "hand over control" of your funds. Stay vigilant, or the next mocking video might be recorded after your call.