Two Plead Guilty In $13M Crypto Support Impersonation Case

Trenton Richard David Johnston and Brandon Michael Tardibone have pleaded guilty in a $13 million crypto fraud case tied to fake support calls, stolen wallet access and luxury spending in Miami. The case spread quickly across crypto social channels because Johnston was linked online to the @winter handle, while Tardibone has been widely discussed as @Yelo. Federal records use their legal names.

The Southern District of Florida case initially charged Johnston, a Canadian national, with conspiracy to commit wire fraud and conspiracy to commit money laundering. Tardibone, a Miami resident, was charged with conspiracy to commit money laundering and harboring Johnston while he was unlawfully present in the U.S. Fresh plea coverage now says both men admitted to money-laundering conspiracy charges connected to the scheme.

The theft centered on social engineering rather than a smart-contract exploit. Johnston and other conspirators impersonated support representatives from a major search engine and crypto-related companies to gain access to victims’ digital accounts and wallets. New reporting also identifies Google and Trezor support impersonation as part of the victim-contact flow, with one California victim losing about 185 BTC, worth roughly $13 million at the time.

Traffic Stop Exposed The Bigger Case

The case did not begin with a clean blockchain investigation alone. Johnston’s crypto fraud exposure reportedly started after a March traffic stop in Miami involving a white Rolls-Royce Cullinan. People in the vehicle told officers Johnston had become wealthy through crypto scams, while the stop also involved suspected drug evidence.

After authorities seized Johnston’s computer, cell phone and handwritten notes, federal agents pieced together the larger scheme. The seized material reportedly included codes tied to crypto accounts, while messages recovered by investigators showed Johnston discussing the 185 BTC theft with an accomplice.

That detail is why the story caught so much attention online. A high-value crypto theft, a luxury-car lifestyle, suspected drug evidence, and a phone seizure all converged into a federal money-laundering case. The sequence also turns a familiar crypto security warning into a legal one: offchain mistakes can expose onchain crime.

Social Engineering Remains The Core Risk

The case fits the broader pattern of high-value crypto social engineering. Attackers do not always need to break a wallet, bridge or protocol. They can impersonate a trusted company, create urgency around a fake compromise, then pressure the victim into sharing account codes, recovery details or access pathways.

Crypto users have already seen this pattern across fake wallet-support messages, phishing pages, malicious approval flows and account-takeover schemes. The same risk appeared in the earlier ZachXBT-linked $19 million crypto theft trail, where a 185 BTC theft, luxury spending and public online behavior became part of the wider investigation.

The Johnston and Tardibone pleas also reinforce why crypto wallet drainer risks are not limited to malicious smart contracts. Fake support can be just as dangerous when it pushes users toward seed phrase exposure, account-code disclosure, remote access or rushed verification steps. No legitimate wallet maker, exchange, search company or support agent needs a seed phrase, private key, two-factor code or wallet recovery phrase.

Sentencing And Recovery Still Ahead

Johnston has agreed to be removed to Canada after sentencing, while the sentencing date has not yet been announced. The reported California victim’s assets remained unrecovered in the complaint, and prosecutors previously said additional victims were still being identified.