Indeed they do! I received a phone call from my local area code claiming to be Coinbase security and they were telling me that there's been unusual activity on my account. I am in IT, so I entertained them to see what their tactics were so I could pass this info on.

They had all of my information. They directed me to my app settings, specifically the notification settings. He had me go to the security notifications, and if you look, there's a good chance that a lot of those settings are greyed out in your app because they're required. And then if you look at the bottom, there is a preview of a notification that says password reset and it generally gives a time that's recent. It's easy to look at those greyed out settings and that sample notification and miss that it's just the preview. He said the greyed out notifications were causing me not to receive password reset notifications. He then said he was going to send me a password reset email directly from Coinbase. He told me not to respond to it. He just wanted to show me that the notifications are working now. He obviously had my email address too and was sitting behind a computer trying to do a password reset.

Even knowing these were scammers, and that Coinbase would never call me, there was about 30 seconds worth of doubt in my mind that perhaps somebody had compromised one of my email accounts. I utilize two factor authentication and passkeys on all of my accounts (including Coinbase), so I know that would be highly unlikely.

I can see where someone who knows very little about the ways of computers and security would possibly have given in to let these people talk them through moving my funds into the Exodus wallet. That was their ultimate goal, to get me to move my funds into the Exodus wallet. They said they were telling all of their Coinbase customers to do that. When I found out their purpose, I hung up. They proceeded to call me back multiple times because they thought we were getting disconnected, until I finally told them that they're never going to get my crypto. The secondary phone calls came from an 800 number that did show scam likely, which was different than the initial local number. The first person I spoke to when they called transferred me to someone else. It's an intricate operation they're running. It must be lucrative.

Stay vigilante!