Image Credit: X.com
Key Takeaways
- ZachXBT alleges Tiffany Milanovich worked as a “caller” impersonating wallet and exchange support staff to trick victims into surrendering account access.
- Two detailed incidents total $1.7 million in alleged losses, including a $1.2 million Trezor wallet drain and a $500,000 Coinbase account theft.
- The claims are allegations from an independent investigator, not findings from a court or law enforcement agency, and no criminal charges were cited.
Blockchain investigator ZachXBT has publicly identified a Connecticut-linked woman, Tiffany Milanovich, as an alleged threat actor tied to more than $5 million in crypto thefts carried out through impersonation of hardware wallet and exchange support staff.
The claims, posted on X, describe a pattern of victims being tricked into surrendering wallet access before their funds were drained.
Alleged Scheme Involved Wallet and Exchange Support Impersonation
According to ZachXBT’s posts, Milanovich worked as a “caller” within a group that posed as customer support representatives for crypto wallet providers and exchanges, convincing victims to hand over account access.
The investigator alleged she recorded herself taunting victims after draining their funds and has posted footage of luxury purchases, stolen funds and casino gambling on social media.
These are allegations made by an independent on-chain investigator, not findings from a court or law enforcement agency. No criminal charges against Milanovich were cited in the posts reviewed for this article.
Two Cases ZachXBT Says Total $1.7 Million in Losses
ZachXBT detailed two specific incidents. In June 2026, he said, one victim lost $1.2 million in Bitcoin and Ethereum after Milanovich’s group drained a Trezor hardware wallet, following what he described as a spoofed email impersonating BitcoinIRA under a false name. Most of the funds from that theft remain unmoved on-chain, according to the investigator.
A second incident, dated to October 2025, involved an alleged $500,000 theft from a Coinbase account. ZachXBT said Milanovich was recorded complaining about her share of the proceeds and later posted a screenshot of the withdrawal herself.
He also alleged that in February 2026, she moved $100,000 into an Exodus wallet that now holds roughly 631,000 DAI, funded through a series of instant exchanges from Monero, a privacy-focused cryptocurrency.
Additional Allegations: A Feud, a Casino and Edited Videos
The allegations against Milanovich surfaced alongside a separate, unrelated dispute involving John Daghita, an individual ZachXBT has separately accused of stealing $46 million in crypto previously seized by the U.S. government.
ZachXBT said Milanovich, who had been close to Daghita, recorded a call with him and shared it publicly to mock him. Daghita responded by posting her name in his Telegram channel, according to the investigator’s account.
ZachXBT also alleged Milanovich gambled a victim’s stolen funds at an online casino while taunting the victim by phone. He said he reported the account to the platform, Shuffle, and that the platform confirmed it would be locked.
Separately, he alleged she manipulated several videos to exaggerate how much she had stolen, including one clip in which she is said to have falsely presented herself as the owner of a service wallet that received 7,700 JITOSOL tokens.
Legal Documents Surface Amid the Public Dispute
ZachXBT said Milanovich shared a screenshot of a search and seizure warrant naming her, issued in Connecticut and dated prior to several of the incidents he described. The warrant’s underlying case and current status were not detailed in the material reviewed, and its connection to the specific thefts alleged by ZachXBT is not established.
ZachXBT closed his write-up by saying Milanovich had “left a complete paper trail of chat logs, recordings, and on-chain data,” expressing hope she would face legal consequences.
