--- title: "When the CEO Gets Phished: What the MoonPay Scam Reveals About Executive Vulnerability" description: MoonPay execs scammed out of $250K in crypto via typosquatting. Learn what CISOs must do to prevent executive-targeted social engineering. image: //www.jerichosecurity.com/hubfs/AI-Generated%20Media/Images/A%20stylized%20digital%20illustration%20showing%20a%20highranking%20executive%20in%20silhouette%20unknowingly%20transferring%20cryptocurrency%20from%20a%20digital%20wallet%20Include%20faint%20visuals%20of%20crypto%20coins%20or%20blockchain%20nodes%20to%20reference%20the%20industry%20and%20use%20Jerichos%20brand%20col-2.jpeg --- [![Jericho Security logo](https://www.jerichosecurity.com/hubfs/assets/images/Jericho-Security.svg)](https://www.jerichosecurity.com/) [![Jericho Security logo](https://www.jerichosecurity.com/hubfs/assets/images/Jericho-Security.svg)](https://www.jerichosecurity.com/) - Why Jericho Why choose Jericho Security? See what sets Jericho Security apart from the rest. [About Us Our Mission](https://www.jerichosecurity.com/about) [Customers What customers say](https://www.jerichosecurity.com/customers) - Plans - Plans - [Lite](https://www.jerichosecurity.com/lite) - [Plus](https://www.jerichosecurity.com/plus) - [Premium](https://www.jerichosecurity.com/premium) - [Free Trial](https://www.jerichosecurity.com/7-day-free-trial) - Solutions See how Jericho Security can help keep your team safe. We equip individuals with the knowledge and skills needed to identify, prevent, and respond to cyber threats. Platform [Cybersecurity Dashboard Manage Your Security](https://www.jerichosecurity.com/platform/cybersecurity-dashboard) [Phishing Simulator Train Your Employees](https://www.jerichosecurity.com/platform/phishing-simulator) [Performance Analytics Gain Key Insights](https://www.jerichosecurity.com/platform/employee-performance-analytics) [Customized Training Tailored to Your Organization](https://www.jerichosecurity.com/platform/training-content) Solutions [Cybersecurity Awareness Training Train Your Team](https://www.jerichosecurity.com/solutions/cybersecurity-awareness-training) [Anti-Phishing Training Protect Your Business](https://www.jerichosecurity.com/solutions/anti-phishing-training) [Enterprise Cybersecurity Training Defend Against Threats](https://www.jerichosecurity.com/solutions/enterprise-cybersecurity-training) [SMB Cybersecurity Training Empower Your Team](https://www.jerichosecurity.com/solutions/smb-cybersecurity-training) Industries [Retail Keep retail threats away](https://www.jerichosecurity.com/industries/retail) [E-Commerce Protect your E-Com Business](https://www.jerichosecurity.com/industries/e-commerce) [Technology Prevent sensitive breaches](https://www.jerichosecurity.com/industries/technology) [Financial Services Safeguard your assets](https://www.jerichosecurity.com/industries/financial-services) [Healthcare Secure sensitive information](https://www.jerichosecurity.com/industries/healthcare) [Manufacturing Keep your operation running](https://www.jerichosecurity.com/industries/manufacturing) [Energy Prevent the next breach](https://www.jerichosecurity.com/industries/energy) [Federal Government Prevent largescale attacks](https://www.jerichosecurity.com/industries/federal-government) [State & Local Government Protect local officials](https://www.jerichosecurity.com/industries/state-local-government) [Higher Education Keep staff & students safe](https://www.jerichosecurity.com/industries/higher-education) - Resources Jericho Security resources hub. Find everything you need to defend against emerging Generative AI threats. [News Latest news headlines](https://www.jerichosecurity.com/resources/tag/news) [Literature White papers & solution briefs](https://www.jerichosecurity.com/resources/tag/white-papers-solution-briefs) [Case Studies Jericho success stories](https://www.jerichosecurity.com/resources/tag/case-study) [Events Upcoming security events](https://www.jerichosecurity.com/resources/tag/events) [Webinars Upcoming & On-Demand](https://www.jerichosecurity.com/resources/tag/webinars) [Podcast Leading CISO Discussions](https://www.jerichosecurity.com/ciso-diaries) [Community Spotlight To recognize and appreciate](https://www.jerichosecurity.com/resources/tag/community-spotlight) [Cybersecurity Glossary Cyber-Related Definitions](https://www.jerichosecurity.com/glossary) [Support Advice and Answers](https://support.jerichosecurity.com/) [View All Resources](https://www.jerichosecurity.com/resources) - [Blog](https://www.jerichosecurity.com/blog) - [Partners](https://www.jerichosecurity.com/partner) - [Sign In](https://app.jerichosecurity.com/users/sign_in) - [Free Trial](https://www.jerichosecurity.com/7-day-free-trial) # When the CEO Gets Phished: What the MoonPay Scam Reveals About Executive Vulnerability Written by ![Jericho Security Contributor](https://www.jerichosecurity.com/hubfs/assets/images/Jericho-Security-Thumbnail.png) Jericho Security Contributor Published on August 7, 2025 ![](https://www.jerichosecurity.com/hubfs/AI-Generated%20Media/Images/A%20stylized%20digital%20illustration%20showing%20a%20highranking%20executive%20in%20silhouette%20unknowingly%20transferring%20cryptocurrency%20from%20a%20digital%20wallet%20Include%20faint%20visuals%20of%20crypto%20coins%20or%20blockchain%20nodes%20to%20reference%20the%20industry%20and%20use%20Jerichos%20brand%20col-2.jpeg)   ### **A Costly Mistake in the Heart of Crypto** You’d expect the leaders of a major crypto firm to be untouchable when it comes to digital fraud. But in a recent DOJ filing, it was revealed that two top MoonPay executives — reportedly including CEO Ivan Soto-Wright and CFO Mouna Ammari Siala — [fell victim to an email scam that cost them over **$250,000** in USDT](https://www.cryptopolitan.com/moonpay-execs-allegedly-duped/) (a stablecoin pegged to the U.S. dollar). The twist? This wasn’t a complex blockchain exploit. It wasn’t a technical flaw. It was **a** [**classic phishing attack**](https://www.jerichosecurity.com/blog/biggest-phishing-attacks), executed with slight domain manipulation and a convincing impersonation of a well-known real estate figure. This breach of trust — not code — should send a strong message to CISOs across every industry. ### **The Attack: Typosquatting and Social Engineering at the Executive Level** The scammer's method was deceptively simple: - Use **typosquatted** [**email addresses**](https://www.jerichosecurity.com/blog/characteristics-of-phishing-emails), replacing lowercase "i" with uppercase "I" to spoof domains - [Impersonate](https://www.jerichosecurity.com/blog/deepfake-phishing-the-ai-powered-social-engineering-threat-putting-cisos-on-high-alert-in-2025) **Steve Witkoff**, a high-profile developer and public figure - Send targeted emails with legitimate-sounding requests tied to real-world events - Convince the executives to **transfer stablecoins to a scam wallet** — no malware, no exploit, no breach This approach is known as **typosquatting**, and while it’s common in phishing, what makes this case notable is its success against **savvy, technically equipped individuals** at the top of a major crypto firm. Even more striking, investigators traced the scam to **a known wallet on Binance**, connected to a Nigerian resident — showing that the attackers didn’t need insider access or blockchain expertise to succeed. They just needed the right hook and attention to detail.   ### **Industries at Risk: If Crypto Execs Are Vulnerable, Who Isn’t?** This wasn’t a breach of blockchain. It was a breach of **human judgment** — and it’s a risk that transcends the cryptocurrency sector. CISOs in the following sectors should especially take note: - [Financial Services & Fintech](https://www.jerichosecurity.com/industries/financial-services): Executive-level phishing remains one of the top threats to wire transfers, trading platforms, and client funds. - **Venture Capital & Investment Firms**: Where large, fast-moving sums and public figures intersect, so does social engineering risk. - [**Healthcare & Biotech**](https://www.jerichosecurity.com/industries/healthcare): High-trust environments, VIP patient targets, and executive access create ripe conditions for phishing attacks. - **Media & Entertainment**: Talent agencies and entertainment execs face impersonation threats as attackers chase fame and money. The message is clear: **no level of technical sophistication protects against human deception, especially when it’s engineered for** [**executive targets**](https://www.jerichosecurity.com/blog/rubio-impersonation-deepfake)**.** ### **Recommendations for CISOs: Executive Protection Is Not Just a Compliance Box** To reduce risk at the executive level, CISOs must rethink phishing defense as more than employee training. Here’s where to start: #### **1. Executive Inbox Hardening** Implement domain impersonation monitoring, typo-domain flagging, and inbound verification tools specifically tuned for high-risk individuals. #### **2. Tailored Simulation Training** Generic phishing awareness isn’t enough. Run simulations mimicking real-world executive targeting – including impersonation of known partners, investors, or public figures. #### **3. Clear Transaction Protocols** Institute multi-step verification for all executive-initiated transfers, especially for crypto or international payments. Require second-party validation for new recipients. #### **4. Incident Transparency Plans** Have pre-scripted communication plans ready for executive-level phishing incidents, internal and external, to maintain trust and contain fallout. #### **5. Audit “Shadow IT” Use** Ensure that executives aren’t using personal wallets or unofficial channels for company-adjacent transactions. Personal activity can become an organizational risk surface.   ### **How Jericho Security Helps CISOs Prepare for the Next Executive-Level Scam** At Jericho Security, we understand that modern attackers aren't just writing better code – they’re writing better emails. And increasingly, those [emails are landing in executive inboxes](https://www.jerichosecurity.com/blog/how-to-handle-staff-who-fall-for-phishing-emails). We help CISOs: - [Simulate high-fidelity phishing attacks](https://www.jerichosecurity.com/platform/phishing-simulator) that mirror real executive threats - Monitor for AI-generated impersonation attempts and spoofed domains - [Build a culture of security](https://www.jerichosecurity.com/blog/how-to-build-a-positive-security-culture-that-actually-changes-behavior) that protects even the most experienced leaders **If crypto executives can be deceived, anyone can.** The time to harden your leadership layer is now. 👉 [Book a private demo with Jericho Security](https://www.jerichosecurity.com/demo) and let us show you how to reduce human risk at the highest levels of your organization.   ##### Categories - [News (45)](https://www.jerichosecurity.com/blog/tag/news) - [Thought Leadership (15)](https://www.jerichosecurity.com/blog/tag/thought-leadership) - [Phishing (14)](https://www.jerichosecurity.com/blog/tag/phishing) - [Product Updates (10)](https://www.jerichosecurity.com/blog/tag/product-updates) - [Announcements (8)](https://www.jerichosecurity.com/blog/tag/announcements) - [Reports (5)](https://www.jerichosecurity.com/blog/tag/reports) - [Case Study (4)](https://www.jerichosecurity.com/blog/tag/case-study) - [Community Spotlight (3)](https://www.jerichosecurity.com/blog/tag/community-spotlight) - [Events (3)](https://www.jerichosecurity.com/blog/tag/events) - [White Papers & Solution Briefs (1)](https://www.jerichosecurity.com/blog/tag/white-papers-solution-briefs) #### Subscribe to our newsletter Get the latest updates on phishing trends and generative AI. Subscribe ##### Popular Posts Platform - [Cybersecurity Dashboard](https://www.jerichosecurity.com/platform/cybersecurity-dashboard) - [Phishing Simulator](https://www.jerichosecurity.com/platform/phishing-simulator) - [Performance Analytics](https://www.jerichosecurity.com/platform/employee-performance-analytics) - [Customized Training](https://www.jerichosecurity.com/platform/training-content) Solutions - [Anti-Phishing Training](https://www.jerichosecurity.com/solutions/anti-phishing-training) - [SMB Cybersecurity Training](https://www.jerichosecurity.com/solutions/smb-cybersecurity-training) - [Enterprise Cybersecurity Training](https://www.jerichosecurity.com/solutions/enterprise-cybersecurity-training) - [Cybersecurity Awareness Training](https://www.jerichosecurity.com/solutions/cybersecurity-awareness-training) Industries - [Retail](https://www.jerichosecurity.com/industries/retail) - [E-Commerce](https://www.jerichosecurity.com/industries/e-commerce) - [Technology](https://www.jerichosecurity.com/industries/technology) - [Financial Services](https://www.jerichosecurity.com/industries/financial-services) - [Healthcare](https://www.jerichosecurity.com/industries/healthcare) - [Manufacturing](https://www.jerichosecurity.com/industries/manufacturing) - [Energy](https://www.jerichosecurity.com/industries/energy) - [Federal Government](https://www.jerichosecurity.com/industries/federal-government) - [State & Local Government](https://www.jerichosecurity.com/industries/state-local-government) - [Higher Education](https://www.jerichosecurity.com/industries/higher-education) Resources - [Cybersecurity Glossary](https://www.jerichosecurity.com/glossary) - [Support](https://support.jerichosecurity.com/) - [Blog](https://www.jerichosecurity.com/blog) - [News](https://www.jerichosecurity.com/resources/tag/news) - [Literature](https://www.jerichosecurity.com/resources/tag/white-papers-solution-briefs) - [Case Studies](https://www.jerichosecurity.com/resources/tag/case-study) - [Events](https://www.jerichosecurity.com/resources/tag/events) - [Webinars](https://www.jerichosecurity.com/resources/tag/webinars) - [Community Spotlight](https://www.jerichosecurity.com/resources/tag/community-spotlight) Company - [About Us](https://www.jerichosecurity.com/about) - [Customers](https://www.jerichosecurity.com/customers) - [Partners](https://www.jerichosecurity.com/partner) - [Careers](https://jericho-security.breezy.hr/) - [Sign In](https://app.jerichosecurity.com/users/sign_in) - [Get a Demo](https://www.jerichosecurity.com/demo) - [Privacy Policy](https://www.jerichosecurity.com/privacy-policy) - [Terms of Service](https://www.jerichosecurity.com/terms-of-service) [![Jericho Security footer logo](https://www.jerichosecurity.com/hubfs/assets/images/bootstrap/jericho-logo.svg)](https://www.jerichosecurity.com/) AI-Powered Cyber Security Training for Employees. ![AICPA SOC](https://www.jerichosecurity.com/hs-fs/hubfs/assets/images/bootstrap/AICPA-SOC-Logo.png?width=54&height=54&name=AICPA-SOC-Logo.png) ![SOC 2 TYPE 1](https://www.jerichosecurity.com/hs-fs/hubfs/assets/images/bootstrap/SOC-2-TYPE-1.png?width=54&height=54&name=SOC-2-TYPE-1.png) ![SOC 2 TYPE 2](https://www.jerichosecurity.com/hs-fs/hubfs/assets/images/bootstrap/SOC-2-TYPE-2.png?width=54&height=54&name=SOC-2-TYPE-2.png) Toggle theme - Light - Dark - Auto Copyright © Jericho Security, Inc. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jericho Security Contributor", "url" : "http://www.jerichosecurity.com/blog/author/jericho-security-contributor" }, "dateModified" : "2026-01-21T18:06:52.920Z", "datePublished" : "2025-08-07T19:58:15.000Z", "headline" : "When the CEO Gets Phished: What the MoonPay Scam Reveals About Executive Vulnerability", "image" : [ "//www.jerichosecurity.com/hubfs/AI-Generated%20Media/Images/A%20stylized%20digital%20illustration%20showing%20a%20highranking%20executive%20in%20silhouette%20unknowingly%20transferring%20cryptocurrency%20from%20a%20digital%20wallet%20Include%20faint%20visuals%20of%20crypto%20coins%20or%20blockchain%20nodes%20to%20reference%20the%20industry%20and%20use%20Jerichos%20brand%20col-2.jpeg" ], "mainEntityOfPage" : { "@id" : "http://www.jerichosecurity.com/blog/when-the-ceo-gets-phished-what-the-moonpay-scam-reveals-about-executive-vulnerability", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "//www.jerichosecurity.com/hubfs/assets/images/Jericho-Security.svg" }, "name" : "Jericho Security" } } ```