𝗛𝗼𝘄 𝗶𝘁 𝘀𝘁𝗮𝗿𝘁𝗲𝗱: Criminal organization Tycoon 2FA was offering a phishing-as-a-service platform. 𝗛𝗼𝘄 𝗶𝘁'𝘀 𝗴𝗼𝗶𝗻𝗴: Coinbase partnered with Microsoft & law enforcement to trace payments, identify Tycoon's administrator, and coordinate a service disruption.