Trenton Richard Johnston arrested for $13M crypto scam involving social engineering attacks

A traffic stop for speeding in North Miami turned into something far more interesting for investigators when they pulled over a Rolls-Royce Cullinan driven by a 20-year-old Canadian who had overstayed his US visa. That Canadian, Trenton Richard David Johnston, has now pleaded guilty to a money-laundering conspiracy tied to at least $13.04 million in stolen digital assets.

Johnston entered his guilty plea on June 10, 2026, in US District Court in Miami. The charges: conspiracy to commit wire fraud and money laundering. As part of his plea agreement, he has agreed to deportation back to Canada following sentencing.

The scheme: Google impersonation and stolen Bitcoin

The playbook was disturbingly simple. Johnston and his alleged accomplice, Brandon Michael Tardibone, used social engineering tactics to impersonate tech support personnel from companies like Google. The goal was to trick crypto holders into giving up access to their digital wallets.

It worked. One victim alone lost approximately 185 Bitcoin, valued at roughly $13 million at the time of the theft.

The stolen funds didn’t sit idle. Investigators found that the illicit proceeds were funneled into a lifestyle that included high-end vehicles and jewelry valued at over $1 million. The Rolls-Royce Cullinan that led to Johnston’s arrest in March 2026 was, in hindsight, not the most inconspicuous getaway car for someone overstaying a visa.

Johnston was indicted in May 2026 by a federal grand jury in the Southern District of Florida. His co-conspirator, Tardibone, continues to face separate charges related to harboring Johnston and conspiracy to launder money. Those charges remain pending.

Social engineering: crypto’s persistent blind spot

What makes this case notable is the scale. Losing 185 Bitcoin from a single victim represents one of the larger individual social engineering thefts to reach a courtroom in recent years. At current Bitcoin prices, that haul would be worth significantly more than the $13 million figure cited at the time of the theft.

The US Attorney’s Office for the Southern District of Florida has been increasingly active in prosecuting crypto-related fraud.

What this means for crypto holders and the broader market

The immediate takeaway for anyone holding meaningful amounts of crypto is unglamorous but important: no legitimate tech support agent will ever ask for your private keys, seed phrase, or remote access to your wallet. Google will not call you. Coinbase will not call you. If someone contacts you claiming there’s an urgent security issue with your account, hang up and navigate to the service directly.

Johnston’s agreement to deportation suggests the legal proceedings are largely concluded on his end, but Tardibone’s pending charges could reveal more about the operational details of the scheme, including how the pair identified targets, laundered proceeds, and potentially connected with other actors in the broader social engineering ecosystem.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.