Just got a reasonably(ish) convincing call from a San Francisco number with someone claiming to be from @coinbase (@CoinbaseSupport) regarding unauthorized access to my account. 

They sent me a link by email to log in to my account. It's an obvious fraud - broken images, text encoding errors, and a link to a phishing website (I was able to quickly recognize this and tell the person to go and f**k themselves but this could definitely catch people out. Stay frosty, friends.