Security alert: I had a call from "Coinbase" just now that my account has been breached and someone tried to change my account email address. The person sounded super legit. He send me a case number email and subscribed me to Coinbase Bytes, which he mentioned in the call. 

It all sounded good, though I obv was concerned from the jump that it was a scam. I used <show original> using Gmail to look the routing info. Looked OK, but then pasted it into ChatGPT to ask if the email was legit, et voila: the email originated not frombut fromwith an accent on the i. 

When I mentioned this to him, he suggested maybe I need to upgrade my Gmail client (ha!), and then came clean and joked about how yes it was a scam, and he's actually 14 years old, and aren't I impressed that he seemed so legit. We bantered for a couple minutes. I asked him how often this works, and he said every day. He said usually he goes for people's Trezor too. I told him it was impressive how legit it looked, and asked how he masks his phone number. Then he said thanks, and needed to move on to the next mark now. 

Stay vigilant, friends!