I’ve seen a few instances on r/Coinbase lately where people are getting calls from Coinbase Support and the caller is able to spoof their support email and generate ticket numbers. The implication is that it’s a rogue employee (or employees).
Discussion
I did get a fake email from Coinbase Support. It's using the old Coinbase logo and email template, but otherwise, it looks legit. People will absolutely fall for this. It's not your normal phishing email from a false domain.