Probably data breaches and the dark web. I knew it was a scam because Coinbase doesn’t call and the email address he read to me wasn’t one I ever used there anyway.