Victims gave up two-factor authentication codes to the fraudster, with him impersonating Coinbase customer support.