The Coinbase user received a text message claiming to be Coinbase. The text is alleged to be notifying the coinbase user of changes to their accounts two-factor authentication (2FA) settings. Shortly after that, the Coinbase user received a series of telephone calls purporting to be from Coinbases support team.
The Coinbase fraudsters made every effort to appear genuine, quizzing the Coinbase user on their location and even sending a further text message confirming the changes had been cancelled.
The Coinbase phishers then send an email appearing to come from the legitimate Coinbase email address. This email contained a verification code they wanted the Coinbase user to relay back to.
Never reply to any Coinbase support emails. If unsure then contact Coinbase directly by phone.
If you receive an unexpected email or call from Coinbase, always tell them you will call them back and check the phone number before calling back. There is a list of Coinbase numbers on the Coinbase website.