A U.S. judge has sentenced a crypto fraudster to five years in prison. This decision comes after his involvement in a scheme that racked up $20 million using a fake Coinbase website.

Chirag Tomar, an Indian national, ran a “spoofing” operation. He set up a deceptive URL, CoinbasePro.Com, and created a fraudulent page that looked just like the real Coinbase site. According to a press release from the U.S. Attorney’s Office for the Western District of North Carolina, this trick fooled many victims.

Tomar’s site misled hundreds of people into giving away their actual Coinbase login details. His team went further. They pretended to be Coinbase representatives and convinced victims to let them access their computers remotely. This allowed the fraudsters to get into real Coinbase accounts. They even impersonated customer service over the phone to snag two-factor authentication codes.

Once they had access, Tomar moved victims’ cryptocurrency into his own wallets. Then he turned those digital assets into cash. He used that money to buy luxury cars, watches, and even took trips to places like Dubai and Thailand.

Authorities caught up with Tomar last December. He pleaded guilty to wire fraud conspiracy in May. District Judge Kenneth D. Bell handed down a 60-month prison sentence, followed by two years of supervised release.