Isn't that what appeared to have happened here though?
From article: It is unclear how the alleged fraudster knew about the Coinbase transaction