ZH EN 繁 JA KO ES FR
Sign Up
Home Tutorials Categories Download About Disclaimer
ZH EN 繁 JA KO ES FR
Home/ Tutorials/Security/What is Binance Anti-Phishing Code and How to Set It Up

What is Binance Anti-Phishing Code and How to Set It Up

2026-04-09 ~ 20 min readSecurity

Have you ever received an email claiming to be from "Official Binance," asking you to click a link to verify your identity or claim a reward? Many of these are phishing emails designed to steal your account and password. Binance provides a very practical anti-scam tool—the Anti-Phishing Code. Once set up, you can tell at a glance whether an email is truly from Binance. You can log in to the official Binance website to set up the Anti-Phishing Code, and it can also be done on the official Binance APP. For Apple users to install the APP, please refer to the iOS installation guide.

What is an Anti-Phishing Code

The Anti-Phishing Code is a string of text customized by you in your Binance security settings. Once set up, every genuine email sent to you by Binance will contain this text.

The principle is very simple:

  • You set your Anti-Phishing Code as "APPLE123" (for example).
  • From then on, every genuine email from Binance will display "APPLE123".
  • If you receive an email claiming to be from Binance, but it does not contain the code "APPLE123".
  • Then this email is fake, a phishing email.

Scammers can forge the sender's address, format, and content of an email, but they do not know what Anti-Phishing Code you have set, so there is no way for them to include the correct Anti-Phishing Code in a phishing email.

Why Do You Need to Set Up an Anti-Phishing Code

Phishing Attacks Are Becoming More Common

The cryptocurrency industry is a heavily hit area for phishing attacks. Scammers will send out large numbers of forged emails mimicking the format of Binance's official emails in an attempt to:

  • Steal login passwords: The email contains a link that looks like Binance but is actually a fake website. The password you enter will be captured by the scammer.
  • Steal verification codes: Under the guise of "security verification," they ask you to provide various verification codes.
  • Induce transfers: Claiming that you have won a prize or need to pay a fee, inducing you to transfer cryptocurrency.
  • Install malicious software: Email attachments contain viruses or Trojans.

The Realism of Forged Emails

Current phishing emails are made to look very realistic:

  • The sender's address can be forged to look exactly like the official Binance one.
  • The email format, Logo, and colors completely replicate Binance's genuine emails.
  • Link URLs are very similar to the official Binance website, differing by only one or two letters.
  • The wording of the email content is professional, making it hard to distinguish true from false.

Under these circumstances, the Anti-Phishing Code becomes the simplest and most effective method of identification.

How to Set Up the Anti-Phishing Code

Web Version Setup Steps

Step 1: Log in and enter security settings

  1. Log in to your Binance account
  2. Click your avatar in the upper right corner → Security

Step 2: Find the Anti-Phishing Code option

  1. Find the "Advanced Security" section in the security settings page
  2. Find the "Anti-Phishing Code" option
  3. Click "Create" or "Set Up"

Step 3: Perform security verification The system will ask you to complete security verification first (enter Google Authenticator code or other verification codes) to confirm that the operation is being performed by you.

Step 4: Enter the Anti-Phishing Code you want to set

  • The length is usually 4-20 characters
  • You can use a combination of letters and numbers
  • Choose a combination that is easy for you to remember but impossible for others to guess

Step 5: Confirm and save Click confirm, and the Anti-Phishing Code setup is successful. From now on, every email Binance sends you will contain this code.

APP Setup Steps

  1. Open the Binance APP → Click your avatar → Security
  2. Find the "Anti-Phishing Code" option
  3. Click to enable/set up
  4. Complete security verification
  5. Enter the Anti-Phishing Code and confirm

Suggestions for Choosing an Anti-Phishing Code

Good Anti-Phishing Codes

  • "MyBi2026Safe" (Meaningful but not easy to guess)
  • "Tiger789xyz" (Random combination)
  • "Coffee!Morning" (Personalized phrase)

Not Recommended Anti-Phishing Codes

  • "123456" (Too simple, easy to guess)
  • "binance" (Related to the platform name, easy to guess)
  • "password" (Too common)
  • Your name or birthday (Easily obtained through social engineering attacks)

Remember Your Anti-Phishing Code

After setting it up, you must remember your Anti-Phishing Code so you can check every time you receive an email. You can:

  • Write it down in a notebook
  • Store it in a password manager
  • But do not tell anyone

How to Use the Anti-Phishing Code to Identify Emails

Correct Checking Process

Every time you receive an email claiming to be from Binance:

  1. Do not click any links first
  2. Check if your Anti-Phishing Code is in the email content
  3. If it contains the Anti-Phishing Code you set → This is a genuine Binance email
  4. If it does not contain your Anti-Phishing Code → This is a phishing email, delete it immediately
  5. If you haven't set up an Anti-Phishing Code yet → Go set it up as soon as possible

Location of the Anti-Phishing Code in Emails

Usually, the Anti-Phishing Code will be displayed in:

  • The security prompt bar at the top of the email
  • The header area of the email body
  • Some email templates may display it at the bottom

Binance's genuine emails will explicitly state "Anti-Phishing Code: [Your Anti-Phishing Code]".

Precautions

  • The Anti-Phishing Code only appears in emails, not in SMS or APP push notifications
  • Even if the email contains your Anti-Phishing Code, also pay attention to checking if the link is the official website URL
  • The Anti-Phishing Code can be modified; if you suspect it has been leaked, change it immediately

What Other Anti-Phishing Methods Are There Besides the Anti-Phishing Code

Check the Sender's Email Address

Official Binance emails usually come from the following addresses:

But note that sender addresses can be forged, so you cannot judge solely by the sender's address.

Check Link Addresses

Before clicking links in an email:

  1. Hover your mouse over the link (do not click) to view the actual URL address
  2. Confirm if it is the binance.com domain
  3. Pay attention to identifying similar fake domains (like b1nance.com, binannce.com, etc.)

Manually Enter the URL

Do not access Binance through links in emails. Develop the habit of manually entering binance.com in the browser, or use a bookmark you have saved.

Use Binance's Official Verification Tool

Binance provides a "Binance Verify" tool where you can enter information like email addresses, phone numbers, URLs, etc., to check if they belong officially to Binance.

Do Not Reply to Suspicious Emails

Binance will not ask you via email for:

  • Login password
  • Google verification code
  • SMS verification code
  • Requests to transfer money to a certain address

Emails containing such requests are definitely from scammers.

What to Do If You Accidentally Click a Phishing Link

Did Not Enter Any Information

If you only clicked the link but did not enter information like account and password:

  • Close the page immediately
  • Clear browser history and cache
  • Scan the device with antivirus software
  • Generally, there will be no major issues

Already Entered Password

If you entered your password on the phishing page:

  1. Immediately go to the official Binance website to change your password
  2. Check if Google Authenticator is functioning normally
  3. See if there are any unusual login records
  4. Check for any unauthorized withdrawals
  5. If abnormalities are found, immediately freeze the account and contact customer service

Already Entered Verification Code

If you entered a verification code on the phishing page:

  1. Immediately freeze the account
  2. Change all security settings
  3. Contact Binance customer service to report the situation
  4. Check if there is any loss of assets

Modifying and Resetting the Anti-Phishing Code

How to Modify the Anti-Phishing Code

If you want to change the Anti-Phishing Code:

  1. Enter security settings → Anti-Phishing Code
  2. Click "Modify"
  3. Complete security verification
  4. Enter the new Anti-Phishing Code
  5. Confirm and save

When Should It Be Modified

  • When you suspect the Anti-Phishing Code has been leaked
  • Regularly change it to enhance security (e.g., change it every six months)
  • When you forget the current Anti-Phishing Code

Frequently Asked Questions

What Happens If Someone Else Knows the Anti-Phishing Code?

The Anti-Phishing Code itself cannot be used to log into your account, so even if it is known, it will not directly lead to your account being stolen. However, scammers might include your Anti-Phishing Code in phishing emails to gain your trust. Therefore, once you suspect a leak, change it immediately.

Will Setting Up an Anti-Phishing Code Affect Normal Use?

No. The Anti-Phishing Code merely adds an identifier to emails sent by Binance and does not affect any of your operations on Binance.

Will There Be an Anti-Phishing Code in SMS Notifications?

Currently, the Anti-Phishing Code mainly appears in emails. SMS and APP push notifications usually do not contain the Anti-Phishing Code.

Can I Set Multiple Anti-Phishing Codes?

No. One account can only set one Anti-Phishing Code. But you can modify it at any time.

Is the Anti-Phishing Code Free?

Yes, it is completely free. The Anti-Phishing Code is a basic security feature provided by Binance, and all users can use it for free.