CoinTN
"Your Binance account has security risks, please click the link immediately to verify your identity." Have you ever received an email or text message like this? These seemingly urgent messages are very likely carefully forged by scammers. You can verify whether the message you received is officially from Binance on the official Binance website. Receiving notifications through the official Binance App is safer than emails and SMS. Apple users should first refer to the iOS installation guide to install the genuine App.
Common Types of Fake Emails
Account Security Warnings
These emails claim that abnormal activity has been detected in your account, there was an illegal login attempt, or your security settings need to be updated. The email usually contains a "Process Immediately" or "Verify Identity" button that redirects to a phishing website when clicked.
Common scripts: "Your account was abnormally logged in from [a city]. If this wasn't you, please change your password immediately." "High-risk operations detected in your account. It will be frozen if not verified within 24 hours." "Your security settings have expired, please update immediately to protect your assets."
Rewards and Activities
These emails claim that you have won an airdrop reward, trading cashback, or a VIP upgrade qualification. They require you to click a link to "claim" the reward, but the link actually points to a phishing website.
Common scripts: "Congratulations on winning a 100 USDT trading bonus, click to claim." "You have been selected to participate in an exclusive airdrop event, claim it for a limited time." "Your VIP level can be upgraded for free, click to confirm."
Withdrawals and Transfers
They claim that a withdrawal is in progress and ask you to cancel it if you didn't initiate it. They exploit your panic to make you click the "Cancel Withdrawal" link.
Common scripts: "There is a withdrawal request for 5.2 BTC from your account. If this wasn't you, please click to cancel." "A large transfer is being processed. Ignore to confirm, or click here to cancel."
System Upgrades and Maintenance
They claim that Binance is undergoing a system upgrade and requires you to re-verify your identity or migrate your account. The links also point to fake websites.
Common scripts: "Binance will undergo a major system upgrade on [date], please re-verify your account information." "Due to compliance requirements, all users need to complete additional identity verification, and overdue accounts will be restricted."
Common Types of Fake SMS Messages
Verification Code Scams
Scammers might trigger your Binance verification code through some means, and then pretend to be customer service calling or texting you, asking you to read out the verification code. Once you give them the code, they can log in or change your security settings.
Fake Notification SMS
They send a text message claiming there is an anomaly in your Binance account, accompanied by a link for you to "confirm" or "process." The sender's number might be spoofed to look like an official number.
Investment Invitation SMS
They claim Binance has internal investment opportunities or special channels and invite you to join a group or click a link. These are usually tricks to lure you into a scam group.
How to Distinguish Genuine and Fake Emails
Check the Sender's Address
Genuine official Binance emails usually come from the following domains: @binance.com, @post.binance.com, @ses.binance.com, etc. However, note that sender addresses can be spoofed, so this is not the only criterion for judgment.
Look closely to see if there are subtle differences in the domain name, such as "binannce.com," "binance-notice.com," or "binance.support.com," all of which are fake.
Check the Anti-Phishing Code
This is the most reliable method. If you have set up an Anti-Phishing Code, every genuine official Binance email will include your Anti-Phishing Code. Any "Binance email" without an Anti-Phishing Code is fake.
If you haven't set up an Anti-Phishing Code yet, it is strongly recommended to do so now. How to do it: Go to Binance's security settings, find the Anti-Phishing Code option, and enter a combination you can remember.
Check the Email Content
Phishing emails usually have the following characteristics: grammatical errors or unnatural wording (though some are getting better at this). They create a sense of urgency, asking you to act "immediately." They ask for your password, verification code, or private key. The link points to a URL that does not start with binance.com. Attachments may contain malware.
Check the Links
Hover your mouse over the links in the email (do not click) to see the actual destination URL. If the URL does not start with binance.com, do not click it.
On a mobile phone, you can long-press the link to view the full URL.
Use Binance Verify
Binance provides the official Binance Verify tool. Paste the email address, phone number, or URL you received into it, and the system will tell you whether it belongs to an official Binance channel.
How to Distinguish Genuine and Fake SMS
Check the Sender's Number
Binance's official SMS numbers may vary by region. You can check your region's official SMS numbers on the Binance website. But beware that SMS numbers can also be spoofed.
SMS Content Characteristics
Genuine Binance text messages are usually verification codes or brief security notifications and will not contain links. If a text message has a link for you to click, it is highly likely to be fake.
The format of Binance's verification code SMS is quite fixed, containing only the code and brief instructions. They won't write long paragraphs asking you to perform various operations.
Do Not Reply to Suspicious SMS
If you receive a suspicious text message, do not reply. Also, do not call the phone number provided in the text. If you need to contact Binance customer service, use the official App or the customer service portal on the official website.
Analysis of Common Scam Tricks
Trick 1: Creating Panic to Induce Action
Scammers first send a message saying your account has a security issue, making you nervous and scared. Then they provide a "solution" (which is actually a phishing link), exploiting your panic to make you act hastily and ignore security checks.
How to respond: No matter how urgent the situation seems, take a deep breath and calm down first. Then directly open the official Binance App or manually type the official website address to check. Do not perform operations through links in emails or SMS.
Trick 2: Impersonating Customer Service to Ask for Information
Scammers pretend to be Binance customer service contacting you, possibly via phone, SMS, Telegram, or other channels. They will use various excuses to ask you for your account password or verification code.
How to respond: Remember that Binance customer service will NEVER proactively contact you to ask for your password or verification code. Anyone asking you to provide this information is a scammer.
Trick 3: Luring with Benefits
They use temptations like "free airdrops," "internal investment opportunities," or "guaranteed returns" to get you to click links or transfer funds.
How to respond: There's no such thing as a free lunch. Official Binance activities can all be found on the official website and App; you do not need to participate through third-party links.
Trick 4: Spoofing Official Channels
They create social media accounts, groups, or websites that look very much like the official ones. They imitate the official image in every aspect to gain your trust.
How to respond: Only get information and contact customer service through the channels announced on the Binance official website. When in doubt, use the Binance Verify tool to verify.
Practical Advice to Protect Yourself
First, set up an Anti-Phishing Code. This is the simplest and most effective anti-phishing measure.
Second, access Binance from your bookmarks. Do not enter through links in emails, SMS, or search engines.
Third, only use the official App. Download it from the App Store or Google Play, and do not install it from third-party sources.
Fourth, do not tell anyone your password and verification codes. Even if the other person claims to be a Binance staff member.
Fifth, when encountering uncertain situations, verify directly through official channels. Open the Binance App to check if there is genuinely a corresponding notification or activity.
Sixth, regularly update your password. This minimizes the impact if a password is cracked or leaked.
Frequently Asked Questions
I received a Binance verification code SMS but I didn't do anything, was I attacked?
It's possible someone is trying to log into your account, or someone mistakenly entered your phone number. If you didn't perform any operations, do not give the verification code to anyone. It is recommended to log into your account to check your security settings and change your password.
I clicked the link in a phishing email but didn't enter any information, is there a risk?
If you only clicked the link and didn't enter any information, the risk is relatively low. However, some phishing websites might attempt to install malware as soon as you visit. It is recommended to scan your device with antivirus software and clear your browser cache and cookies.
What should I do if I already entered my password on a phishing website?
Immediately log into the genuine Binance official website using another device and change your password. Check for any abnormal withdrawals or changes in security settings. Enable or reset all security verifications. If assets have been transferred out, contact Binance customer service immediately.
How do I report a phishing email or scam activity?
You can forward phishing emails to Binance's security team. You can also report scam activities on the customer service page of the Binance App. Scam accounts encountered on social media can be reported to the platform.
Where can I use the Binance Verify tool?
Search for "Binance Verify" in your browser or find the entry to the verification tool at the bottom of the official Binance website. Enter the email address, phone number, Telegram username, or URL you want to verify, and the system will show whether it belongs to official Binance.