Binance Warns of Phishing Scam Targeting Crypto Users With Fake Account Security Alerts

According to Binance, phishing attempts targeting cryptocurrency users were witnessed on September 3 via text messages that acted as account security warnings. In the text messages, scammers claimed that there had been changes in the user's account settings and/or suspicious login behavior. Shortened links were part of the messages, along with calls to action to “verify” or “secure” one's account. The number of affected individuals who got the messages was never revealed by Binance. No data was made available regarding the amount lost due to this specific campaign.

Scammers Mimic Binance Alerts To Steal Account Credentials

As per the exchange, the fraudulent messages have been set up in a way that they look like messages from the Binance platform itself. In most cases, such messages will be talking about a sudden sign-in by someone or some changes in one's account settings that require one to take necessary steps. These links usually lead one to websites that look similar to the login or verification page on the Binance site. “We've recently observed an increase in phishing attacks targeting crypto users,” Binance said, without quantifying the increase.

The warning message followed up on earlier campaigns using the exchange's name. In 2025, the Australian Federal Police also said that the scammers had sent fraudulent messages that were displayed within the existing Binance message threads. According to Binance, users should never be prompted to verify their accounts by clicking links in text messages. Rather, users receiving strange messages should consider opening the official app for Binance or entering the website address directly.

Customers are also advised to use Binance Verify to find out if the site address, email address, phone number, social media account, and any other information belong to the exchange. Verification must be done before providing any account details or communicating with the supposed customer support.

If the customer has already visited the site, he or she needs to get in touch with Binance customer support via the official application. Communication with the sender should not be continued.

It was recommended that customers should make use of the withdrawal address whitelist on Binance. This allows the user to withdraw money only to addresses that are whitelisted, making it harder for attackers even if they manage to get hold of the login details.

A separate guideline was posted on the website about the way the whitelist could be managed. The user needed to protect their access to the email ID and the verification process that they would need to go through.