"Your Binance account is at risk — please click the link immediately to verify your identity." If you've ever received an email like this, don't click anything just yet. Phishing emails are getting more convincing every day, and plenty of people fall for them in a moment of panic. A friend of mine had their password stolen after clicking a link in a fake email. Today I'll teach you how to see through these fakes at a glance and protect your assets on the Binance official website. For daily operations, the Binance official app is safer and more convenient. Apple users can follow the iOS installation guide.
How Rampant Are Phishing Emails
Let's look at the numbers: phishing attacks in the cryptocurrency space cause losses of billions of dollars annually. And email phishing is one of the primary methods.
Here's the typical scam playbook:
- Craft an email that looks like it's from Binance
- Claim there's a security issue, a large transfer, or an identity verification requirement
- Ask you to click a link
- The link leads to a fake website that looks identical to the real Binance site
- You enter your credentials on the fake site
- Scammers use those credentials to log in to the real Binance and drain your funds
The entire process might take just a few minutes. By the time you realize what happened, it's too late.
Four Methods to Spot Fakes
Method 1: Check the Anti-Phishing Code (Most Reliable)
This is the simplest and most effective method. If you haven't set up an anti-phishing code yet, do it now.
What is an anti-phishing code?
It's a secret word you set in Binance that only you know. Once set, every official email from Binance will display this word. If you receive a "Binance email" without your code, it's fake.
How to set it up:
- Log in to the Binance app or website
- Go to "Security Settings"
- Find "Anti-Phishing Code"
- Set a word or phrase that's easy for you to remember
Once set, every genuine Binance email will show something like "Your anti-phishing code: XXXXX" at the top or bottom.
Method 2: Carefully Check the Sender Address
Official Binance emails only come from these domains:
- @binance.com
- @post.binance.com
- @ses.binance.com
- @notice.binance.com
- @mailer.binance.com
Watch out! Scammers frequently use similar-looking domains to trick you:
- @binance-secure.com (fake)
- @binance.support.com (fake)
- @mail-binance.com (fake)
- @binancee.com (extra "e" — fake)
- @b1nance.com (number 1 instead of letter i — fake)
On mobile, the sender field might only show the display name without the full address. Remember to tap to view the complete address.
Method 3: Never Trust Links in Emails
This is a simple but highly effective principle: never click links in emails.
Regardless of whether the email is real or fake, you should never operate your account by clicking email links. The correct approach:
- Read the email content to understand the issue
- Close the email
- Open your browser and manually type www.binance.com
- Or open the Binance app directly
- Handle the matter through official channels
This way, even if the email is fake, you won't land on a phishing site.
Method 4: Use Binance's Official Verification Channel
Binance has a dedicated verification tool called "Binance Verify." You can use it to check whether a specific email address, phone number, URL, or social media account truly belongs to Binance.
How to use it:
- Open the Binance app or find "Binance Verify" on the Binance official website
- Enter the sender address from the email you received
- The system will tell you whether it's an official Binance address
Common Phishing Email Tactics
Understanding common scammer methods helps you defend against them.
Tactic 1: "Your Account Has Been Compromised"
The email claims unusual login activity or suspicious transactions and demands you click a link to change your password. These emails create urgency, pressuring you to click before you can think.
How to respond: Don't click. Open the app yourself to check for any actual issues.
Tactic 2: "Congratulations — You've Received an Airdrop/Reward"
The email says you've been selected for an airdrop or have a pending reward — just click the link to claim it. Scammers exploit greed.
How to respond: Nothing falls from the sky for free. Binance promotions are announced in the app and on official social media, not exclusively through email.
Tactic 3: "Please Complete KYC Verification"
The email claims your identity verification has expired or needs renewal, threatening to freeze your account. It asks you to click a link and upload your ID photo.
How to respond: Check your KYC status in the app yourself. Real KYC verification is done within the app, not through email links.
Tactic 4: "API Anomaly Notice"
If you use APIs, this email claims your API key was misused or needs updating, asking you to click a link.
How to respond: Check the API management page in the app yourself.
Tactic 5: Impersonating Customer Support
The email claims to be from Binance support, saying there's a reply to a ticket you submitted, and asks you to click a link to view it.
How to respond: Binance support replies are found in the in-app ticket system, not through external links.
What If You Accidentally Clicked a Link
If you clicked too fast, don't panic. Follow these steps:
Only Clicked the Link but Didn't Enter Any Information
Risk is relatively low, but you should:
- Close the page immediately
- Clear browser cache and cookies
- Run an antivirus scan (in case of malicious scripts)
- Change your Binance password as a precaution
Clicked the Link and Entered Your Credentials
This is more dangerous. Act fast:
- Immediately open the real Binance app and freeze your account
- Change your password
- Check for any unauthorized withdrawal records
- Check if any API keys were created
- Contact Binance support and explain the situation
Clicked the Link and Entered Your Google Authenticator Code
This is the most urgent:
- Check in Google Authenticator whether the code was used
- Immediately freeze your account
- Contact support
- Consider re-binding Google Authenticator
Security Reminders
Core principles of email security:
- Setting up an anti-phishing code is the single most effective anti-phishing measure — go set it up now
- Build the habit of "never clicking email links" — do everything through the app or by typing the URL yourself
- Protect your email account too — enable two-step verification, use a strong password, and don't use the same email for random websites
- If you use Gmail, leverage the "+" address feature (e.g., [email protected]). If spam arrives at this address, you'll know it's from a Binance data leak
- Stay skeptical. It's better to spend one extra minute checking the app yourself than to save time by clicking a link
Additional Advice: Manage Your Email Well
Your email is a critical component of Binance account security. Here are some tips:
- Use a major email provider: Gmail, Outlook — these have robust security measures
- Dedicated email: If possible, register a Binance-specific email that you don't use for other sites
- Enable two-step verification: Turn on 2FA for the email account itself
- Check login history regularly: Look for any suspicious logins
- No auto-forwarding: Make sure no email auto-forwarding rules have been set (a common hacker technique)
FAQ
I set up an anti-phishing code but I don't see it in the email — what now?
First, confirm you actually set it up successfully — check in the app's Security Settings. If it's definitely set but the email doesn't show it, the email is very likely fake. There's a small possibility that certain system notification emails may not include it (rare), in which case use other methods to verify.
How do scammers know my email is registered on Binance?
Several possibilities: 1) Your email was leaked from another website, and scammers are mass-emailing; 2) You inadvertently exposed it on social media; 3) It's purely random — scammers don't know if you're a Binance user, but sending 10,000 emails guarantees some hits. This is why I recommend using a dedicated email for Binance.
Are there tools that automatically filter phishing emails?
Gmail and Outlook's built-in spam filters already catch most phishing emails. You can also set up filter rules, such as flagging emails from non-Binance domains that contain the keyword "binance" as suspicious. But don't rely entirely on tools — staying vigilant yourself is the most important defense.
Does phishing happen through phone calls and texts too?
Yes. Scammers also spoof Binance phone numbers and SMS sender IDs. Remember this principle: Binance will never call you to ask for your password or verification codes. Anyone calling to ask you to cooperate with an operation is 100% a scammer.
Is there a useful place to report phishing emails?
You can forward phishing emails to Binance's security team ([email protected]), who will investigate and attempt to shut down phishing sites. Also mark the email as "phishing" in your email client to help your email provider improve its filters.