Discovering that your Binance account has been compromised is an emergency — every minute that passes could mean more losses. If you suspect or confirm that your account has been breached, don't panic. Follow the steps below and act as quickly as possible. Time is money — take action immediately. You can handle the situation through the Security Center and support page on Binance Official, or quickly respond via the Binance Official APP. Apple users who need to install the app can refer to the iOS Installation Guide.
How to Tell If Your Account May Be Compromised
The following signs may indicate your account has been breached:
- You receive login notification emails or texts that you didn't initiate
- Your account balance has decreased for no apparent reason
- You notice unfamiliar transaction or withdrawal records
- Your password has been changed and you can't log in
- You receive security setting change notifications that you didn't trigger
- You find unknown API keys in your account
If you notice any of these signs, immediately follow the emergency steps below.
Emergency Step One: Disable Your Account
If You Can Still Log In
- Log in to Binance immediately
- Go to the "Security" page
- Find the "Disable Account" or "Freeze Account" option
- Click to disable — this instantly freezes all account functions, including login, trading, and withdrawals
- Once disabled, the hacker also cannot operate your account
If You Can No Longer Log In
- Go to the Binance Official login page
- Try the "Forgot Password" feature
- If both the password reset email and phone have been changed, contact Binance support immediately
- Use the live chat on the Binance app or website to explain the situation and request an emergency account freeze
Contacting Binance Support Urgently
Binance offers 24/7 customer support. You can reach them through:
- The live chat widget in the bottom right corner of the website
- The support section within the app
- Sending an email to Binance's official support address
When communicating with support, explain that your account may have been compromised and request an emergency freeze. Provide your registered email, UID, and other identifying information to help them locate your account quickly.
Emergency Step Two: Change Your Password and Security Settings
After ensuring the account is frozen (or if you can still log in), take the following actions immediately:
Change Your Binance Password
Set a completely new, strong password that has no connection to your previous one.
Change Your Email Password
If you registered your Binance account with an email address, your email may also have been compromised. Change your email password immediately and enable two-step verification on your email account.
Reset Google Authenticator
If you suspect the Google Authenticator secret key may have been leaked, reset it in security settings and rebind with a new key.
Check and Delete Unfamiliar API Keys
API keys can be used to remotely control your account. Go to the "API Management" page — if you find any API keys you didn't create, delete them all immediately.
Check the Withdrawal Whitelist
Review the withdrawal whitelist for any addresses you don't recognize. If you find any, delete them immediately.
Emergency Step Three: Assess the Damage
Once things have calmed down, carefully review your account:
- Check withdrawal history: Go to "Wallet" > "Transaction History" > "Withdrawals" to see if there are any withdrawals you didn't authorize
- Check trade history: Look for abnormal trading activity, such as your assets being sold at low prices
- Check asset balances: Compare with what you remember to determine the loss amount
- Screenshot all evidence: Save screenshots of any abnormal trade records, withdrawal records, and login records
Emergency Step Four: Submit a Support Ticket to Binance
Prepare the following information and submit a formal security incident report to Binance:
- Your Binance UID and registered email
- The time you discovered the anomaly
- A detailed description of the unauthorized actions (which trades and withdrawals weren't yours)
- All relevant screenshots as evidence
- Your recent login devices and IP address information
Binance's security team will investigate and do their best to help you recover your assets. Keep in mind that if the hacker has already withdrawn the funds and laundered them through on-chain mixers, recovery becomes very difficult.
How to Prevent Being Hacked Again
After going through this painful experience, make sure to strengthen your security measures:
- Enable all available verification methods: Turn on Google Authenticator, email verification, and SMS verification
- Enable withdrawal whitelist: Only allow withdrawals to your own addresses
- Set up an anti-phishing code: Prevent falling for phishing emails again
- Use a dedicated email: Register a separate email exclusively for Binance, not used for anything else
- Use a password manager: Generate and store strong, unique passwords
- Regularly check login devices: Remove any devices you don't recognize
- Never click suspicious links: Always manually type the URL when accessing Binance
FAQ
Q: Can stolen assets on Binance be recovered?
A: It depends on the situation. If the hacker hasn't had time to withdraw, your assets are safe once the account is frozen. If the funds have already been withdrawn, Binance's security team will attempt to track them, but on-chain transfers are irreversible once confirmed — especially after being processed through mixers, making recovery highly unlikely. The key is to freeze your account as soon as you notice something unusual.
Q: Should I report it to the police?
A: If the loss is significant, filing a police report is recommended. While cross-border cryptocurrency theft investigations are challenging, having a police report on record can serve as documentation for future claims. Cooperate with Binance's security team investigation at the same time.
Q: Is it my fault or Binance's fault that my account was hacked?
A: In most cases, it's due to the user's own security measures being inadequate (password leaked, clicked a phishing link, didn't enable 2FA, etc.). Binance's system security is among the highest in the industry, and the probability of the platform itself being attacked is extremely low. The most important thing is to do everything within your control to protect your account.