Phishing websites and scams run rampant in the cryptocurrency space, with massive amounts of users losing assets every year from clicking fake links and logging into fake websites. As the world's largest exchange, Binance is naturally a top target for impersonation. Learning to identify phishing sites is essential to protecting your funds. Always access Binance Official through legitimate channels, and download the app only from official sources: Binance Official APP. Apple users can refer to the iOS Installation Guide for installation.
What Is a Phishing Website
A phishing website is a fake site created by scammers that looks nearly identical to the real Binance website but has a different URL. When you enter your credentials on the fake site, scammers capture that information, then use your username and password to log into the real Binance and transfer your funds.
Characteristics of phishing websites:
- The page appearance closely resembles the real Binance, making it hard for most people to spot the difference at first glance
- The URL looks very similar to the real one but has subtle differences — such as an extra letter or a number substituted for a letter
- They're typically spread through search engine ads, social media links, or scam emails
- Some even pop up fake "customer support" windows to trick you into providing more information
Common Phishing Tactics
Tactic 1: Fake URLs
Scammers register domains that closely resemble Binance Official, such as:
- Swapping the letter "i" for "l" or the number "1"
- Adding extra letters or words to the domain
- Using different suffixes (.net, .org instead of .com)
How to protect yourself: Carefully check the URL in your browser's address bar every time you visit Binance, or add the official URL to your browser bookmarks and always access it that way.
Tactic 2: Scam Emails
Scammers send emails disguised as official Binance communications, typically claiming "account anomaly requires verification," "claim your airdrop reward," or "security upgrade — please click this link." The links in these emails lead to phishing sites.
How to protect yourself: Binance offers an anti-phishing code feature. Once enabled, every official email from Binance will display the code you set. If an email claims to be from Binance but doesn't contain your anti-phishing code, it's fake.
Tactic 3: Fake Customer Support
On social media or Telegram groups, scammers impersonate Binance support and message you directly, claiming your account has issues that need to be "resolved." They then try to get you to share your credentials or transfer funds to a specific address.
How to protect yourself: Binance support will never message you first, and they will never ask for your password or request a fund transfer. If this happens, ignore it and block the person immediately.
Tactic 4: Search Engine Ads
Scammers purchase ads on search engines, so when you search for "Binance," phishing sites may appear in the ad slots (usually at the very top). It's easy to click on them without noticing.
How to protect yourself: Never click on ad links in search results. Type the URL directly in the address bar or use your bookmarks.
Tactic 5: Fake Apps
Scammers create counterfeit apps that look identical to the Binance app and distribute them through unofficial channels. If you log in through a fake app, your information is stolen.
How to protect yourself: Only download the app from official channels. Android users should download the APK from Binance Official, and iPhone users should get it from the App Store. Never install apps from links shared in group chats or forums.
Core Methods to Identify Phishing Sites
1. Check the URL
This is the most critical step. Before logging in, carefully inspect the browser address bar:
- Confirm the domain spelling is completely correct
- Confirm it's an HTTPS connection (look for the lock icon in the address bar)
- There shouldn't be extra subdomains before the domain
2. Enable Your Anti-Phishing Code
After setting an anti-phishing code in Binance's security settings, all official emails from Binance will include your code. This is the most reliable way to verify email authenticity.
3. Use Binance's Official Verification Channel
Binance provides an official verification page where you can enter URLs, email addresses, phone numbers, and other information to verify whether they belong to Binance. Use this tool to check any suspicious contact information.
4. Never Click Suspicious Links
Whether it's from a group chat, private message, email, or social media post, don't click links directly. If the content mentions a Binance-related action, open your browser manually and type the URL yourself or use your bookmarks.
What to Do If You've Already Been Tricked
If you've unfortunately entered your account information on a phishing site:
- Change your Binance password immediately: The faster, the better — beat the scammer to it
- Check API keys: If you find any unfamiliar API keys that were created, delete them immediately
- Check withdrawal addresses: Look for any unrecognized addresses added to the withdrawal whitelist
- Contact Binance support: Explain the situation and request an account freeze if necessary
- Check your assets: Confirm whether there are any unauthorized withdrawal records
FAQ
Q: Will Binance's official team contact me through Telegram or WeChat?
A: No. Binance's official support only communicates through the in-app live chat, the support page on the official website, and official email addresses. Anyone who contacts you through Telegram, WeChat, or other social apps claiming to be "Binance support" is a scammer.
Q: Can I trust a Binance link sent by a friend?
A: Be cautious. Your friend may have been scammed themselves, or their social media account may have been hacked. No matter who sends you a link, always navigate to Binance by manually entering the URL — never click links directly.
Q: I entered my password on a phishing site but have Google Authenticator enabled. Are my funds safe?
A: Relatively safer, since scammers only have your password and not your Google Authenticator code, meaning they can't log in right away. However, you should still change your password immediately, because some advanced phishing sites relay your verification code in real time. Don't take chances — change your password as soon as possible.