Coinbase scam emails, texts and calls: how to spot the fake support
Quick answer
Coinbase itself isn't a scam. Scammers pretend to be Coinbase by email, text or phone and claim your account is at risk. Coinbase says it will never ask for your password or 2FA codes, or tell you to move funds to a "safe" wallet. Hang up and log in the usual way.
- Comes by
- Email, Text, Phone call
- Pretends to be
- Coinbase
- Last updated
How it works
The scam starts with a message that looks like it comes from Coinbase: an email about a suspicious login, a text about a withdrawal you didn't make, or a phone call from "Coinbase security". Scammers spoof caller IDs and sender names, so the display name proves nothing.
They want one of three things:
- Your login and 2FA code. A link sends you to a lookalike sign-in page, or the caller asks you to read out the code that was just texted to you.
- Your crypto, moved by you. The caller says your account is compromised and you must send your funds to a "secure" or "temporary" wallet. That wallet belongs to the scammer. Crypto transfers can't be reversed.
- Remote access. You're asked to install software so "support" can fix the problem.
Coinbase warns that anyone who calls claiming to be from Coinbase and asks you to move assets is a scammer. The FTC adds that no legitimate business or government agency will demand payment in cryptocurrency, including to "protect" your money.
Red flags
- A call, text or email saying your Coinbase account was hacked and you must act now
- Anyone asking for your password, a 2FA code or your recovery phrase
- A request to move your crypto to a "safe", "secure" or "temporary" wallet
- A support phone number you found in a search result or sent in a message
- A sign-in link that isn't on Coinbase's own domain
- A request to install remote-access software
- Someone offering to recover lost crypto for a fee
Example message
Coinbase security alert: a withdrawal was requested from your account. If this wasn't you, call our fraud team immediately at [phone number] or secure your account at [link].
What to do
- 1
Don't reply, click or call back
Close the message. If you're worried, open the Coinbase app or type the address into your browser yourself and check your account there.
- 2
If you gave out a password or code, lock the account down
Change your Coinbase password and the password of your email account, turn on 2-step verification with an authenticator app or security key, and sign out of all other sessions.
- 3
If you moved crypto, act within minutes
Contact Coinbase through its official help center, note the wallet address and transaction ID, and report the transfer. Recovery is difficult once crypto has been sent, so don't pay anyone who offers to get it back.
- 4
If you let someone control your computer
Uninstall the remote-access tool, disconnect from the internet and change passwords from a different device. Tell your bank if you logged in to it while they were connected.
- 5
Reduce what scammers can do next time
Consider turning on withdrawal allowlisting, which limits withdrawals to addresses you've approved, if Coinbase offers it on your account.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers don't need to know you own crypto to try this, but they send far more convincing messages when they have your name, phone number and email. Those details are easy to find on people-search sites and in data breaches. Serus finds where your personal info is listed and removes it, and alerts you when your email or phone number shows up in a breach, so fewer scammers can reach you with a message that sounds personal.
Frequently asked
Is Coinbase a scam?
No. Coinbase is a real company, and scammers pretend to be it. The scam is the fake message or call, not the exchange.
Will Coinbase ever call me and ask me to move my funds?
Coinbase says anyone who calls claiming to be from Coinbase and asks you to move assets is a scammer. Hang up and check your account yourself.
How can I tell if an email is really from Coinbase?
Don't rely on the sender name, which can be faked. Check Coinbase's help page on its official email addresses, and sign in by typing the address yourself instead of using a link.
I sent crypto to a scammer. Can I get it back?
The FTC says it's very difficult to get money back after paying in crypto. Contact the service you used to send it, report it to the FTC and IC3, and ignore anyone who offers to recover it for a fee.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
