TLDR
Binance has warned of a spike in phishing texts that pretend to be security alerts and trick users into clicking malicious links and giving up account credentials.
- Attackers are sending fake Binance security SMS messages with urgent language and shortened links that lead to credential?stealing sites.
- Binance says it never asks users to verify or secure accounts via text links and reports using AI tools to cut phishing success, but user mistakes still lead to losses.
- Key protections include never clicking links in texts, using Binances security features, and contacting support through the official app or site if you interact with a suspicious message.
Deep Dive
1. How The Current Scam Works
According to recent coverage, Binance is warning about a surge in phishing campaigns that use text messages disguised as urgent account alerts, such as suspicious login detected or account settings changed and then push users to verify immediately through a shortened link that leads to a fake site that captures passwords and 2FA codes. Binance explicitly states that it will never ask you to tap a link in a text message to verify or secure your account, and advises users to treat such requests as fraudulent. Reports note that Binance did not disclose how many users have been affected or how much money has been lost so far, but the pattern matches past large scale crypto phishing waves.
The threat is not a new hack on Binance itself, it is social engineering that relies on you trusting and acting on a fake security message.
2. Why This Threat Is So Serious
Phishing is one of the leading sources of crypto losses because once a victim enters credentials or 2FA codes on a fake site, scammers can drain accounts quickly and sometimes reset security settings before the user notices. Binance says it uses more than 100 artificial intelligence models to detect suspicious behavior and credits these with an eightfold reduction in successful phishing attempts, but emphasizes that these systems cannot protect users who voluntarily hand over their details on a malicious page. Previous campaigns, including one in Hong Kong where multiple users lost hundreds of thousands of dollars after following fake links, show how fast these attacks can escalate once scammers find a template that works.
Platform controls help, but they cannot undo a credential leak, so your own verification habits are a critical part of your security.
3. Practical Steps To Protect Your Account
Binance highlights several concrete defenses: first, never click links in unexpected texts or emails; instead, open the Binance app directly or type the official URL manually, and use tools like Binance Verify to check any suspicious communication. Second, enable withdrawal address whitelists so funds can only leave your account to addresses you have pre approved, which limits damage even if someone gets in. Third, turn on the Anti Phishing Code in your email settings so genuine Binance emails always include your personal code; if it is missing or wrong, treat the message as fake. If you have already clicked a suspicious link or entered details, go through the app or official website immediately to change your password, review recent activity, and contact support.
Treat every unexpected security alert as untrusted until you confirm it inside the official app, and use built in security settings so a single mistake is less likely to cost you everything.
Conclusion
Binances phishing warning signals growing attacker focus on impersonating trusted security messages rather than breaking exchange infrastructure. The strongest defense is a combination of platform tools, like withdrawal whitelists and anti phishing codes, and strict personal habits for verifying any message that asks you to click a link or share sensitive information.
