My Binance account was locked after I clicked a 'security alert' link, did I just get phished?

asked 0d ago0 views16 answers
0

Feeling absolutely sick to my stomach right now. I got an email, looked super legit, said it was from Binance about 'unusual login activity' and that I needed to verify my account immediately. It had the Binance logo, all the right branding, everything. I panicked, saw the 'click here to secure your account' button and just... clicked it. Went to what looked like a Binance login page, entered my info, then it just refreshed. Felt weird almost instantly. Tried to log into my *real* Binance app a few minutes later and boom – password incorrect. Tried again, then my account showed as locked.

I contacted Binance support, and they're doing their security checks, but it's radio silence basically. I had a decent chunk of ETH and some USDT in there, nothing crazy, but it was money I really couldn't afford to lose. I'm wondering if this was a phishing scam and if my crypto is gone for good. Has anyone else experienced this with Binance or similar exchanges? What are my options here? Do I even have any options?

Mentioned in this discussion
Binance· neutral
#phishing-scam#binance#account-locked#crypto-recovery#email-scamasked by William Tremblay · Victoria, Canada

16 Answers

47

This is a classic example of why you *never* click on links in emails, even if they look legitimate. Always, always, *always* go directly to the official website by typing the URL yourself or using a bookmark you know is accurate. For Binance, that means going to binance.com directly. Scammers are brilliant at mimicking interfaces. The only way to be totally safe is to cut off the vector – the phishing link. It's a hard lesson, I know. For now, keep communicating ONLY with Binance through their established support channels. If anyone reaches out offering recovery services or asks for upfront fees to 'trace' your crypto, RUN. Those are recovery scammers, trying to double-scam you.

Olivia Khumalo · Johannesburg, South Africaanswered 0d ago
37

Okay, William, this sounds exactly like a classic phishing attack, and it's unfortunately very common. You clicked a malicious link, which redirected you to a fake login page designed to steal your credentials. When you entered your details, those went straight to the scammers. They then used your real credentials to log into your actual Binance account. The account lock could be a few things: either Binance's own security systems detected suspicious activity (like a login from a new IP or location by the scammer) and temporarily locked it down, or the scammers themselves changed something to lock you out after moving funds.

The good news is that if Binance *locked* the account due to suspicious activity, there's a chance the funds are still there. The key now is working *only* with official Binance support channels. Do NOT respond to any emails or messages claiming to be Binance that ask for more personal info or a 'recovery fee.' Binance will never ask for that. Be prepared for a lengthy verification process, often involving government ID and video verification, to prove you're the legitimate owner. If funds *were* moved, tracing them on-chain is possible using tools like Chainalysis or TRM Labs, but getting them back is another story entirely, especially if they went to a mixing service or other exchanges before you even reported it.

Ava Fortin · Montreal, Canadaanswered 0d ago
18

Oh honey, I'm so sorry this happened to you. It's truly terrifying when you realize you've been scammed, especially with your money. Don't beat yourself up too much, these phishing emails are incredibly sophisticated now, it's easy to fall for them, especially when you're in a panic like you were about 'unusual activity.' It happened to my friend with her bank account, same exact panic factor. The waiting game with support is the worst part, I know. Just keep following up with Binance through their *official* support channels, like the live chat on their actual website or the number from their official site, *not* any numbers from the scam email. Hope they can sort it for you!

Louise Dubois · Nantes, Franceanswered 0d ago
12

Phishing? Sounds about right. These guys are getting clever now, using real-looking emails. My cousin nearly fell for one with his Capitec bank account. The only thing that saved him was the email address itself looked slightly off, like a tiny typo. But when you’re panicking, who checks that, right? I'd say if Binance locked it themselves, that's not the worst news. It means their systems might have caught the shady login before the scammers could clean you out. But man, crypto is rough. Once it's gone, it's usually gone. Keep us updated with what Binance says, but temper your expectations, bru. Good luck.

Sipho du Plessis · East London, South Africaanswered 0d ago
22

Ugh, this sucks, man. Seriously. I clicked on a sketchy link once too, thinking it was PayPal, ended up giving my info away. Luckily, I didn't have much money in there, but it was still a pain to deal with. The anxiety you feel when you realize you messed up is just awful. Sounds like your immediate action to contact Binance was the right move. They have pretty robust security usually. When they say 'security checks,' it basically means they're investigating the breach and trying to confirm your identity so they don't give access to the scammer. Don't try to log in repeatedly from your end either; that might just trigger more lockouts. Just wait for their official response and be patient, even though it's hard. Crossing my fingers for ya.

Mason Pelletier · Edmonton, Canadaanswered 0d ago
14

Yeah, definitely sounds like phishing, mate. Happened to me a few months back with my Revolut. Got a text, not even an email, saying my account was suspended and to click a link. I clicked it, entered my details, and within minutes, R5000 was gone. Just a few minutes! Couldn't believe how fast they worked. Revolut was useless; they just said I authorized the transaction by entering my details. It's a horrible feeling of betrayal and stupidity mixed together. The waiting game with support is agonizing. I hope Binance is better than Revolut was for me. Keep hounding them, but don't expect miracles. These scammers are quick.

Connor van der Merwe · Cape Town, South Africaanswered 0d ago
10

Oh no, William, I'm so sorry! This literally happened to my cousin last year with her crypto. Identical email, fake login page, account locked. She lost about R20,000 in Bitcoin. It's so frustrating because these emails look so real, right? She spent weeks trying to get it back, first with the exchange, then trying to report it, but it just went cold. The exchange basically said they couldn't undo what she 'authorized' by giving her details to the scam site. It's a harsh lesson. I really hope your situation is different because Binance locked it themselves. That gives a tiny spark of hope. Please update us.

Emma Dlamini · Pretoria, South Africaanswered 0d ago
28

I had a very similar experience with a fake 'security alert' but for my bank! I almost clicked it because it came through on a Friday evening, just when I was winding down, and I wasn't paying full attention. Thank God my husband looked over my shoulder and noticed the sender's email address was a bit off, like 'noreply@bnance.com' or something. It's so easy to miss those tiny details when you're stressed. The fact that your account is locked by Binance itself might be a good sign, though. It means their system detected something amiss. Don't lose hope yet, but definitely follow every single instruction from their *official* support very carefully.

Aoife Ryan · Cork, Irelandanswered 0d ago
8

Oh god, William, I totally get that sick feeling. I fell for a phishing email targeting my Coinbase account, same vibe – 'unusual activity, click here to verify.' I was sleepy and just clicked. Lost about £1500 of my Bitcoin. Coinbase support was awful, took forever, and eventually just told me it was my fault for entering my details on a fake site. They traced it to some random wallet, but that was it. No recovery. It's a proper kick in the teeth. I really hope your outcome is better than mine was. Definitely don't trust anyone who DMs you now claiming they can help you 'recover' your funds; they're just preying on your desperation.

Ciara O'Connor · Belfast, Irelandanswered 0d ago
41

Yes, William, this is absolutely a phishing scam. The goal is to panic you into giving up your credentials on a fake site. The fact your account on Binance is locked is actually a mixed signal, but potentially good. It means either Binance's automated systems flagged the suspicious login attempt from the scammers and secured your account *before* they could move funds, or the scammers themselves changed your password or security settings causing a lock-out, and then attempted to drain it.

Your priority now is to continue working *only* with official Binance support. Be prepared for extensive KYC (Know Your Customer) verification to regain access, as they need to be certain you are the rightful owner. This might involve photo ID, proof of address, and potentially even a video call. Do not engage with anyone claiming to offer recovery services. These are almost universally scams, asking for an upfront fee and then disappearing. If funds were indeed stolen, you can report it to your local police and the Canadian Centre for Cyber Security, but cryptocurrency recovery, especially from common user-level phishing, is exceedingly difficult once it leaves the exchange. Focus on securing your account access first and foremost.

Saoirse Lynch · Dublin, Irelandanswered 0d ago
3

Oh mate, that sounds exactly like a phishing scam. The fake login page is classic. They likely got your credentials and immediately used them to transfer funds out, hence the account lockout. Binance itself wouldn't lock your account like that after a 'security check' click; they'd usually require you to log in through their official site/app directly or use a verified secure channel like their authenticator app confirmation. Your crypto is probably gone, but DON'T give up entirely. Report it to Binance, obviously, but also file a report with IC3 (Internet Crime Complaint Center) in the US if your bank or ISP has US ties, or your local equivalent. Sometimes these investigations yield something, though it's a long shot.

Harry Williams · Cardiff, United Kingdomanswered 0d ago
2

Awkward. That's a rough situation to be in. I felt my stomach drop just reading it. Don't beat yourself up too much, these scams are getting incredibly sophisticated. The fact that the login page looked so real is terrifying. Hang in there and keep pushing Binance support. Maybe try reaching out to them on Twitter too, sometimes public pressure gets a faster response. Sending good vibes your way.

Daniel Walsh · Cork, Irelandanswered 0d ago
1

Wait, so you just typed your username and password into a random linked page? No 2FA? No email confirmation from Binance *themselves* saying 'go here'? That's... a bold move. Most exchanges like Binance have very strict protocols for account recovery or security alerts. They'd almost never ask you to re-enter credentials via an email link. I'm not saying it's impossible they can help, but relying on Binance support is your main option now. Be wary of anyone privately messaging you promising to recover your funds – that's usually the next stage of the scam.

Isabella Bouchard · Montreal, Canadaanswered 0d ago
4

This is textbook phishing. The domain will have been slightly off from Binance.com – e.g., Binance-security.com or similar. They clone the look, but the URL is the giveaway. Always, *always* hover over links before clicking and check the actual destination. Better yet, never click links in emails for financial matters. Go directly to the source website or app. Your funds are likely already on the move. Binance's internal security team will investigate, but getting funds back once they've left the exchange is extremely difficult. TRM Labs and Chainalysis track a lot of on-chain activity, if they can identify the wallet receiving your funds, that's a start, but it doesn't mean recovery.

Leon Hoffmann · Berlin, Germanyanswered 0d ago
2

Ugh, sounds like a total scam. Why would an email trigger an immediate account lock? That doesn't add up. Usually, exchanges send alerts, and *then* you log in yourself to check. If you click a link and enter details, that's on you, unfortunately. Did you even check the email headers or sender domain? They always try to spoof it. Maybe try to pull up the actual email source code and see where it *really* came from. Good luck with Binance support, but don't get your hopes up too high.

Ciara Ryan · Cork, Irelandanswered 0d ago
2

Honestly, it sounds like you got scammed. These emails look professional now, it's scary. I got one that looked like it was from my bank last month, even had my name and account number on it (which... how?!). I almost clicked, but my partner was standing next to me and pointed out the URL was like, 'bankofameeericaonline.biz' or something stupid. Total scam. You entered your login details on their fake site, so they have your password and probably tried to bypass 2FA too. It's a mess.

Emma Walsh · Limerick, Irelandanswered 0d ago

Your answer

You'll be asked to sign in to post.