Lost a load of crypto to a fake 'Binance' login page, is there ANY hope for recovery?

asked 35d ago28 views17 answers
0

Feeling absolutely devastated right now. I was trying to log into my Binance account last night, really late, around 2 am, and I clicked on what I thought was their official link from a Google search. The page looked spot on, exactly like Binance. I put in my login details, then my 2FA code, and it just… refreshed. Thought it was a glitch, tried again, same thing. By the third time, a horrible feeling hit me. I checked the URL properly, and it was slightly off - like biinance.com instead of binance.com.

Panic set in. I immediately went to the real Binance, changed my password, but it was too late. My wallet was drained. Everything gone. About £8,000 worth of crypto. I've reported it to Binance support, but they just sent me a generic email saying they can't recover funds sent off-platform. Is there *anything* at all I can do? I feel so sick to my stomach, like a complete idiot.

Mentioned in this discussion
Binance· neutral
#crypto-scam#phishing#binance#wallet-drain#crypto-recovery#scam-victimasked by Sophie Smith · London, United Kingdom

17 Answers

37

Ugh, Sophie, this is absolutely gutting to hear. It's a classic phishing scam, and these fake login pages are getting incredibly sophisticated. They often capture your details, sometimes even your 2FA, redirect you to the real site, and then drain your account before you even realise. Because the funds were *transferred* from your wallet, not stolen due to a platform compromise, Binance's hands are tied – they're just an exchange.

Realistically, direct recovery is tough. Once crypto leaves your wallet and is transferred to the scammer's address, especially if it's then quickly moved through multiple addresses or to a mixer, tracing becomes very hard for individuals. You can report it to your local police and the FBI IC3 (even if you're in the UK, it's worth reporting to international bodies too sometimes, they share intel with Interpol), but their success rate for these kinds of scams is unfortunately low. The best thing you can do now is learn from it (always check the URL meticulously, bookmark official sites) and be incredibly wary of anyone offering 'crypto recovery services' – 99.9% of them are scams themselves, charging upfront fees for nothing. Your funds are likely gone, I won't lie. It's a very painful lesson.

Grace Nel · East London, South Africaanswered 35d ago
47

This is a prime example of why you *never* click on search engine results for crypto exchanges. Always, always, ALWAYS bookmark your exchange's official URL and use that. Seriously, like, print it out if you have to. Scammers pay good money to get their fake sites at the top of search results, especially during peak hours or when people are likely to be distracted. And never, ever reuse passwords or 2FA if you suspect a compromise. It's a hard lesson, Sophie, but please don't fall for any 'recovery agents' who pop up now. They'll just scam you again for the money you have left.

Amelia Davies · Birmingham, United Kingdomanswered 35d ago
21

Oh wow, Sophie, I'm so sorry this happened to you. Don't feel like an idiot, these scammers are getting SO good at making these fake sites look legitimate. It could happen to anyone, especially when you're tired. I had a close call with one recently, luckily I double-checked the URL at the last second. It's truly heartbreaking to lose that much. Take some time to process it, it's a real knock, but your health is more important than money. File reports, maybe some good will come of it, but don't beat yourself up.

Harry Harris · Sheffield, United Kingdomanswered 35d ago
18

Ugh, feel your pain. Happened to a mate of mine last year with a fake PayPal login, similar story, lost a few hundred quid. With crypto, it's even worse 'cause there's no bank to call and reverse it. The best you can do is freeze any associated bank accounts/cards that might have been linked to the scam in case they got more than just your crypto details. And like others said, recovery services are a massive red flag. They prey on desperation. I know it sucks, but chalk it up to experience. Maybe talk to a financial advisor if the loss really messes with your plans.

Sophie Visser · Amsterdam, Netherlandsanswered 35d ago
12

To be brutally honest, Sophie, the chances of recovering those funds are near zero. Once crypto leaves your wallet to a scammer's, especially via phishing where you willingly provide credentials, it's extremely difficult to trace effectively or retrieve. The decentralized nature of crypto protects users, but also unfortunately protects scammers. Unless the scammer is incredibly sloppy and moves it to an exchange that cooperates with law enforcement and that specific transaction is flagged quickly, it's a gone deal. Most won't be that sloppy. I'm sorry for your loss.

Jonathan Lim · Singapore, Singaporeanswered 35d ago
9

Yeah, I've seen these fake 'Binance' sites. They look absolutely identical, it's terrifying. Often, they'll even match the small details like loading indicators or specific layout quirks of the real site. It's really hard to spot unless you're scrutinising the URL bar. This isn't your fault for being dumb, it's their fault for being malicious and sophisticated. Unfortunately, like everyone's saying, the funds are probably unrecoverable. Watch out for secondary scams now, where people promise to "hack back" your funds. It's almost always a trick.

Lily Evans · London, United Kingdomanswered 35d ago
7

Mate, that's rough. Lost some small change myself on a fake UniSwap site once, clicked a sponsored ad on Twitter, doh. Not £8k though, that's proper painful. With these phishing scams, once you've given away your keys or logged in on their fake site, it's a straight-up gift to the scammer. The only chance *might* be if they move the funds to a centralised exchange like Binance themselves, and you've reported it. But even then, they usually have layers of addresses by that point. It's a long shot, pal. So sorry.

Olivia Anderson · Newcastle, Australiaanswered 35d ago
41

Sophie, this is a very common and distressingly effective tactic. Scammers use various methods to get their phishing sites ranked highly or into sponsored ad slots. The 'biinance.com' example is classic typosquatting. Your mistake wasn't stupidity, but being caught in a momentary lapse of vigilance against a professional adversary.

From a technical perspective, once you entered your details, they essentially had control of your account momentarily. They'd likely initiate a withdrawal instantly. The trail of transactions can be followed on the blockchain using tools like TRM Labs or ChainAbuse, which law enforcement or specialized blockchain investigators use. However, for a user like yourself, this doesn't lead to recovery. These tools show *where* the funds went, not *who* controls the wallet after it leaves a known exchange. Unless the destination wallet directly links to a known, identifiable entity that can be legally pursued, the funds are effectively anonymous and irrecoverable by an individual. Focus on securing *all* your other online accounts now, especially any linked to that email or password.

Ciara Smith · Limerick, Irelandanswered 35d ago
15

I really feel for you, Sophie. It's a horrible feeling of betrayal and powerlessness. Don't let anyone make you feel bad for falling for this; these scams are designed to be convincing. The most important thing now is to look after yourself emotionally. Financial loss hurts, but your well-being comes first. Beyond reporting it to the authorities (which you should definitely do), focus on moving forward. Maybe take a break from crypto for a bit until you feel more secure. Lots of people here have gone through similar stuff, you're not alone.

Leon Koch · Berlin, Germanyanswered 34d ago
8

No sugar-coating it, Sophie. If you used a fake login and they drained your crypto, it's probably gone for good. There's no undo button on the blockchain, and unless the funds landed in an account at a regulated entity that can be frozen (extremely unlikely, they move it too fast), law enforcement has almost no recourse. Anyone telling you they can magically get it back for a fee is just scamming you a second time. Sorry. It's part of the wild west of crypto.

Henry Walker · Darwin, Australiaanswered 34d ago
15

This is a classic phishing attack, and sadly, very common in crypto. The fake URL and the 2FA bypass are hallmarks.

Forensics on the blockchain might be your only slim chance. You'll need to trace the movement of the funds from your wallet. Tools like TRM Labs can help with this, though they are usually for institutions. You might be able to see where it went, but getting it back is another story entirely. Typically, once funds hit an exchange that doesn't do strict KYC, or are mixed, they're gone.

Your best bet is reporting to the FBI IC3. They can't guarantee recovery and usually focus on larger amounts, but it's a crucial step for tracking these operations. Also, report to your local police, make it official. Get a police report number.

Michael Lee · San Antonio, USAanswered 34d ago
8

Oh darling, I am so incredibly sorry this happened to you. Reading your post made my heart ache. That feeling of sick dread must be awful. It sounds like you reacted super quickly by changing your password and contacting Binance, which is brilliant. Don't beat yourself up, these scammers are *so* sophisticated these days, it’s easy to get caught out. I mean, I double-check URLs constantly, and even I worry I might fall for something one day. Just take it one step at a time, and try to be kind to yourself.

Emily Hall · Sheffield, United Kingdomanswered 34d ago
3

Wait, so you put your login *and* your 2FA code into a fake site? How does that even work? Most 2FA is time-based or requires hardware. Did you have that saved somewhere or was it a text-based one? Ngl, sounds a bit suss that they got the 2FA code too unless it was a very specific type of attack. Did Binance ask any questions when you reported it, like how they got past your 2FA?

Charlotte Bouchard · Winnipeg, Canadaanswered 34d ago
9

This is exactly what happened to me last month with a fake 'Coinbase' site. £5,000 gone. I haven't slept properly since. I contacted Binance support too, they just gave me the runaround. I feel like such a fool, I was just trying to buy groceries with crypto because the pound is rubbish rn. Saw a 'deal' on Twitter, clicked the link... same thing. Looked legit. Gave my details. Then my account was empty. They even spoofed the SMS codes for a while. This is just… it’s heartbreaking. Reporting it to IC3 felt like shouting into the void. Nothing.

Fatima Al Nahyan · Sharjah, UAEanswered 34d ago
12

This is a SCAM that uses a session replay technique. They don't 'get' your 2FA code in the traditional sense. When you enter your login details and then your 2FA, the fake site holds those credentials momentarily. If you have 2FA set up such that it's an SMS code or an authenticator app code that's valid for ~30 seconds, they submit it to the *real* Binance almost instantly while it's still valid. They're essentially using your credentials in real-time. It’s slick, brutal, and there’s very little recourse once the crypto leaves your control. Always, *always* use a hardware wallet for significant amounts and consider enabling IP whitelisting or withdrawal freezes on your exchange accounts if offered.

Lukas Schafer · Cologne, Germanyanswered 34d ago
5

Oh wow, that's absolutely dreadful. I'm so sorry to hear you've gone through this. It's terrifying how convincing these fake sites can be. My husband actually had a close call last week with a fake email that looked like it was from his bank, FNB. He almost clicked the link but stopped because the sender's email address looked a bit 'off' – not quite official. It’s a good reminder for all of us to always hover over links and check the sender's address *very* carefully if something feels even slightly weird. Sending you strength, hope you get some peace soon.

Grace Mokoena · Port Elizabeth, South Africaanswered 34d ago
2

£8,000? That's rough, mate. I've heard stories like this, but always thought 'never me'. Still, these fake sites… how do they get past Google Ads or whatever? I saw one last week that looked *exactly* like Kraken, complete with a fake support chat that tried to get me to send crypto to a 'verification address'. Hilarious, but also yeah… terrifying. Did you get any transaction IDs or anything from Binance showing where the funds went? That's probably your only lead, if any. Good luck, I guess.

Matthew Rodriguez · Chicago, USAanswered 34d ago

Your answer

You'll be asked to sign in to post.