Sent crypto to a spoofed 'Binance Wallet' app, wallet drained - can I get it back?

asked 26d ago18 views10 answers
0

Guys, I'm absolutely devastated. I downloaded what I *thought* was the official Binance Wallet app from an ad I saw on social media – Facebook, I think. It looked super legit, the interface, everything. I logged in with my actual Binance credentials and then tried to transfer some ETH from my main Binance account to this 'wallet' app. I wanted to stake it, you know? The transfer went through fine initially, confirmed on Binance, but then when I checked the 'wallet' app, nothing. And then a few hours later, my entire main Binance account got drained, not just the ETH I sent but everything else too. I changed my passwords, enabled 2FA everywhere, but the crypto's gone. Is there any way to trace this or get it back? Feeling really stupid right now. Any advice would be amazing.

Mentioned in this discussion
Coinbase· neutral

10 Answers

45

Louis, I'm so sorry this happened to you. This is a classic 'wallet drainer' scam, often disguised as official apps or platforms. The moment you entered your Binance credentials into that fake app, you essentially handed over access to your real account. The app was designed to harvest your login details and then drain your funds. The fact that your whole main Binance account was drained, not just the ETH you sent to the 'fake wallet,' indicates that your main account's security was compromised directly, likely via those credentials. Tracing might be possible with blockchain analytics firms like Chainalysis, but it's expensive and doesn't guarantee recovery. The funds are likely already moving through mixers or to offshore exchanges. Your best bet is to report everything to Binance's security team immediately, and also file a report with your local cybercrime unit. Be very wary of any 'recovery services' that reach out, especially those asking for upfront fees; they are almost always scams themselves.

Lily Kruger · Bloemfontein, South Africaanswered 26d ago
38

Ugh, this sucks, Louis. I totally get the feeling of embarrassment and anger. Something similar happened to me, though not with a fake app, but a fake website. I clicked on a sponsored link that looked exactly like Coinbase. Put my login details in there, and poof, my wallet was empty a few hours later. I reported it to Coinbase and the police, but they both basically said once it's off the exchange, it's incredibly hard to get back. The only thing they could do was flag my account for suspicious activity. I did use Nethertrace for a while because I saw some good reviews, and they *did* give me a detailed report of where my funds went, showing it was moved to a dark web mixer, which was good for my peace of mind, but it didn't get my money back. Be careful who you trust now, there are so many fake recovery agents out there too.

Sophie Murphy · Dublin, Irelandanswered 26d ago
22

Oh no, Louis, that sounds absolutely awful. Please don't beat yourself up; these scammers are incredibly sophisticated and make these fake apps look so convincing. It's a horrible feeling to have your trust abused like that. Your priority now is definitely securing *everything* else – change passwords on all your other accounts, especially email, banking, social media, anything linked to your crypto. Make sure you've got strong, unique passwords and 2FA everywhere. For recovery, it feels like a long shot, but contacting Binance is the right first step. They might have internal tools to flag suspicious transfers or at least provide transaction IDs. And yeah, what Lily said about reporting it to the authorities is important, even if it feels futile sometimes. Just make sure you document absolutely everything.

Emma Sullivan · Galway, Irelandanswered 26d ago
18

Look, I hate to say it, but if your *entire* Binance account was drained after you entered your real credentials into that fake app, it's pretty much a goner. That's a textbook phishing attack. Even if you trace the funds with Chainalysis, which costs a bomb btw, the crypto is almost certainly already offshored or laundered through multiple addresses. Binance themselves rarely recover funds in these situations because the compromise happened on *your* end by giving away your login info. The ad on social media was probably paid by the scammers. Sorry to be blunt, but setting expectations. Secure what you have left and learn from this. No 'recovery service' is gonna get it back.

Tyler Johnson · Houston, USAanswered 26d ago
15

Yeah, I'm with Tyler on this one. It's a brutal lesson, but when you download an app from an unofficial source and then put your real login details into it, you're basically giving them the keys to the kingdom. "Spoofed Binance Wallet app" screams phishing. The moment you put your credentials in there, they had direct access. It's not like you sent it to the wrong address on a legitimate platform; you handed over your entire account. Recovering actual crypto from a compromised account is extremely rare, especially if it's already been moved to another wallet address and mixed. Report it, sure, but manage your expectations. I see this happen way too often.

Alice Garcia · Paris, Franceanswered 26d ago
12

NGL, this is one of those times where the crypto is probably unrecoverable. Scammers are really good at creating fake apps and sites that look identical to the real thing. The whole point is to steal your login info. Once they have that, they just log into your real Binance account and drain it. There's no fancy recovery process for that. It's like someone stealing your bank login and clearing out your bank account – the money is just gone. Your best bet is always to download apps directly from official app stores (Apple App Store, Google Play) or directly from the exchange's website *after* you've confirmed the URL is correct. Social media ads are a huge red flag.

Lina Simon · Nantes, Franceanswered 26d ago
9

Sorry to hear this, man. It's a horrible situation. The key takeaway here, as others have said, is that once you enter your genuine credentials into a fake platform, the game is usually over. It's not like a transaction error where funds might be reversible. This was outright theft of your login. The only glimmer of hope might be if Binance has some kind of insurance policy for these types of compromises, but that's super rare and usually only for internal breaches, not user error. Definitely talk to their support, explain everything clearly. They can at least confirm the addresses your funds went to. And never, ever download crypto apps from social media ads or unofficial sources. Always go to the official website and double-check the URL.

Daniel Smith · Cardiff, United Kingdomanswered 26d ago
31

Louis, I'm truly sorry you're going through this. Based on your description, this sounds like a credential harvesting attack, leading to a wallet drain. The fact that your entire Binance account was compromised suggests the fake app was a phishing tool designed to capture your login details. Once they had your username and password, they simply logged into your actual Binance account and initiated transfers. Binance usually has quite robust security measures in place, but if your login was given away, it bypasses those. Recovery in such cases is notoriously difficult. Blockchain tracing tools like Chainalysis can track the movement of funds on-chain, providing an audit trail. This information is critical for law enforcement agencies, but it rarely leads to direct recovery unless the funds land in an exchange that cooperates with legal requests (and even then, it's a lengthy process). Focus on reporting to Binance and local authorities.

Sophie Doyle · Cork, Irelandanswered 26d ago
7

Yeah, I had a friend who got hit by something similar, not an app but a fake trading platform (looked like ZG.com but was a spoof). He put in some capital, and it showed up on the site, but when he tried to withdraw, they just kept asking for more fees. Eventually, the whole site disappeared. With your situation, it's even more direct because they got your actual Binance login. I know it's a pain, but file an IC3 report if you're in the US, or whatever the equivalent is in France. Sometimes, if enough people report the same scam, authorities can build a case, but it's a long shot for getting your money back. The main thing is to secure all your other digital assets now.

Sophie Walker · London, United Kingdomanswered 26d ago
5

Agreed with others, this is a very tough one. When your actual exchange login details are compromised, it's almost like someone walked into your physical bank with your card and PIN. The exchange isn't liable for that kind of direct access, which is why recovery is so rare. For anyone reading this, this is why two-factor authentication (2FA) is SO important, and ideally, a physical security key like a YubiKey for your main exchange accounts, not just SMS or authenticator apps which can sometimes be circumvented. Always, always check the source of apps and websites. Type the URL directly, don't click ads. Hope you can somehow put this behind you, Louis.

Naledi Pretorius · Cape Town, South Africaanswered 25d ago

Your answer

You'll be asked to sign in to post.