Coinbase email scam: is that alert or invoice real?
Editorially reviewed · Last updated September 8, 2026
Yes — this is a scam. Coinbase doesn't email you a link to “verify” your account or cancel a withdrawal.
Exhibit · Email
Other versions you might get: “Your account has been locked,” a “new device sign-in,” a fake purchase receipt, or an “updated terms — re-verify your identity” notice. The text version is the Coinbase text scam; same playbook by email.
What to do right now
- Don't click the link or the button. Don't reply.
- Check independently. Open Coinbase yourself and review activity. If anything is unfamiliar or you exposed credentials, follow its official compromised-account and locking instructions; do not assume the withdrawal is absent.
- If you already entered your password or 2FA code: change your Coinbase password immediately, reset two-factor, and check for unknown devices under Settings → Security. Move funds only after the account is re-secured.
- Report it. Forward the email to security@coinbase.com, then file at reportfraud.ftc.gov.
- Delete it and mark it as phishing.
Reduce the risk of another scam
If you exposed Coinbase credentials or sent funds, contact official support promptly and follow its account-locking instructions. Preserve transaction hashes and destination wallet addresses and report to IC3. Crypto transfers generally lack a card-style chargeback, but reporting and provider action may still help; recovery is not guaranteed.
● Public service · free steps first
Take the free protection steps first
A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.
- Freeze your credit — free at all three bureausRestricts access to your credit report for new credit applications. It does not protect existing accounts from misuse.
- Report it and get a recovery plan at IdentityTheft.govThe FTC walks you through exactly what to do next, for free.
Decide what protection you need
Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.
No purchase needed. How we use evidence.
Frequently asked
Does Coinbase send emails about pending withdrawals?
I clicked the link and entered my Coinbase login — what now?
How can I tell a real Coinbase email from a fake one?
Why am I getting Coinbase emails if I don't have a Coinbase account?
Related scams
Coinbase text scam: is that message real?
Got a text about a Coinbase login, withdrawal, or verification code you didn't request? Here's the verdict and exactly what to do.
Phishing email examples: 7 illustrations, annotated
Seven illustrated phishing emails impersonating familiar organizations, with annotated warning signs, independent checks, and steps after exposure.
PayPal email scam: is that invoice or alert real?
Got a PayPal email about a payment, invoice, or account limit you don't recognize? Here's the verdict and what to do.
Crypto scams: guaranteed returns are the giveaway
An “investment manager,” a can't-lose trading platform, a fee to withdraw your profits? Here's the verdict and what to do.
Sources
- 01What to know about cryptocurrency and scams— Federal Trade Commission
- 02How to recognize and avoid phishing scams— Federal Trade Commission
- 03Official security and fraud guidance— coinbase.com
- 04What To Do if You Were Scammed— consumer.ftc.gov
Pass it on
Help protect someone else
If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.