Coinbase text scam: is that message real?
Editorially reviewed · Last updated September 8, 2026
Yes — this is a scam. The illustrated text uses a look-alike Coinbase address and a withdrawal scare. Do not use its link to verify the account.
Exhibit · Text message
Other versions you might get: Impersonation messages may claim a withdrawal, a new-device login, a locked account, or a wallet migration. Do not use their supplied number, link, or recovery phrase. Use the Coinbase app or official website independently.
Reported versions of this message
Each source below documented a text. Web addresses are defanged, and identifying values may be redacted; the remaining wording follows the source. Similar wording is a reason to check independently, not proof that two messages came from the same sender.
“(COINBASE) The OTP code for your withdrawal is [code redacted]. If this was not you please call us on [phone number redacted]. Ref [reference redacted].”
Documented by KOLO 8 News Now (Washoe County Sheriff’s Office alert) · May 2025 “Your Coinbase withdrawal code is: [code redacted]. Please do not share this code with anyone. If you have not requested this, please call : [phone number redacted]. REG: [reference redacted].”
Documented by Yahoo News · July 2025 “Coinbase Alert: Unusual login attempt detected. Verify your account immediately at coinbase-secureauth[.]com”
Documented by MalwareTips · October 2025 “Your account will be suspended in 24 hours if not verified. Log in here to keep access: cb-verifywallet[.]net”
Documented by MalwareTips · October 2025 “Coinbase: We have noticed a login attempt from Beijing, China, If you did not authorize this login please call us immediately on (866) 524-**** Ref:[reference redacted]”
Documented by Reddit r/Scams · August 2025 “Coinbase: Your Withdrawal Code is 41****. Please do not share this code with anyone. If you have NOT requested this, please call: INSERT NUMBER for support. REF:[reference redacted]”
Documented by Reddit r/Scams · September 2025 “[CB[.]payments]- Your approval is currently required for a pending withdrawal of $1,862.75. If you were not expecting this, call [removed phone number that is 3-2-5 digits]”
Documented by Reddit r/Scams · June 2026
What to do right now
- Don't tap the link or call any number in it. Don't reply — even “STOP” tells them the number is live.
- If you already entered anything: change your Coinbase password from the app, turn on (or reset) 2FA, and check Settings → Security for unknown devices.
- Report it. Forward the text to 7726 (SPAM), then file at reportfraud.ftc.gov.
- Delete the message.
Reduce the risk of another scam
Do not use the message’s link to check the claim. Open the real service yourself. If you paid or shared account details, start with what to do after a scam. Blocking and reporting can reduce unwanted contact, but they cannot stop every attempt or tell you how the sender found you.
Common Coinbase impersonation messages
Common versions claim a withdrawal you did not request, a new-device login, a locked account, or a wallet migration. These are examples, not a complete inventory of current campaigns. The message may invent the event, so do not accept it as an account record. Open Coinbase independently. Never move funds to a wallet or recovery phrase supplied by a supposed support contact.
What happens if you tap
A phishing page can imitate Coinbase and capture credentials or sign-in codes. Two-factor authentication helps, but a real-time phishing flow can still defeat some forms of it. If you only opened the page, close it and do not download anything or grant permissions; clicking alone is generally less risky than entering credentials, but it is not a guarantee of safety. Update your device and security software and scan if you suspect a download or malware. If you entered details, use a trusted device to secure the account through Coinbase’s official support route.
Coinbase’s actual security rules
Coinbase warns against sharing passwords, two-factor codes, private keys, or recovery phrases with people claiming to be support. It will not ask you to transfer assets to a supposedly safe wallet. These requests are stronger evidence than a familiar sender name or a link that looks right. Open the Coinbase app or official site yourself, use its support and account-locking instructions if needed, and report the suspicious message.
The follow-up call scam
An impersonation text may be followed by a call. The caller can know genuine details without being Coinbase. Coinbase’s May 2025 disclosure described criminals bribing support agents to obtain customer information for social engineering. That history does not prove that any particular caller used that breach. Hang up on requests for codes, remote access, or transfers to a safe wallet and contact Coinbase independently.
If your crypto is already gone
Secure the account first. Use Coinbase’s official compromised-account and locking instructions, then review devices, credentials, and activity with support. Preserve the payment trail: transaction hashes, destination wallet addresses, dates, amounts, and messages. Contact the sending provider promptly and report to IC3. Crypto transfers typically lack a card-style chargeback, but do not assume no action is possible. Recovery is not guaranteed. Avoid unsolicited recovery offers, especially advance fees or promises of certain results.
● Public service · free steps first
Take the free protection steps first
A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.
- Freeze your credit — free at all three bureausRestricts access to your credit report for new credit applications. It does not protect existing accounts from misuse.
- Report it and get a recovery plan at IdentityTheft.govThe FTC walks you through exactly what to do next, for free.
Decide what protection you need
Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.
No purchase needed. How we use evidence.
Frequently asked
Does Coinbase send text messages about blocked withdrawals?
I tapped the link and entered my details — what should I do now?
What is coinbase-secure[.]app?
How do I report a Coinbase scam text?
Does Coinbase ever send text messages?
I got a Coinbase verification code I didn’t request — is someone in my account?
I called the number in a Coinbase text and gave them information — what now?
Can Coinbase recover crypto stolen in a text scam?
Why am I getting Coinbase texts when I don’t even have a Coinbase account?
Related scams
Coinbase email scam: is that alert or invoice real?
Got a Coinbase email about a blocked withdrawal, a locked account, or a purchase you never made? Here's the verdict and exactly what to do.
Apple text scam: is that “Apple ID locked” message real?
Got a text saying your Apple ID or iCloud has been locked and you must verify within 24 hours? Apple doesn't do that. Here's the verdict and what to do.
Zelle text scam: is that message real?
Got a Zelle text about a payment you didn't make, a locked account, or a code to confirm? Here's the verdict and exactly what to do.
Robinhood text scam: is that login alert real?
Got a text about a Robinhood login you didn't make, with a number to call? Here's the verdict and what to do.
Sources
- 01How to recognize and report spam text messages— Federal Trade Commission
- 02What to know about cryptocurrency and scams— Federal Trade Commission
- 03Report fraud to the FTC— Federal Trade Commission
- 04Internet Crime Complaint Center (IC3)— FBI
- 05FBI Warns of Scammers Impersonating Cryptocurrency Exchanges (I-080124-PSA)— FBI IC3
- 06Companies Falsely Claiming an Ability to Recover Funds Lost in Cryptocurrency Scams (I-081123-PSA)— FBI IC3
- 07Coinbase Agents Bribed, Data of ~1% of Users Leaked; $20M Extortion Attempt Fails— The Hacker News
- 08Official security and fraud guidance— coinbase.com
- 09What To Do if You Were Scammed— consumer.ftc.gov
- 10How To Recognize and Avoid Phishing Scams— consumer.ftc.gov
- 11Official security and fraud guidance— coinbase.com
Pass it on
Help protect someone else
If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.