What Is a Phishing Attack?

Attackers send emails disguised as official Binance communications, often with subject lines like "Account Anomaly," "Verification Required," or "Limited-Time Offer." These emails trick you into clicking a link that leads to a fake website, where entering your account credentials results in theft.

🚨 Real Case: Many users have had their accounts stolen after clicking links in phishing emails and entering their credentials on fake websites. An anti-phishing code is the simplest and most effective defense.

How Does an Anti-Phishing Code Work?

You set a unique string of characters known only to you (e.g., MYKEY2026). Binance will include this string in every official email sent to you. When you receive an email, check for this string:

  • ✅ String present → Official email, safe to trust
  • ❌ String absent → Phishing email, delete immediately without clicking any links

Setup Steps

Steps (Takes 2 Minutes)
  1. Log in to Binance, click your profile icon in the top right → Security
  2. Find "Anti-Phishing Code" and click "Set"
  3. Enter a string of 4-20 characters (recommend using a combination that is easy to remember but not common)
  4. Confirm with your Google Authenticator code
  5. Done! All future official Binance emails will include this string
💡 Anti-Phishing Code Tip: Use a combination of uppercase and lowercase letters and numbers, e.g., BNB2026XY. Avoid using easily guessable information like your birthday or phone number. Remember this string or store it in a safe place.

How to Verify Successful Setup?

After setup, trigger an email from Binance (e.g., by changing your password). Check the email content; you should see something like this:

"Your Anti-Phishing Code: BNB2026XY"

If you see the string you set, the setup was successful.

What to Do If You Receive a Suspicious Email?

  • First, check if the anti-phishing code is present
  • Verify the sender's email domain is @binance.com
  • Do not click any links in the email; instead, type binance.com directly into your browser
  • If unsure, contact official Binance customer support for verification
⚠️ Binance Official Will Never: Ask for your password, 2FA code, or private key/seed phrase via email. Any such request is 100% a scam.