Consumers searching for "Coinbase text scam", "Coinbase withdrawal code scam", or "Coinbase verification code text" are reporting urgent messages claiming that someone accessed their account, connected a new device, or requested a cryptocurrency withdrawal.
A common version provides a supposed withdrawal or login code and says to call a telephone number immediately if you did not authorize the activity. Other messages contain a link to a fake Coinbase login or security page.
Do not call a number, click a link, share a verification code, or move cryptocurrency based on an unexpected text. Open the official Coinbase app or enter Coinbase.com into your browser yourself to check the account.
Coinbase is a legitimate cryptocurrency platform and may send genuine SMS verification codes. However, scammers send convincing Coinbase-branded texts about withdrawals, foreign logins, new devices, and compromised accounts. Coinbase says its representatives will never ask for your password, two-step verification code, seed phrase, remote access, or a transfer to a new “safe” wallet.
What Is the Coinbase Text Scam?
The Coinbase text scam is an impersonation and phishing scheme that misuses the Coinbase name to steal account credentials, verification codes, personal information, or cryptocurrency.
The message may claim:
- A cryptocurrency withdrawal is pending
- A new device was connected to your account
- Someone signed in from another country
- Your password was changed
- A large purchase or transfer was requested
- Your account has been locked or restricted
- A security code was generated
- You must call support immediately
The warning is designed to create panic. The recipient may call the number or follow the link before checking whether the supposed activity actually appears in the Coinbase account.
Common Coinbase Scam Text Examples
Exact wording and telephone numbers change frequently. Current variations may resemble the following examples:
“Your Coinbase withdrawal code is [six-digit code]. If you did not request this withdrawal, call [telephone number] immediately.”
“A new device was connected to your Coinbase account. If this was not you, contact security at [telephone number].”
“Coinbase: We detected a login from Moscow, Beijing, or another unfamiliar location. Call [telephone number] now if this was not you.”
“Your Coinbase account has been temporarily restricted. Verify your identity immediately at [lookalike website].”
These are representative examples rather than a complete list of current messages. Do not assume a text is legitimate merely because its wording or telephone number differs.
How the Coinbase Withdrawal Code Scam Works
- You receive an unexpected Coinbase-branded text.
- The message claims a withdrawal, login, or account change is underway.
- You are told to call a number or click a link to stop the activity.
- A fake support representative claims your cryptocurrency is in danger.
- The impersonator requests account information or creates additional security alerts.
- You may receive a genuine Coinbase verification code triggered by the scammer.
- The impersonator asks you to read the code aloud to “verify” or “protect” the account.
- The code may instead allow the scammer to access the account or approve an action.
- The scammer may direct you to transfer cryptocurrency to a supposedly protected wallet.
- The wallet is controlled by the scammer, and the transferred cryptocurrency may be difficult or impossible to recover.
The original text does not need to contain a working phishing link. A telephone number alone can connect the recipient with a skilled social-engineering scammer.
Does Coinbase Send Legitimate Text Messages?
Yes. Coinbase supports SMS as one method of two-step verification. A legitimate verification code may be sent when a user performs certain account actions.
That means an unexpected Coinbase code is not always a completely fabricated message. It could mean:
- Someone entered your telephone number by mistake
- A delayed code arrived after an earlier request
- Someone attempted to sign in or begin account recovery
- A scammer is trying to access the account
- A scammer intentionally triggered a real code before contacting you
- The entire message, including the supposed code, was invented
An unexpected verification code does not prove that someone successfully accessed the account. However, it should never be shared with another person.
A scammer may already possess an email address, password, telephone number, or other account information. The legitimate Coinbase code delivered to your phone may be the final information the scammer needs. Never read a Coinbase verification code to an unsolicited caller or enter it into a page opened from an unexpected text.
How to Tell Whether a Coinbase Text Is a Scam
The Text Provides a Callback Number
Coinbase warns consumers not to contact an unknown telephone number supplied in an unsolicited message.
Do not call merely because the text says that calling is the only way to cancel a withdrawal. Open Coinbase independently and check whether an actual transaction exists.
The Message Contains a Non-Coinbase Link
Coinbase says an SMS message requesting that you visit a website other than Coinbase.com is fraudulent.
Lookalike domains may:
- Replace letters with numbers
- Add words such as secure, support, login, or verification
- Use hyphens or extra subdomains
- Use a shortened URL
- End in an unfamiliar domain extension
Do not trust a link merely because the word “Coinbase” appears somewhere in it.
Someone Requests a Verification Code
Coinbase representatives will not ask for your password or two-step verification code. The Federal Trade Commission similarly warns that anyone who contacts you and asks for an account verification code is a scammer.
FTC Warning About Verification-Code Scams
You Are Told to Move Cryptocurrency
Coinbase says its employees will never instruct a customer to transfer cryptocurrency to a new address, account, vault, or wallet for protection.
There is no special Coinbase “safe wallet” that a support agent must create for you during an unsolicited call.
The Caller Supplies a Seed Phrase
A scammer may provide a wallet seed phrase and tell you to create a new wallet using it. Because the scammer already knows the phrase, the scammer controls access to that wallet.
Coinbase will not provide a seed phrase or ask you to disclose one.
The Caller Requests Remote Access
Fake support representatives may ask you to install screen-sharing or remote-access software. This can allow them to view verification codes, control your device, access email, or watch you sign into financial accounts.
Coinbase says its support agents will not remotely access your device to take action on your account.
The Message Creates Extreme Urgency
Warnings such as “act within ten minutes,” “your entire balance is at risk,” or “do not hang up” are intended to prevent independent verification.
A legitimate security concern should be checked through the official app or website, not through the contact information chosen by the sender.
Can a Coinbase Scam Text Appear in a Real Message Thread?
Yes. Do not assume a text is authentic solely because it appears under a familiar sender name or inside a conversation containing earlier verification codes.
Sender information can sometimes be spoofed or manipulated. Mobile devices may group messages based on the displayed sender information, which can make a fraudulent message appear more convincing.
The content and requested action are more important than the sender label.
Never share a verification code, follow an unexpected login link, or call an unfamiliar number even when the text appears in a previously used message thread.
Why Does the Scammer Know My Name or Coinbase Information?
Possessing personal information does not prove that the sender works for Coinbase.
Names, email addresses, telephone numbers, partial financial information, and cryptocurrency interests can be obtained through:
- Previous data breaches
- Stolen or purchased marketing lists
- Social-media profiles
- Public blockchain activity
- Earlier phishing attempts
- Malware or compromised email accounts
- Information exposed by another company
In May 2025, Coinbase disclosed that cybercriminals had recruited or bribed overseas support personnel to obtain information about a subset of customers for social-engineering attacks.
Coinbase said the incident did not expose passwords, private keys, or two-factor authentication codes and did not give the criminals direct access to accounts. However, stolen customer information could make an impersonation attempt sound more convincing.
Coinbase Customer Data and Social-Engineering Notice
What If I Do Not Have a Coinbase Account?
Receiving the text does not mean that a Coinbase account definitely exists in your name.
Scammers often send large batches of messages without knowing which recipients use Coinbase. The sender may simply hope that some recipients have cryptocurrency accounts.
If you do not use Coinbase:
- Do not call the number
- Do not click the link
- Do not reply
- Report the text as spam
- Block the sender
- Continue monitoring your email and financial accounts for unrelated identity-theft activity
You do not need to create a Coinbase account or provide identity documents merely to investigate an unsolicited text.
What to Do If You Receive a Coinbase Scam Text
- Do not reply.
- Do not call the included number.
- Do not click a link.
- Do not share the displayed code.
- Open Coinbase independently. Use the official app or type Coinbase.com yourself.
- Review account activity. Check devices, sessions, transactions, and security settings.
- Lock the account if anything looks suspicious.
- Save a screenshot for reporting.
- Forward the message to 7726. This spells SPAM and reports the text to participating mobile carriers.
- Send the screenshot to Coinbase. Use security@coinbase.com.
- Delete and block the message after preserving what you need.
Official Coinbase Phishing-Reporting Instructions
How to Lock a Coinbase Account
If you believe someone may have gained unauthorized access, Coinbase allows you to lock the account through its official app or website.
Coinbase says an account lock signs out other devices and prevents trading, cryptocurrency transfers, and account-setting changes while you review the problem.
Use the official instructions rather than a link sent by an unknown person:
Lock or Recover a Compromised Coinbase Account
When possible, access Coinbase from a trusted device and network that were not used to visit the suspicious website.
What If I Clicked the Coinbase Text Link?
If you opened the link but did not enter information:
- Close the website
- Do not download a file or app
- Do not grant notification, camera, microphone, or device permissions
- Delete any file downloaded from the page
- Run a trusted security scan if software was installed
- Watch for follow-up calls, emails, and texts
If you entered account information, take the additional actions below immediately.
What If I Entered My Coinbase Password?
- Go directly to the official Coinbase app or Coinbase.com.
- Change the Coinbase password.
- Use a new password that is not used on another website.
- Lock the Coinbase account if unauthorized access is possible.
- Review active sessions, devices, and account activity.
- Change the password on any other account using the same password.
- Secure the email account connected with Coinbase.
- Check the email account for unfamiliar forwarding rules, devices, or recovery information.
- Contact Coinbase through its official Help Center.
What If I Shared a Coinbase Verification Code?
Treat this as urgent. A scammer may have requested the code while attempting to sign in, reset security information, or approve another protected action.
- Stop communicating with the sender or caller.
- Lock the Coinbase account immediately.
- Change the Coinbase password.
- Secure the associated email account.
- Review recent devices, sessions, withdrawals, and transactions.
- Contact Coinbase through the official app or Help Center.
- Document the number, message, code request, and time of the incident.
Do not approve a push notification or security prompt that you did not initiate.
What If I Shared a Wallet Seed Phrase?
A seed phrase or recovery phrase can provide complete access to a self-custody wallet.
If someone else obtained the phrase, assume the wallet is compromised. Coinbase’s current wallet-security guidance says to create a new secure wallet and immediately transfer any remaining balance to the new address.
Generate the new wallet independently through the authentic wallet application. Do not use a seed phrase or wallet address supplied by the caller, text sender, or supposed support representative.
Coinbase Guidance for a Compromised Recovery Phrase
What If I Sent Cryptocurrency to the Scammer?
Cryptocurrency transactions may be difficult or impossible to reverse. Act immediately:
- Stop sending additional funds.
- Do not pay a supposed tax, recovery fee, insurance charge, or wallet-verification fee.
- Contact Coinbase through its official support system.
- Save the recipient wallet address and transaction hash.
- Save the text messages, telephone numbers, emails, and websites.
- Contact local law enforcement if funds were stolen.
- File a report with the FBI Internet Crime Complaint Center.
- Report the incident through the FTC’s ReportFraud website.
FBI Cryptocurrency Scam Reporting Information
Be cautious of anyone who later promises to recover the cryptocurrency for an advance payment. Scam victims are frequently targeted a second time by fraudulent recovery services.
Can Coinbase Recover Cryptocurrency Sent to a Scam Wallet?
Recovery is not guaranteed. A cryptocurrency transfer sent to an outside wallet may be irreversible, particularly after the funds are moved through additional addresses or converted.
Coinbase, law enforcement, and other platforms may be able to review transaction records, identify related accounts, or preserve information. That does not mean the assets can always be returned.
Report the transaction promptly and provide the complete wallet address, asset, blockchain network, transaction hash, amount, and time.
How to Make a Coinbase Account More Secure
- Use a unique Coinbase password
- Secure the email account connected with Coinbase
- Use a passkey, authenticator app, or security key when available
- Avoid relying only on SMS verification
- Review active sessions and connected devices
- Enable withdrawal allow-listing when appropriate
- Never approve a login you did not initiate
- Never share verification codes
- Never disclose a seed phrase or private key
- Access Coinbase only through the official app or a directly entered Coinbase.com address
Coinbase describes SMS as its least-secure two-step verification method and recommends stronger methods such as passkeys or security keys when available.
Coinbase Two-Step Verification Options
How to Report a Coinbase Scam Text
- Coinbase security: security@coinbase.com
- Mobile carrier: Forward the message to 7726 (SPAM)
- Federal Trade Commission: ReportFraud.ftc.gov
- FBI Internet Crime Complaint Center: IC3.gov
When reporting, preserve:
- A screenshot of the complete message
- The displayed sender information
- The callback number
- The website address
- The date and time
- Any wallet address
- The cryptocurrency transaction hash
- A summary of information that was disclosed
Do not publish an active verification code, password, seed phrase, private key, complete telephone number, account number, or other sensitive information in public comments.
Frequently Asked Questions
Is the Coinbase withdrawal code text a scam?
A text containing a withdrawal code and an unfamiliar callback number is a common Coinbase impersonation scam. Do not call the number. Open the official Coinbase app independently and check whether an actual withdrawal exists.
Does Coinbase send text messages?
Coinbase may send legitimate SMS verification codes when SMS is enabled as a security method. A genuine code should be used only within an account action you initiated. Coinbase representatives will not ask you to read the code to them.
Why did I receive a Coinbase code I did not request?
Someone may have entered your telephone number, attempted to access an account, or triggered an account-recovery or verification process. The code may also be part of a completely fabricated phishing message. Do not share it, and review your account independently.
Will Coinbase text me to call customer service?
Coinbase warns users not to call unknown support numbers supplied in unsolicited messages. Locate support through the official Coinbase app or Help Center.
Will Coinbase call me about a compromised account?
Coinbase says it will not make an unsolicited support call. A callback during an existing support interaction can be different, but you should initiate support through Coinbase’s official channels and never disclose a password, verification code, or seed phrase.
Does Coinbase have a safe wallet for compromised funds?
No support representative should direct you to transfer funds to a wallet chosen by the representative. Coinbase says it will never ask customers to move cryptocurrency to a new address, account, vault, or wallet for protection.
Can Coinbase support ask for my verification code?
No. Coinbase says its customer-service agents will never ask for a password or two-step verification code.
Can Coinbase support ask for my seed phrase?
No. Never disclose a seed phrase, recovery phrase, or private key. Anyone possessing a self-custody wallet’s recovery phrase may be able to control its funds.
Is a Coinbase text legitimate if it knows my name?
Not necessarily. Scammers may obtain personal information from data breaches, public sources, earlier phishing, or purchased lists. Verify account activity through the official Coinbase app.
Is a Coinbase text legitimate if it appears in an existing message thread?
Not necessarily. Sender information can be spoofed or manipulated. Evaluate what the text asks you to do and verify the claimed activity independently.
What should I do if I do not have Coinbase?
Do not interact with the message. Scammers send texts broadly without knowing which recipients have accounts. Report it as spam, block the sender, and continue monitoring for other identity-theft attempts.
Where should I send a Coinbase phishing screenshot?
Coinbase directs consumers to email screenshots and details of suspicious SMS messages to security@coinbase.com.
Related ThinkItsAScam.com Warnings
- Robinhood Alert Scam Text: Withdrawal and Login Phishing
- Visa Click to Pay Scam: Unexpected OTP, Email and Text Warning
- Apple Pay Alert Text Scam
Have You Received a Coinbase Scam Text?
Sharing the non-sensitive details of the message may help other consumers identify current Coinbase withdrawal, login, and verification-code scams.
- What did the text claim happened?
- Did it mention a withdrawal, new device, or foreign login?
- Did it contain a supposed verification code?
- Did it provide a callback number?
- Did it contain a website link?
- Did the sender know your name or other information?
- Did you call the number?
- What did the supposed support representative request?
- Were you asked to share a code or seed phrase?
- Were you told to transfer cryptocurrency?
- Did any unauthorized activity actually appear in your Coinbase account?
Please do not post your full name, telephone number, email address, Coinbase login, verification code, password, seed phrase, private key, wallet balance, complete wallet address, transaction number, bank information, or other sensitive personal information in the comments.
Page researched and reviewed: August 27, 2026.
Disclaimer
ThinkItsAScam.com is an independent consumer-information website and is not affiliated with Coinbase, Coinbase Global, Inc., Base, the Federal Trade Commission, the FBI, any cryptocurrency exchange, wallet provider, blockchain network, mobile carrier, financial institution, or law-enforcement agency mentioned in this article.
Coinbase is a legitimate cryptocurrency platform. This article concerns phishing texts, withdrawal-code scams, fake security alerts, support impersonation, account-takeover attempts, and other messages that may misuse Coinbase branding. It does not accuse Coinbase or its legitimate employees of operating the scams described.
Scam messages, telephone numbers, websites, security procedures, applications, and reporting methods can change. Verify current instructions through Coinbase’s official app, Coinbase.com, and the Coinbase Help Center.
Cryptocurrency transfers may be irreversible, and recovery is not guaranteed. This article provides general consumer education and is not legal, financial, investment, tax, or cybersecurity advice.
