Fake Coinbase Support Scams
Criminals impersonate Coinbase support to take over accounts or steal funds. Coinbase's real support is ticket-based; the company will never call you unsolicited and ask for your password or 2FA code.
Part of: Fake Crypto Exchange Support Scams
Last reviewed: 7 June 2026
Coinbase is among the most widely used crypto exchanges in the United States, making it a frequent target for impersonation scams. Its regulated, publicly traded status gives fraudsters a veneer of legitimacy to exploit — many potential victims already trust the Coinbase name.
Fake support scams targeting Coinbase users are particularly sophisticated. In one well-documented pattern, a scammer calls the victim from a spoofed number that appears as 'Coinbase' in caller ID and walks them through a realistic-sounding security review that ends with the victim handing over account access.
Coinbase's real customer support operates exclusively through coinbase.com/help. While Coinbase may send automated account alerts by email or SMS, it does not make unsolicited outbound calls to initiate security reviews or ask for sensitive credentials.
How this scam works on the Coinbase brand
The fake support call is a signature method. The caller claims Coinbase's fraud team detected unauthorized access to the victim's account and that they need to 'verify identity' by providing the one-time passcode sent to the victim's phone. In reality, the attacker has already triggered a password reset, and the OTP the victim reads out is the key to a full account takeover.
A related version involves a spoofed email claiming the user's Coinbase account has been restricted due to suspicious activity. The email contains a prominent 'Verify Your Account' button that leads to a convincing replica of the Coinbase login page on a domain such as coinbase-secure-verify[.]com. Credentials entered there go straight to the attacker.
Real Coinbase security emails come from @coinbase.com addresses and direct users to log in by going directly to coinbase.com, never through an embedded link. Coinbase also offers a feature to check whether a communication is genuine at coinbase.com/verify-email.
Common red flags
- An unsolicited call claiming to be Coinbase security asking you to read back an OTP or reset code
- An email with a 'Verify Account' link that does not go to exactly coinbase.com
- Caller ID shows 'Coinbase' but the call is asking for sensitive information (caller ID can be spoofed)
- A request to send funds to a 'Coinbase cold storage address' or 'protection wallet'
- Pressure to act immediately or your 'account will be permanently closed'
- A support agent asking for your password or the full account number shown in your app
- Instructions to download a remote-access app to 'help resolve the issue'
How to protect yourself
- Hang up any unsolicited call claiming to be Coinbase — then call back through coinbase.com/help if concerned
- Check coinbase.com/verify-email to confirm whether a suspicious email really came from Coinbase
- Enable Coinbase's advanced security features including device management and 2-step verification via authenticator app
- Never share an OTP, verification code, or your password with anyone by phone or email
- Set a withdrawal lock on your account requiring a 48-hour review for new destination addresses
- Regularly review your authorized devices in Coinbase settings and remove any you do not recognize
How to report it
- Report the incident to Coinbase at coinbase.com/help — select 'I think my account has been compromised'
- Forward phishing emails to [email protected]
- Report to IC3.gov (US), Action Fraud (UK), or your national cybercrime authority
- Report the spoofed phone number to the FTC at ReportFraud.ftc.gov
Frequently asked questions
Can Coinbase call me out of the blue?
Coinbase may occasionally make outbound calls for account verification if you have previously requested assistance, but it will never call you unsolicited to ask for your password or a one-time code. When in doubt, hang up and contact Coinbase directly through coinbase.com/help.
How do I verify if an email is really from Coinbase?
Use Coinbase's verification tool at coinbase.com/verify-email. Paste the email address or message link to confirm authenticity.
What if the scammer already has my username and email — does that mean they hacked Coinbase?
Not necessarily. Email addresses and usernames often appear in third-party data breaches unrelated to Coinbase. Scammers purchase these databases to make calls seem more convincing.