Binance Seed-Phrase Phishing Scams
Attackers pose as Binance to trick users into revealing their wallet seed phrases under the guise of account verification or wallet linking. No exchange — including Binance — will ever need your seed phrase.
Part of: Seed Phrase Phishing
Last reviewed: 7 June 2026
A seed phrase (also called a recovery phrase or mnemonic) is the master key to a self-custody crypto wallet. Anyone who possesses it has complete and irreversible control over every asset in that wallet. Because of this, stealing seed phrases is one of the most targeted goals in crypto crime.
Scammers impersonate Binance to create scenarios in which victims believe their seed phrase is required. Common pretexts include 'syncing your external wallet with your Binance account,' 'verifying wallet ownership to receive a deposit,' or 'completing a new KYC requirement that includes wallet verification.'
Binance, as a custodial exchange, holds assets on behalf of users in its own wallets — it does not have any technical mechanism that requires a user's self-custody wallet seed phrase. Any request for a seed phrase, from any source claiming to be Binance, is definitively a scam.
How this scam works on the Binance brand
One common vector is a phishing email appearing to come from [email protected] (but actually sent from a spoofed or lookalike domain). The email warns that a new security policy requires users to 'link their external wallets' by entering their seed phrase on a Binance-branded verification page. The fake page may even use Binance's real design system to appear indistinguishable from the genuine site.
Another variant occurs on Telegram: fake Binance support accounts tell users in a group chat that 'gas fee errors' or 'wallet sync issues' can be resolved by entering the seed phrase in a bot. The bot immediately forwards the phrase to the attacker's own wallet-draining system.
Binance communicates security changes via the official app notification center and email with the user's personal anti-phishing code. Wallet linking on Binance uses API key integrations with specific, limited permissions — it never involves a seed phrase or private key.
Common red flags
- Any request for your 12 or 24-word seed phrase, regardless of who appears to be asking
- An email or link asking you to 'validate' or 'sync' an external wallet using your recovery words
- A Telegram bot or web form that accepts seed phrase input and claims it is a Binance tool
- The email lacks your personal Binance anti-phishing code (if you have set one up)
- The URL of the 'verification page' is not exactly binance.com
- Urgency claims that your account will be suspended unless you verify within hours
How to protect yourself
- Treat any seed-phrase request as an automatic red flag — legitimate services never need it
- Set your anti-phishing code in Binance security settings so you can identify genuine emails
- Store seed phrases offline only — never in cloud notes, screenshots, or email drafts
- If you use a self-custody wallet alongside Binance, keep them entirely separate; Binance never needs your external wallet's private keys
- Access Binance only through the official app or by typing binance.com directly in your browser
- Enable withdrawal whitelist on Binance so funds cannot be sent to new addresses without a 24-hour delay
How to report it
- Forward the phishing email to [email protected]
- Report the phishing domain using Binance's official feedback form
- Submit the domain to Google Safe Browsing and PhishTank
- Report to IC3.gov (US), Action Fraud (UK), or your national cybercrime authority
Frequently asked questions
Why would a scammer pretend to be Binance to get my seed phrase?
Binance is a globally recognized brand. Impersonating it lends false authority to the request and lowers a victim's guard because they associate the name with legitimacy.
If I entered my seed phrase on a fake site, what should I do?
Move all assets to a completely new wallet with a new seed phrase immediately, on a device you know is not compromised. Time is critical — attackers often drain wallets within seconds of receiving a seed phrase.
Does Binance ever need to link to my external wallet?
No. Binance is a custodial exchange that manages its own wallets. If you use a third-party portfolio tracker that integrates with Binance, it connects via API key — never your seed phrase.