Coinbase Impersonation Scams
Scammers impersonate Coinbase with fake account-suspension alerts and spoofed support calls. The real Coinbase will never call you unsolicited or ask you to send crypto to verify your identity.
Last reviewed: 1 June 2026
Coinbase is one of the most recognised cryptocurrency exchanges in the world, which makes it an attractive target for impersonators. Fraudsters send emails and texts claiming your account has been locked or that suspicious activity has been detected, then direct you to a fake login page or a phone number staffed by criminals.
The defining rule: Coinbase will never call you out of the blue, and no legitimate process on the platform ever requires you to transfer funds to an external address to 'confirm' your account or 'unlock' holdings.
How scammers impersonate it
- Sending emails with Coinbase branding claiming the account is restricted pending identity verification
- Spoofing Coinbase phone numbers and claiming to be the 'security team'
- Creating near-identical fake login pages at domains like 'coinbase-secure.com'
- Texting one-time-code requests to intercept the real 2FA and take over accounts
- Promising to 'unsuspend' accounts in exchange for a crypto deposit as 'verification'
What the real organisation never does
- Call you without you initiating contact first
- Ask you to send crypto to an external wallet as part of any verification process
- Request your password, seed phrase, or 2FA code over the phone or email
- Threaten immediate account closure unless you act within minutes
Common red flags
- Unsolicited call from someone claiming to be Coinbase support
- Email or text asking you to click a link to verify or restore your account
- Any request to send crypto to 'confirm' your identity
- Pressure to act immediately before you can think or verify
- Caller already knows partial personal details (sourced from data breaches) to seem legitimate
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Email: 'Your Coinbase account has been flagged — verify at [fake-coinbase-link] within 24 hours or it will be closed.'
Call: 'This is [name] from Coinbase security. To unlock your account, please send [amount] ETH to this address and we will return it immediately.'
Text: 'Coinbase alert: Unusual sign-in detected. Confirm your identity here: [phishing link].'
How to verify
- Go directly to coinbase.com by typing it in your browser — never follow email links
- Use the in-app support chat rather than any phone number provided in a message
- Check for account notifications only inside the official Coinbase app
- Search 'Coinbase phishing' plus any suspicious domain name to find reported scams
What to do if you're targeted
- Do not send any funds or share any codes — end the interaction immediately
- Secure your real Coinbase account by changing your password and enabling a hardware security key
- Report the phishing message to Coinbase at [email protected]
Frequently asked questions
Can Coinbase support call me directly?
Coinbase does not make unsolicited outbound calls to customers. If you receive such a call, it is a scam — hang up and contact support through the official app.