Binance has issued a formal warning after detecting a rise in phishing attacks targeting its users through fraudulent text messages that imitate legitimate security alerts. The exchange described how scammers exploit urgency and trust to steal account access.
According to Binance, the malicious messages often appear to be official notifications about account setting changes or suspicious activity. They typically include shortened links that hide their true destination, making threats harder to identify at a glance. The goal is to pressure recipients into clicking before they can verify whether the message is real.
Binance emphasized that it never asks users to tap a link in a text message to verify or secure their account. Any message doing so should be treated as fraudulent immediately.
The exchange recommended three practical security measures. First, users should verify every link before clicking, regardless of how legitimate the message appears. Second, enabling the withdrawal address whitelist restricts fund movements exclusively to previously approved addresses, reducing the risk of unauthorized transfers. Third, activating the anti-phishing code helps users quickly confirm whether an email genuinely comes from Binance or from a malicious sender impersonating the platform.
The warning highlights increasingly sophisticated fraud schemes and aims to help users build an additional layer of protection against phishing attempts that are becoming harder to detect at first glance.
