Report to Coinbase

• Phishing emails and texts using the Coinbase name
• Fake Coinbase websites and login pages
• Callers impersonating Coinbase support
• Social media accounts posing as Coinbase

1. 1

   Forward the email without changing it

   Use Forward and send it to security@coinbase.com. Coinbase asks you not to modify the content and to keep the original subject line. Include full email headers where you can.

2. 2

   Send the full URL for a fake site

   If you found a phishing site rather than an email, email the full URL to the same address. For an impersonation account on social media, include a link to the account.

3. 3

   Hang up, then call Coinbase yourself

   For a call from someone claiming to be Coinbase, hang up and call Coinbase Support on 888-908-7930 to report it. Do not continue the inbound call.

4. 4

   Report it to your email provider too

   Most email clients have a report-phishing option. Coinbase suggests using it as well, which helps the provider filter the same campaign for other people.

• The original email with headers, or the full URL of the fake site
• The wallet address you sent to, if you sent crypto
• The transaction hash and the date

Coinbase can take down a phishing site and act on an impersonation account. It cannot reverse an on-chain transfer, and nobody can. Report it anyway, since the address and hash are what any investigation starts from.