Crypto & investing scams
Exchanges, wallets and brokerages impersonated to move you into an irreversible transfer.
Coinbase
Coinbase scams involve phishing emails about account lockouts, fake Coinbase support calls requesting remote access, and fraudulent text messages with verification code requests. Once scammers access your Coinbase account, crypto transfers cannot be reversed. Coinbase will never call you asking for your password, 2FA codes, or to install remote access software.
Learn more →Binance
Binance scams run through fake support accounts and Telegram groups. The two things to hold on to: Binance staff will never message you first, and nobody at Binance will ever ask for your seed phrase, your password, or a code from your authenticator.
Learn more →Robinhood
Robinhood scams involve phishing emails about account restrictions, fake customer support contacts on social media, and SMS phishing asking for verification codes. Scammers target Robinhood users to drain brokerage accounts and steal personal information including Social Security numbers. Robinhood will never ask for your password or 2FA code via email, text, or social media.
Learn more →Kraken
Kraken scams often start with a fake support phone number found by searching, or a SIM swap that defeats SMS two-factor. Kraken will never call you, never ask for your password or 2FA code, and never ask you to move funds to a "secure" wallet.
Learn more →Crypto.com
Crypto.com scams centre on counterfeit apps and fake support. Nobody from Crypto.com will contact you first, ask for a seed phrase or 2FA code, or run a giveaway that requires you to send crypto first. Download only from the official app stores and check the developer name.
Learn more →MetaMask
MetaMask scams take two forms: getting your twelve-word seed phrase, or getting you to sign a transaction that grants unlimited spending approval to a contract. MetaMask has no support staff who will contact you, and no legitimate site ever needs your seed phrase.
Learn more →Ledger
Every Ledger scam reduces to one request: your 24-word recovery phrase. Ledger will never ask for it — not by email, not in Ledger Live, not on a support call, not to "validate" or "migrate" your wallet. Anyone who asks is stealing from you, and there are no exceptions.
Learn more →