Home / Scam emails by brand / Coinbase
Is this Coinbase email real or a scam?
What fake Coinbase emails look like, how to check a real one, and where to report it.
What the fake Coinbase emails say
“A withdrawal was requested”
You are told to cancel a withdrawal you never made by signing in through a link or calling a number.
“Move your funds to a new wallet”
The email supplies a recovery phrase for a wallet the scammer controls.
A fake support agent
Someone calls or writes as Coinbase support and asks for your codes or your recovery phrase.
What one looks like
From: Coinbase Security <[email protected]>
Withdrawal request received
A withdrawal of 0.84 BTC was requested from your account. If this was not you, cancel it immediately using the secure link below.
This is an illustration built from the common pattern, not a real message. Note the sender address: it contains the brand name but does not end in the company’s own domain.
How to tell a real Coinbase email
Genuine Coinbase emails come from addresses ending in @coinbase.com, including subdomains such as @info.coinbase.com. Coinbase never asks for your password, your two-step codes, your recovery phrase or remote access to your computer.
A matching address alone is not proof, because sender addresses can be forged. The reliable check is your own account.
The safe way to check: Open the Coinbase app or type coinbase.com yourself and check your activity there. Never enter a recovery phrase someone else gives you.
Where to report it
Forward the email to [email protected].
You can also report it in your mail app and to the FTC.
If you already clicked
Close the page. If you entered your password, change it on the real Coinbase website now, and anywhere else you used the same one. If you entered card details, call your bank. The step-by-step guide covers each case.
Not sure about the one in your inbox?
Paste it into the free check with the sender address, and you get a plain answer in a few seconds.