You just opened the Binance app and suddenly saw a "device login notification" from a place you have never been to. At that moment, your heart beats faster than when you watch a candlestick chart crash.
The world's largest cryptocurrency exchange by trading volume,leading in security and liquidity.
New user benefit: Enjoy 20% off trading fees upon registration!
Do not panic. Follow the four steps below right away. If you move too slowly, things could get really bad.
Step 1: Freeze Your Account Immediately and Take Back Control
[What to do]: The moment you see an unrecognized login record, freeze your account to stop the other person from doing anything.
[How to do it]: Use another device that has not been logged in, open the Binance website or app, go to the [Account Security] page, find "Freeze Account" or a similar function, and enable it immediately. If you do not have another device, call Binance official customer support by phone right away and ask a human agent to freeze your account for you.
[Done when]: The account shows a "frozen" or "locked" status, and no trading or withdrawal can be made.
High-risk reminder: Before you confirm your account security, never try to log in on a suspicious device to perform security actions. The scammer may still be in the session. The moment you log in, they can see everything you do.
Step 2: Remove All Devices and Change Your Password
[What to do]: If someone else can log in, your password has probably already been leaked. Cut off the session first, then change the password.
[How to do it]:
Remove devices: After logging in, go to [Security Settings] → [Device Management] or [Login History], and check the list of all logged-in devices. If you see any device you do not recognize or no longer use, click the "×" or "Delete" next to it and remove all of them at once.
Change password: Go to [Security] → [Login Password], and change it to a brand new strong password that you have never used anywhere else (at least 12 characters, including uppercase and lowercase letters + numbers + special symbols).
[Done when]: Only your current device remains in the login history, and the password has been reset.
Step 3: Reset 2FA and API Keys
[What to do]: If the attacker has already obtained your 2FA backup or API keys, they can still get around even after you change the password.
[How to do it]:
Reset 2FA: Go to [Two-Factor Authentication Policy], unbind the old authenticator, and rebind your Google Authenticator or Binance authenticator. If you mainly used SMS codes before, switch to an authenticator app instead. SMS is easier to intercept.
Clear API keys: Go to [API Management] and delete all API keys you are not currently using. If you are still using any, regenerate new keys to replace the old ones.
[Done when]: 2FA has been rebound with a new key, and there are no unfamiliar extra keys in the API list.
Step 4: Report to Customer Support and Keep a Record
[What to do]: Even if you have already regained control, let Binance officially know that your account was compromised.
[How to do it]: Open the Binance app or web online customer support, select "Security issue" or "Account compromised", and provide any suspicious login screenshots, times, and login IPs you can find. Ask customer support to record it, and if necessary, ask them to add extra monitoring for you.
[Done when]: Customer support confirms they have received your report and gives follow-up advice, such as watching the account closely for 48 hours.
Recovery Checklist: Strengthen Account Security
After completing the four steps above, use this chance to do the following three things as well, so you can avoid trouble next time:
Enable anti-phishing code: In [Security Settings], set a phrase that only you know. From now on, all real emails from Binance will include this phrase. If an email does not include it, it is a phishing email.
Turn on withdrawal address whitelist: Only allow withdrawals to a few wallet addresses you have bound in advance. Even if someone breaks through other protections, they cannot withdraw to an address you have not bound.
Set an emergency contact: Add someone you trust as an emergency contact. If you ever cannot operate your account, Binance can contact that person to help handle it.
The world's largest cryptocurrency exchange by trading volume,leading in security and liquidity.
New user benefit: Enjoy 20% off trading fees upon registration!
FAQ
Q: What if I can no longer log in to my account? A: Use the "Forgot password" self-service page to reset your password and 2FA, or find the "Account locked" entry on the login page to contact human customer support.
Q: What if the login record is false and just a false alarm caused by a VPN switch? A: It is better to do extra security actions than to bet that it is a false alarm. If it is a false alarm, you waste at most half an hour resetting your password and 2FA. If it is a real intrusion, every minute you hesitate is money draining away.
