Scam alert
The Coinbase text scam going around
"Coinbase: we detected a withdrawal request — cancel it here." It's one of the most-searched scam texts of 2026, because it's convincing and it works. Here's the trick behind it.
How the scam works
You get a text or call claiming suspicious activity on your Coinbase account. The "cancel" link leads to a fake login page that captures your password and 2FA code — or a "support agent" walks you through moving your crypto to a "safe" wallet they control.
The tells
- A link or phone number you didn't look up yourself.
- Pressure to act in minutes to "stop a withdrawal".
- Anyone asking for your seed phrase, password, or 2FA code — Coinbase never does.
Stay safe
Never act on the text. Open the Coinbase app yourself to check your account. Coinbase will never text or call asking you to move funds or share a code. Paste the message into Scam Doctor to confirm.
Frequently asked questions
Does Coinbase send security alert texts?
Coinbase may send legitimate 2FA codes you requested, but it never texts or calls asking you to move funds, confirm a withdrawal via a link, or share your password or seed phrase.
I gave a code to a fake Coinbase agent — what now?
Change your password and 2FA immediately from the official app, contact Coinbase support, and move funds if you can. Report it to the FTC.