The Coinbase Text Scam: How Fake SMS Alerts Work, and What to Do Next
Last reviewed Sep 12, 2026 · Reviewed by our CEH-certified investigation team
If you've gotten a text that looks like it's from Coinbase — about a withdrawal, a login, or an account change — and you're searching to check whether it's real, the short answer is direct: Coinbase does not send text messages asking you to verify a transaction, confirm a 2FA code, or click a link to secure your account. Any message that does is fake, regardless of how convincing it looks.
What the text actually says
The most common version reads something close to: "(COINBASE) The OTP code for your withdrawal is [code]. If this was not you, please call us on [number]." The message often includes a fake reference or ticket number specifically to make it look like part of a real support thread. A second, more elaborate version has circulated claiming Coinbase is "transitioning to self-custodial wallets" and needs you to verify your account by phone or link — Coinbase has never issued any such requirement, and no legitimate exchange forces a transition like this over SMS.
Both versions rely on sender-ID spoofing, which can make the fake text land in the same message thread as real, past texts from Coinbase, making it look far more credible than a random unknown number would.
Why it works
The scam is built entirely around urgency and a spoofed sense of continuity — a real-looking thread, a plausible-sounding reference number, and a request that feels routine (confirm a withdrawal, verify a login) rather than obviously suspicious. The phone number in the text connects to a scammer posing as Coinbase support, or the link leads to a pixel-accurate fake login page built to capture your email, password, and 2FA code the moment you enter them.
- Send an SMS asking you to verify a transaction or confirm a withdrawal
- Text you a 2FA code and then ask you to read it back or enter it elsewhere
- Ask you to click a link in a text message to "secure" or "verify" your account
- Call you and ask for your password, seed phrase, or 2FA code over the phone
- Require you to "transition" to a different wallet type on any deadline
What to do right now
What you should do depends on exactly how far things went:
- You got the text but didn't respond. Delete it and forward it to your carrier's spam-reporting short code (7726 in the US) so it can be flagged. No further action needed on your Coinbase account.
- You clicked the link but didn't enter anything. Close the page without entering any information. As a precaution, change your Coinbase password directly through the official app and review your account's active sessions.
- You entered your password, a 2FA code, or called the number and confirmed details. Treat your account as compromised immediately. Change your password from the official Coinbase app (not any link from the text), switch 2FA to an authenticator app if you're still using SMS, and check your account's transaction history for anything you don't recognize.
Coinbase's own security team wants to know about these messages regardless of outcome — report phishing attempts directly through Coinbase's official phishing and scams help center, since they track and act on these campaigns directly.
If funds have already moved
If a scammer used credentials from this exact pattern to actually withdraw funds from your account, the theft itself is still a normal crypto transaction, recorded permanently on whichever blockchain it moved on. That's the same starting point as any other crypto theft: identify the receiving wallet, trace where the funds moved from there, and find the point where they reach a compliant exchange that can act on a freeze request. Our step-by-step recovery guide covers that process in full — and if the same message also tried to walk you toward a fake support call, our guide on exchange support impersonation scams covers that half of the pattern.
Frequently asked questions
Coinbase says they'll never text me — so why did this look so real?+
Scammers spoof sender IDs so the text appears in the same thread as real past messages from Coinbase, and they often include a fake reference or ticket number to manufacture legitimacy. The content is fake regardless of how authentic the thread looks.
I clicked the link but didn't enter anything — am I safe?+
Likely, but change your Coinbase password and review your account's active sessions and API keys anyway. Clicking alone usually doesn't compromise an account; entering credentials or a 2FA code on the fake page is what does.
I called the phone number in the text — what now?+
Treat anything you said or confirmed on that call as compromised. If you gave a code, a password, or confirmed personal details, change your Coinbase password immediately from the official app (not any link from the text or call) and check for unauthorized activity.
The scammer already moved my crypto — is it gone?+
Not necessarily. The transaction is still permanently recorded on the blockchain regardless of how the credentials were obtained, which means it can potentially be traced the same way any other crypto theft can — see the recovery section below.
Lost funds after a fake Coinbase text?
CoinTrace Pro offers a free, confidential case review — no upfront fee, and an honest read on whether your case looks traceable before you spend anything.
Sources for claims cited above: Coinbase's own blog on SMS phishing; Coinbase Help Center, phishing and scams; TechRadar.