Several signs indicate your Binance account may be under someone else's control: receiving login notification emails you didn't trigger, unexplained balance decreases, unfamiliar transaction records, or password change emails you didn't initiate. If any of these occur, take action immediately. Start by confirming your account status through the Binance registration official page, and make sure you have the latest Binance APP on your phone for quick access.
Time is money — act on the following steps as quickly as possible after detecting anomalies.
This is the most critical step. Once frozen, all trades and withdrawals are suspended.
How to do it:
If you can still log in, change your password immediately. Your new password should:
In Security Settings under "Device Management," remove all devices. This forces all sessions to log out, including the attacker's.
Go to the API Management page. If you find any API keys you didn't create, delete them immediately. Attackers frequently use API keys to remotely control accounts.
After the emergency response, calmly investigate the cause to prevent it from happening again.
This is the most common method of intrusion. Attackers send fake Binance emails to lure you into entering login credentials on counterfeit websites.
How to check:
Your phone may have been infected with password-logging malware.
How to check:
The same password you use on other platforms may have been exposed in a data breach.
How to check:
Someone impersonating a friend, customer support, or official representative tricked you into sharing verification codes or login details.
This is the most effective defense against phishing. Set a code that only you know — all legitimate Binance emails will include this code. Emails without it are fake.
Hardware keys like YubiKey can prevent most remote attacks. Even if an attacker has your password and verification code, they cannot log in without the physical key.
Turn on the withdrawal address whitelist in the Binance APP security settings. Only pre-approved addresses can receive withdrawals. New whitelist addresses have a 24-hour cooldown period.
If funds are still within Binance (transferred to another Binance user), recovery chances are relatively high. If withdrawn to an external address, recovery is very difficult, but you should still file a police report for law enforcement involvement.
Simple cases typically take 1-3 days. Complex cases involving fund losses may require longer investigation time.
Generally no. During account recovery, you may need to submit ID documents for identity verification, but this is identity confirmation, not a new KYC process.
Not recommended. Your old account has complete transaction records and KYC information. Just strengthen security and continue using it. Binance only allows one verified account per identity.
Yes, especially for significant amounts. A police report is an important document for pursuing claims and may help law enforcement dismantle criminal networks.