Discovering that your Binance account has been compromised is every crypto user's worst nightmare. But if it happens, the most critical action is to freeze your account as fast as possible to stop the attacker from transferring your assets. If you don't have a Binance account yet, it's wise to sign up for Binance and configure your security settings right away; existing users should make sure they've downloaded the Binance app for quick access at any time.
This article walks through every step you need to take after discovering a breach โ following these steps at the right moment can minimize your losses.
How to Tell If Your Account Has Been Compromised
Before getting into the freeze process, let's look at the signs that your account may have been hacked:
Clear Signs of a Breach
- You receive a "login from a new location" email from Binance, but you didn't log in
- You receive a withdrawal confirmation email, but you didn't initiate one
- Your account balance has decreased unexpectedly after logging in
- Security settings have been changed โ such as an unfamiliar phone number or email being linked
- API keys you didn't create have appeared in API Management
- Your password suddenly stops working and you can't log in at all
Suspicious but Not Definitive
- You received a suspicious phishing email (but haven't clicked any links)
- Your phone received a verification code SMS you didn't request
- Your password appeared in a data breach on another platform
Even if the signs are only suspicious, take protective action immediately โ don't take the risk of waiting.
Step 1: Freeze Your Account Immediately
After discovering a breach, time is literally money. Every second you hesitate gives the attacker another second to transfer your assets.
One-Click Freeze via Email
This is the fastest freeze method. If you previously received Binance emails about logins from new locations or withdrawal confirmations, these emails typically include a "Disable Account" link at the bottom. Clicking this link will immediately freeze your Binance account, suspending all functions including trading, withdrawals, and logins.
Important: This link only exists in official Binance emails. Never click any "freeze account" link from other sources โ it could be a phishing link.
Freeze via the App
If you have the Binance app installed and can still log in:
- Open the Binance app
- Go to "Profile"
- Find "Security Settings"
- Tap "Account Management"
- Select "Disable Account"
- Complete identity verification as prompted and confirm the freeze
Freeze via the Website
If the app isn't available, you can use a computer browser:
- Log in to the Binance website
- Go to "User Center" โ "Security Settings"
- Find the "Disable Account" option
- Confirm the freeze
If You've Been Locked Out
If the attacker has already changed your password and you can't log in, you can freeze the account through these steps:
- On the Binance login page, click "Forgot Password"
- Choose to reset via email or phone number
- During the password reset process, you'll see a prompt like "Account may be compromised" โ follow the prompts to freeze the account
- If that doesn't work either, contact Binance live support directly
Step 2: Contact Binance Customer Support
After freezing the account, you need to contact Binance support as soon as possible to explain the situation:
Live Support
Open the Binance app or website and find the live chat entry. Explain that your account appears to have been compromised and that you've already frozen it. The support team will assist with next steps.
Submit a Ticket
If live support is busy, submit a security ticket. Include the following details:
- Your registered email and phone number
- The exact time you noticed the anomaly
- A detailed description of the suspicious activity (such as unauthorized withdrawal records)
- Actions you've already taken (such as freezing the account)
Social Media Outreach
Binance has official support accounts on Twitter (X). In urgent situations, you can also reach out through social media. Just be sure to verify you're communicating with the real official account and not an impersonator.
Step 3: Investigate the Cause
While waiting for support to respond, investigate how the breach occurred to prevent it from happening again after recovery:
Check Email Security
- Log in to your email and check for any unauthorized login activity
- Change your email password
- Check email forwarding rules โ some hackers set up auto-forwarding to intercept verification codes
- Enable two-factor authentication on your email
Check Device Security
- Run a full antivirus scan on your computer and phone
- Review browser extensions and plugins โ uninstall anything suspicious
- Check recently installed apps on your phone and remove any from unknown sources
- If you suspect malware has been installed on your device, the safest option is a factory reset
Check for Information Leaks
- Think back to whether you've entered your Binance credentials on any suspicious websites recently
- Check if you clicked on any phishing links
- Consider whether you logged in to Binance from an unsecured network (like public WiFi)
Step 4: Restore Your Account
Once Binance support confirms your identity and resolves the security issue, you can apply to unfreeze your account:
Unfreezing Process
- Contact support to request account unfreezing
- Complete identity verification (may require facial recognition, ID photos, etc.)
- After support confirms, the account will be unfrozen
- There will typically be a withdrawal restriction period after unfreezing (usually 24 to 48 hours)
Essential Actions After Unfreezing
- Immediately change your login password to a completely new, strong password
- Re-bind Google Authenticator
- Check and delete any unrecognized API keys
- Review the trusted devices list and remove any unfamiliar devices
- Check the withdrawal address whitelist and remove any unknown addresses
- Review your transaction and withdrawal history to verify your asset status
How to Prevent Account Hacking
Prevention is far more important than damage control. The following measures can significantly reduce the risk of your account being compromised:
Use a Strong Password
Your password should be at least 16 characters, including uppercase and lowercase letters, numbers, and special symbols. Never reuse the same password across platforms. Consider using a password manager to generate and store passwords.
Enable All Available Security Verifications
In Binance's security settings, turn on every verification method available โ Google Authenticator, phone verification, and email verification. Each additional layer of verification adds another line of defense. You can sign up for Binance and review all available verification options in the Security Center.
Enable Withdrawal Address Whitelist
This is an extremely effective protective measure. Once enabled, withdrawals can only be sent to addresses you've pre-approved. Even if your account is compromised, the attacker won't be able to withdraw to their own address. Adding a new whitelisted address has a 24-hour cooldown period, giving you a buffer to detect anomalies.
Watch Out for Phishing Attacks
Never click links from unknown sources, and never enter your Binance credentials on unofficial websites. Bookmark the official Binance URL in your browser and always access it through bookmarks โ don't click on search engine ad links.
Regularly Review Account Activity
Make it a habit to periodically check your login history and activity logs. Binance's security settings show recent login times, IP addresses, and device information. If you spot any unusual logins, act immediately.
Security Reminders
A few critical reminders about account security:
- Binance's official support will never proactively DM you asking for your password, verification codes, or recovery phrases
- Never enter your Binance login information on any "airdrop," "rewards," or "event" pages
- If your phone is lost, remotely wipe the device data first, then freeze your Binance account
- Don't use a jailbroken (iPhone) or rooted (Android) phone to log in to Binance โ these devices have significantly compromised security
- When using Binance in public places, be aware of people looking over your shoulder
- Change your password regularly โ every 3 months is recommended
Frequently Asked Questions
Are my assets still in the account after freezing?
Yes. Freezing only suspends all operations โ it does not affect your asset balance. During the freeze, no one can touch your assets, including you. Once unfrozen, you can use all your assets normally.
Can stolen crypto be recovered?
It depends on the situation. If the attacker hasn't had time to withdraw (e.g., you froze the account fast enough, or the withdrawal was still pending review), Binance can block the withdrawal and recover the assets. If the funds have already been sent on-chain, recovery becomes much more difficult โ though Binance has worked with law enforcement to trace on-chain funds in some cases. The sooner you freeze, the better.
How long does it take to restore normal access after freezing?
Typically, from submitting an unfreeze request to regaining access takes 1 to 7 business days, depending on the complexity of the case. Simple cases (such as a detected login from a new location with no actual asset loss) may be resolved in 1 to 2 days. Cases involving fund transfers that require investigation will take longer.
Will Binance compensate for stolen losses?
Binance has a SAFU (Secure Asset Fund for Users) fund designed to compensate user losses in extreme situations. However, this primarily covers losses caused by vulnerabilities in Binance's own platform security. Losses resulting from users leaking their own passwords or clicking phishing links are typically not covered. This is why personal security practices are so important. You can download the Binance app and visit the Help Center to learn more about the SAFU fund.
Should I file a police report?
If the loss is significant, filing a police report is recommended. While crypto theft cases can be challenging to solve, there are several benefits to reporting: it creates an official record, provides documentation that may be needed if assets are recovered later, and some countries and regions have established dedicated cryptocurrency crime investigation units with real tracking capabilities.