1. What is a phishing attack?
Phishing is a type of social engineering attack, is the fraudulent attempt to obtain sensitive information such as username, password, 2FA code, etc by disguising as Binance in an electronic communication. Users are often be deceived by trusted parties such as:
- Email spoofing；
- Fake Binance site；
- instant message with malicious link；
- social websites with manipulated Binance link;
- Chat with impersonated Binance upport；
- Fake Binance hotline or support in search engine etc.
- Social Media Fake Account
- Malware downloaded from the internet
- Free WIFI Phishing
2. Phishing attack protection
It is known that the most important and weakest aspect in a security system is people. Hence, For users, vigilance is key:
- A spoofed message often contains subtle mistakes such as spelling mistake, strange syntax, unsmooth words, misspelled domain name, for instance, www.binance-co.com, etc.
- In addition, attackers will usually try to push users into action by creating a sense of urgency. For example, an email could threaten account expiration and shall be verified within a timeline; A message instructed users to move asset a secure wallet to avoid loss as soon as possible.
Phishing attack protection requires steps to be taken by both users and Binance.
- Always upgrade Google Chrome or Mozilla Firefox to the latest version. It is known that Google Chrome or Mozilla Firefox will warn users for phishing or unsafe high risk website.For examples：
- The safest way to login to Binance is through the website binance.com or www.binance.co
- For IT professional, it is recommended to verify SSL domain name is *.binance.com or *.binance.co
- Enable Two-factor authentication(2FA) verification such as Google 2FA or SMS 2FA. Keep cautious and not disclose Google 2FA 16 digital back key to anyone or any website. If username and password were compromised,2FA prevents the use of compromised credentials, since these alone are insufficient to gain entry.
1). Install Chrome Netcraft Extention or Firefox Netcraft Anit-Phishing Extension.
- Chrome Netcraft Extension
- Firefox Netcraft Anit-Phishing Extension
- Keep your systems /applications updated to avoid the security bugs, install the anti-virus software and keep it up to date.
- Do not connect to an untrusted wireless network.
3. Reporting Phishing
- Please report any Binance phishing sites you meet Report Binance Phishing Sites.
4. Phishing cases
- Phishing email cases click ：：here
- Phishing site cases click ：：here
- Fake Binance hotline or support in search engine cases click ：here
- Chat with impersonated Binance support cases click：here
- Scammers in Twitter cases click：： here