Coinbase Text Scam

USA-based cryptocurrency exchange, Coinbase, allows users to buy, sell, trade, and store digital assets, including Bitcoin and Ethereum. If you’re a Coinbase user and have received a text claiming an issue with your account, you might be a target of a text scam. This happens to be one of the most common phishing schemes making the rounds in 2025. 

But don’t panic yet. The best defense against scammers is a good offense. So take a minute to learn how the scam works, what it looks like, and how to protect yourself and crypto from falling victim to the Coinbase text scam. 

What’s the Scam?

The Coinbase text scam is a phishing scheme in which perpetrators send fake text messages to users that appear to be official notifications from Coinbase itself. Emphasizing a sense of urgency, the phishing messages might appear as suspicious activity, multiple login attempts, or suspension of withdrawal. 

They’ll most likely include a link that appears to lead to Coinbase’s login page; however, it’s, of course,  just a spoofed website that’s designed to steal your credentials. Unfortunately, once scammers have your login, it’s easy for them to drain your digital wallet before you even realize something’s wrong.

How it Works

First you receive a text appearing to come from Coinbase. It might even spoof the name so it shows up as “Coinbase” in your message thread. The message will contain a malicious link that, if clicked, will direct you to a fake Coinbase login page. 

If you “log in,” you’ll actually be giving the scammer your real Coinbase credentials. Once you’ve entered something like an email, password, or even two-factor authentication code, you’ll have granted them access to your account. 

Within minutes, your cryptocurrency could vanish, being transferred to anonymous wallets that are next to impossible to race or recover. 

Spotting the Red Flags

Unusual links are the first red flag that you can watch out for. Coinbase messages will only ever come from a genuine domain (coinbase.com) so beware of something like “coinbaselogin.io” or coinbase-supporttext.net,” which are definitely fake. 

Remember that Coinbase is a legitimate company and would never use a threatening tone when contacting customers. Nor would they request your password or two-factor code through text message. 

A good general rule is to be wary of any unexpected messages. If you were not trying to log in yourself or attempting to make a transaction, any follow-up or verification text is suspicious. Full stop. 

How to Protect Yourself

• Never click a link you’ve received via text. Instead go directly to the Coinbase website or open the Coinbase app. 
• Always use two-factor authentication—as a minimum. An authentication app is even more reliable as text-based two-factor codes can still be hijacked. 
• Report scams when you spot them. You can head right to Coinbase’s official support page and let them know so that they can take appropriate action. 
• Use a secure, private phone number from Hushed, which will keep your real contact information off the grid and minimize chance you’ll be targeted for phishing scams.