untrappable

Coinbase email scam: is that alert or invoice real?

Editorially reviewed · Last updated July 16, 2026

Yes — this is a scam. Coinbase doesn't email you a link to “verify” your account or cancel a withdrawal.

Withdrawal of 0.84 BTC is pending — action required
C
Coinbase Security
no-reply@coinbase-account-alerts.com
7:22 AM
A withdrawal of 0.84 BTC was requested from your account. If you did not request this, verify your account within 24 hours to cancel the transfer: coinbase-account-alerts.com/cancel
Cancel withdrawal
The Email, as received

Other versions you might get: “Your account has been locked,” a “new device sign-in,” a fake purchase receipt, or an “updated terms — re-verify your identity” notice. The text version is the Coinbase text scam; same playbook by email.

What to do right now

  1. Don't click the link or the button. Don't reply.
  2. Check your real account by opening the Coinbase app or typing coinbase.com yourself. The “withdrawal” won't be there.
  3. If you already entered your password or 2FA code: change your Coinbase password immediately, reset two-factor, and check for unknown devices under Settings → Security. Move funds only after the account is re-secured.
  4. Report it. Forward the email to security@coinbase.com, then file at reportfraud.ftc.gov.
  5. Delete it and mark it as phishing.

How to make sure it never bites you

Crypto phishing is relentless because transfers are irreversible — which is exactly why the fake deadline works. Slow is safe: the real app is always the truth. To cut how much of this reaches you, see how to lock down your accounts.

Untrappable · Public service advisory

Stop the next one at the source

You got this because your details are on lists that get bought, sold, and leaked. You can't unspill that, but you can make it useless to a scammer. Start with the free steps — they do most of the work.

Optional — if you'd rather it was handled for you

If you'd rather have it watched for you, an identity-protection service monitors your accounts, SSN, and the dark web, warns you the moment something new appears, and helps you recover if someone gets through.

See identity protection →

Affiliate link — we may earn a commission at no extra cost to you. It never changes our verdicts. Why we can still be trusted.

Keep this · forward it to someone who needs it

Frequently asked

Does Coinbase send emails about pending withdrawals?
Real Coinbase notifications exist, but they never ask you to click a link and log in to “cancel” or “verify” anything. Any activity worth acting on shows inside the Coinbase app. An email from a sender like coinbase-account-alerts.com with a deadline and a cancel button is phishing — check the app, not the email.
I clicked the link and entered my Coinbase login — what now?
Move fast. Change your Coinbase password immediately from the app or coinbase.com (typed yourself), reset your two-factor authentication, and review Settings → Security for unknown devices or API keys. If any crypto has already moved, contact Coinbase support right away — transfers are hard to reverse, so minutes matter. Then report the email at reportfraud.ftc.gov.
How can I tell a real Coinbase email from a fake one?
Check the full sender address: real ones end in @coinbase.com exactly — not coinbase-account-alerts.com or any hyphenated variant. Real security emails tell you to open the app; fakes give you a button and a deadline. When in doubt, ignore the email entirely and check your account by typing coinbase.com yourself.
Why am I getting Coinbase emails if I don't have a Coinbase account?
Because the email was blasted to a bought list, not to Coinbase customers. Scammers send these to millions of addresses knowing a slice will have accounts. If you don't have one, there's nothing to check — delete it. If you keep getting them, mark them as phishing so your inbox filters the rest.

Related scams

Sources

A public service

Help protect someone else

Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.