untrappable

Coinbase text scam: is that message real?

Editorially reviewed · Last updated June 16, 2026

Yes — this is a scam. Coinbase doesn't text you links to “verify” your account.

Text Message · Today 9:06 AM
from +1 (332) 555‑0147
Coinbase: We blocked a $4,200 withdrawal request. If this wasn't you, verify your account now: coinbase-secure.app/verify
The Text message, as received

Other versions you might get: A text about a login from a new device, a code to “confirm” a transaction you never made, or “Your Coinbase account is locked.” Same playbook, same fix.

What to do right now

  1. Don't tap the link or call any number in it. Don't reply — even “STOP” tells them the number is live.
  2. If you already entered anything: change your Coinbase password from the app, turn on (or reset) 2FA, and check Settings → Security for unknown devices.
  3. Report it. Forward the text to 7726 (SPAM), then file at reportfraud.ftc.gov.
  4. Delete the message.

How to make sure it never bites you

You got this because your number is on a list scammers buy and resell. The fix is to get it removed and add a layer between you and them — see how to stop spam texts for good.

Frequently asked

Does Coinbase send text messages about blocked withdrawals?
No. Coinbase doesn't text you a link to “verify” your account or approve a withdrawal. Real security alerts appear inside the Coinbase app, and they never ask you to tap a link or share a code. Any text with a “verify now” link is a phishing scam, however official it looks.
I tapped the link and entered my details — what should I do now?
Act fast. Open the Coinbase app yourself, change your password, then turn on (or reset) two-factor authentication and review Settings → Security for unknown devices. If you approved any transfer, contact Coinbase support and your bank right away. Then ignore any follow-up “refund” or “recovery” text — that's round two of the same scam.
What is coinbase-secure.app?
It's a look-alike phishing domain, not owned by Coinbase. The real site is coinbase.com, and the app is the only place you manage security. Scammers register near-identical names — coinbase-secure.app, coinbase-verify.com — to harvest logins. If the address isn't exactly coinbase.com, don't enter anything.
How do I report a Coinbase scam text?
Forward the text to 7726 (SPAM) so carriers can act on the number, then report it to the FTC at reportfraud.ftc.gov. Reporting won't recover lost funds, but it helps shut the campaign down for the next person.

Sources

A public service

Help protect someone else

Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.