Phishing emails are rampant in the cryptocurrency space. Scammers create emails that look identical to Binance's, luring you to click fake links and enter your password. Binance's anti-phishing code feature helps you instantly identify real vs. fake emails. It takes just 1 minute to set up but can save you from significant losses.
What Is the Anti-Phishing Code?
Simply put, you set a phrase or word that only you know (e.g., "apple123"). After setting it up, all genuine emails from Binance will contain this phrase.
If you receive an email that looks like it's from Binance but doesn't contain your anti-phishing code — it's 100% fake.
First sign up for Binance, then immediately set your anti-phishing code — it's the first line of defense for your account.
Setup Steps
- Open the Binance App → Tap your profile icon → "Security"
- Find the "Anti-Phishing Code" option
- Tap "Enable"
- Enter the anti-phishing code you want (4-20 characters)
- Enter email verification code or Google authenticator code to confirm
- Setup complete
How to Choose a Good Anti-Phishing Code?
Good choices:
- Easy for you to remember and meaningful
- Hard for others to guess
- Between 4-20 characters
- Examples: "mycatiswhite", "coffee2024", "phishing-go-away"
Bad choices:
- Your name, birthday, phone number (others may know these)
- Too short like "123" (easy to guess)
- Too complex to remember (you need to recognize it at a glance)
What It Looks Like After Setup
After setup, every genuine Binance email will display your anti-phishing code in a prominent position at the top.
For example, if you set "apple123", a real Binance email will contain a line like:
Anti-Phishing Code: apple123
If an email you receive doesn't have this line, or shows something other than "apple123", delete it immediately. Don't click any links in the email.
Common Phishing Email Characteristics
Even with the anti-phishing code set, understanding common phishing tactics is important:
1. Urgent scare tactics "Your account will be frozen in 24 hours, verify immediately" — real Binance never uses such threatening language.
2. Reward bait "Congratulations! You've won 1 BTC, click to claim" — Bitcoin doesn't fall from the sky.
3. Link disguises Links in the email look like binance.com but actually point to binnance.com (extra 'n') or binance-verify.com (fake domain).
4. Attachment traps Asking you to download "security patches" or "verification tools" that are actually malware.
What Else Can You Do to Stay Safe?
Check the sender address Binance's official email comes from a few fixed addresses, like [email protected]. However, sender addresses can be spoofed, so don't rely solely on this.
Don't click links in emails Make it a habit: regardless of what email you receive, never click links directly. Manually type binance.com in your browser and check for corresponding notifications.
Enable all security verifications Turn on Google Authenticator, SMS verification, and email verification. Even if your password is stolen, they can't access your account without the codes.
Change your anti-phishing code periodically If you suspect your code may have been exposed (e.g., someone saw your email), you can change it in security settings.
Where Does the Anti-Phishing Code Appear?
Besides emails, Binance SMS notifications and app push notifications don't display the anti-phishing code (because those channels are harder to forge). The anti-phishing code primarily targets email — the channel most vulnerable to phishing attacks.
Setting up the anti-phishing code takes just 1 minute but could save you tens of thousands or even hundreds of thousands in losses. It's one of the lowest-cost, highest-impact security measures — there's no reason not to set it up.