How to Report a Phishing Attempt or Scam Impersonating an Exchange?

Identify the Impersonation Signs

1. Fake domain names that closely resemble official exchange URLs—such as “binanace-support.com” instead of “binance.com”.

2. Social media accounts using identical profile pictures and bios but with unverified badges or newly created handles.

3. Unsolicited direct messages promising free tokens, urgent wallet verification, or account recovery links.

4. Emails containing grammatical errors, mismatched sender addresses, or embedded links pointing to non-official domains.

5. Pop-up windows on third-party sites prompting immediate login with credentials under the guise of “security alert”.

Preserve Evidence Before Reporting

1. Take full-page screenshots of phishing websites—including address bars showing suspicious URLs.

2. Save email headers—not just the visible message—to reveal origin IP addresses and routing paths.

3. Export chat logs from Telegram, Discord, or WhatsApp, ensuring timestamps and usernames are intact.

4. Record DNS lookup results for the malicious domain using tools like mxtoolbox.com or whois.domaintools.com.

5. Archive metadata from image attachments or documents sent by scammers using EXIF viewers or file property inspectors.

Submit Reports to Official Channels

1. Visit the exchange’s dedicated security page—Binance uses https://www.binance.com/en/support/security, while Coinbase hosts reports at https://help.coinbase.com/en/security/report-a-scam.

2. Fill out all required fields including incident timestamp, platform used, and full URL or wallet address involved.

3. Upload preserved evidence directly through the form—avoid sending sensitive data via email unless explicitly instructed.

4. Note the case reference number provided after submission for future follow-up.

5. Confirm receipt by checking spam folders for automated acknowledgment emails within 24 hours.

Notify Broader Security Ecosystems

1. File a report with the Anti-Phishing Working Group at https://apwg.org/report-phishing, including domain, screenshot, and email source data.

2. Submit wallet addresses linked to scam transactions to blockchain analytics platforms such as Chainabuse.com or Etherscan’s Phishing Database.

3. Report impersonating Telegram channels to @notboringbot or @scamreporterbot with verified proof.

4. Notify domain registrars using WHOIS data—many providers like Namecheap and GoDaddy offer abuse reporting portals.

5. Share anonymized details in community watch forums such as Reddit’s r/CryptoScams or BitcoinTalk’s Scam Alerts section.

Frequently Asked Questions

Q: Can I report a scam if I haven’t lost funds yet?Yes. Exchanges prioritize proactive reporting. Early detection helps freeze domains and disable fake accounts before others are affected.

Q: What if the scam uses a legitimate-looking subdomain of an exchange?Subdomains not registered or authorized by the exchange—like “support.binance.net” instead of “support.binance.com”—are invalid. Report them immediately using the official security form.

Q: Do exchanges investigate reports made through third-party platforms like APWG?Most major exchanges monitor APWG feeds and integrate them into internal threat intelligence systems. Direct reporting remains essential for case-specific tracking.

Q: Is it safe to click links in scam messages to gather evidence?No. Use static analysis tools like VirusTotal or URLScan.io to inspect links without visiting them. Never enter credentials or download files from untrusted sources.