How to report a scam or unauthorized activity on Coinbase?

Immediate Steps After Detecting Fraud

1. Log into your Coinbase account immediately using a secure, trusted device and network.

2. Navigate to the “Security” section under Account Settings and review recent login activity for unrecognized locations or devices.

3. If two-factor authentication is active, verify that no unauthorized recovery codes have been accessed or exported.

4. Freeze or disable any linked payment methods—including bank accounts, debit cards, and PayPal—through your financial institution directly.

5. Export transaction history for the affected period by selecting “Statements” and choosing CSV format for documentation.

Reporting Through Coinbase’s Official Channels

1. Visit the Coinbase Help Center and search for “Report Unauthorized Activity” to access the dedicated reporting portal.

2. Complete the fraud report form with precise details: transaction IDs, timestamps, wallet addresses involved, and screenshots of suspicious notifications.

3. Upload supporting evidence such as email headers (not just body text), SMS logs showing verification code requests, and browser console errors if phishing was suspected.

4. Submit the form and retain the case number provided—this serves as official acknowledgment and tracking reference.

5. Avoid sharing your case number publicly or via unverified third-party platforms.

Escalation to External Authorities

1. File a complaint with the U.S. Federal Trade Commission via ReportFraud.ftc.gov, specifying Coinbase as the platform where loss occurred.

2. Notify your local law enforcement agency; provide them with the Coinbase case number, blockchain transaction hashes, and KYC documents used during account creation.

3. If funds were sent to an external wallet, use blockchain explorers like Etherscan or Blockchain.com to trace movement and identify potential exchange custody points.

4. Contact the Internet Crime Complaint Center (IC3) and attach all correspondence with Coinbase support, including timestamps and response content.

5. For international users, submit reports to national cybercrime units—for example, Action Fraud in the UK or the Australian Cyber Security Centre.

Account Recovery and Verification Protocols

1. Initiate the “Account Recovery Request” only after completing the fraud report; this triggers manual identity revalidation.

2. Prepare government-issued photo ID, proof of address issued within the last 90 days, and original device information including IMEI or serial number.

3. Respond promptly to any video verification request—Coinbase may require live facial recognition and document hold verification.

4. Do not reuse passwords from other platforms; generate a new, unique passphrase using a hardware security module or offline password manager.

5. Enable advanced security features such as biometric login, session alerts, and withdrawal address whitelisting upon reactivation.

Frequently Asked Questions

Q: Can Coinbase reverse a cryptocurrency transaction once it’s confirmed on-chain? No. Blockchain transactions are immutable. Coinbase cannot alter, cancel, or retrieve funds after confirmation—even if reported as fraudulent.

Q: What happens if my Coinbase account was compromised through SIM swapping? You must immediately contact your mobile carrier to restore control of the phone number and file a police report documenting the SIM hijack event.

Q: Does Coinbase offer insurance coverage for stolen digital assets? Coinbase maintains crime insurance covering custodial assets held in cold storage, but this does not extend to user-controlled wallets, phishing losses, or compromised credentials.

Q: How long does Coinbase typically take to respond to a fraud report? Initial automated acknowledgment occurs instantly; human review begins within 72 business hours, though complex cases involving cross-jurisdictional tracing may exceed five business days.