What Is Binance's Anti-Phishing Code and How to Set It Up?

Have you ever received an email that looked like it came from Binance but you weren't sure if it was real or fake? Phishing emails are one of the most common scams in the cryptocurrency world. Binance offers a simple but effective tool — the anti-phishing code — to help you instantly distinguish between real and fake emails.

If you don't have a Binance account yet, register a Binance account first. After registration, we recommend immediately getting the Binance APP and setting up your security options.

What Is an Anti-Phishing Code

An anti-phishing code is a text or number combination that you define yourself. Once set, every official email from Binance will include this code.

The logic is simple:

• Scammers can fake Binance's email template, but they don't know your anti-phishing code
• Genuine Binance emails will always contain your anti-phishing code
• If a "Binance email" does not include your anti-phishing code, it is fake

Why You Need to Set One Up

Phishing attacks are rampant in the crypto space:

• Scammers create emails that look nearly identical to real Binance emails
• The email may claim your account is at risk and ask you to click a link to "verify"
• The link leads to a fake Binance login page
• If you enter your credentials on the fake site, your information is stolen

Statistics show phishing attacks in crypto cause losses of hundreds of millions of dollars annually. Setting up an anti-phishing code is one of the simplest defensive measures.

How to Set Up Your Anti-Phishing Code

On the Web

1. Log into your Binance account
2. Click the user icon in the top right corner, select "Security Center"
3. Find the "Anti-Phishing Code" option
4. Click "Enable"
5. Enter your desired anti-phishing code (4-20 characters)
6. Complete 2FA verification to confirm
7. Setup complete

On the APP

1. Open the Binance APP, go to the "Account" page
2. Tap the "Security" option
3. Find "Anti-Phishing Code" and tap to enter
4. Enter your desired anti-phishing code
5. Complete verification and save

Tips for Choosing Your Code

• Choose a combination that is easy for you to remember but hard for others to guess
• Do not use the same string as your password
• You can use the first letters of a sentence, such as "WAXZAQ"
• Avoid overly simple codes like "1234" or "aaaa"
• A length of 6-12 characters is recommended

What Happens After Setup

Once set up, all official emails from Binance will display your anti-phishing code in the email body, usually in a prominent position at the top.

For example, you might see: "Your Anti-Phishing Code: XXXXXX"

Every time you receive an email claiming to be from Binance, check this area for your anti-phishing code:

• Code present and correct → It is an official Binance email
• No code present → It is a phishing email; do not click any links
• Wrong code → It is a phishing email; do not click any links

Changing Your Anti-Phishing Code

If you suspect your anti-phishing code has been compromised, or you want to change it periodically for added security:

1. Go to the anti-phishing code settings in the Security Center
2. Click "Change"
3. Enter a new anti-phishing code
4. Complete 2FA verification
5. The new code will take effect in subsequent emails

We recommend changing your anti-phishing code every few months.

What It Can and Cannot Protect Against

Can protect against

• Phishing attacks using fake Binance emails
• Malicious links in fake emails
• Fake notifications impersonating Binance

Cannot protect against

• Visiting a fake Binance website directly (verify the URL instead)
• Phone scams (the code is only for email verification)
• Fake support agents on social media
• Malware or virus attacks

Use It Alongside Other Security Measures

The anti-phishing code is just one layer of security. We recommend combining it with the following:

• Enable 2FA: Two-factor authentication is the foundation of account security
• Use a strong password: At least 12 characters with uppercase, lowercase, numbers, and special characters
• Check the URL: Confirm the address is binance.com every time you visit
• Avoid clicking links in emails: Even if the email is genuine, we recommend typing the URL manually
• Use a secure email: Register Binance with an email that has 2FA enabled

Common Characteristics of Phishing Emails

Even with an anti-phishing code set up, understanding the common traits of phishing emails is valuable:

• Creating urgency, such as "Your account will be closed"
• Requesting you to click a link for "urgent verification"
• The sender address looks similar but is not exactly Binance's official address
• The email contains spelling errors or formatting issues
• Asking you to provide passwords or verification codes

Remember: Binance will never ask for your password via email.

Setting up an anti-phishing code takes just one minute but provides ongoing protection for your account. We recommend all Binance users set it up as soon as possible and make it a habit to check the anti-phishing code every time you receive an email.