You receive an unsolicited text message that appears to be from “Coinbase.” It often includes a “withdrawal code” (a one-time password or OTP) and a message like: “Your Coinbase withdrawal code is: [CODE]. If this was not you, please call us on [PHONE NUMBER]. Ref: CBXXXXXX.”
🚨 What the Text Means
The text message (usually from a short code) might say something like:
“Your Coinbase withdrawal verification code is 123456.”
This is a multi-factor authentication (MFA) code triggered when someone tries to:
-
Withdraw funds
-
Change account settings
-
Sign in from a new device
âś… Steps to Take Immediately
-
Do Not Share the Code: Legitimate Coinbase representatives will never ask you to provide your verification code.
-
Report the Message:
-
Forward the suspicious SMS to 7726 (SPAM). This is a short code service used by U.S. mobile carriers to report phishing attempts.
-
Send a screenshot of the message to security@coinbase.com.
-
-
Secure Your Coinbase Account:
-
Change your password to a strong, unique one.
-
Enable two-factor authentication (2FA) using an authenticator app like Google Authenticator or Authy, rather than relying on SMS-based 2FA.
-
Review your account activity for any unauthorized transactions.
-
-
Secure Your Phone:
-
Contact your mobile carrier to ensure your phone number hasn’t been compromised.
-
Consider adding a PIN or password to your mobile account to prevent unauthorized changes.
-
⚠️ If You Didn’t Request It
This likely means someone is trying to access your Coinbase account without your permission.
âś… Do This Immediately:
-
DO NOT share the code with anyone — even if they pretend to be Coinbase support.
-
Change your Coinbase password immediately.
-
Enable (or verify) 2FA on your account using Google Authenticator or Authy — not SMS, if possible.
-
Contact Coinbase Support ASAP: support.coinbase.com
-
Check your email for suspicious login or withdrawal activity.
-
Check linked email account security: Change your email password too, just in case.
🛡️ Tips to Keep Your Coinbase Account Safe
-
Use authenticator app-based 2FA instead of SMS when possible.
-
Never share your codes, even with someone claiming to be from Coinbase.
-
Watch for phishing scams — Coinbase will never call or text you asking for codes.
-
Use a strong, unique password for your Coinbase account.

đź§ľ Legit Text vs. Scam
| Message Type | Red Flag? | Example |
|---|---|---|
| You requested a code | âś… Safe | Coinbase: Your code is 873920 |
| You didn’t request it | 🚨 Warning | Coinbase: Code for withdrawal |
| Includes suspicious link | 🚨 Scam | “Coinbase withdrawal here: cb-withdrawal.net” |
📞 Need Help?
Coinbase only offers support via their help site — they will never text or call you unsolicited. Use only:
Be the first to comment