How to Set Up Binance Anti-Phishing Code? Protect Your Account Security

Phishing attacks are one of the biggest security threats faced by cryptocurrency users. Scammers will forge emails or websites that look exactly like Binance to trick you into entering your account and password, and then steal your assets. Binance provides a very practical feature called the "Anti-Phishing Code," which, once set up, can effectively identify genuine and fake Binance emails. Today, I will teach you how to set it up and use it. First, go to the Binance Official Website to access the security settings page, or download the Binance Official App and set it up within the App. Apple users, please read the iOS Install Guide first to install the App.

What is an Anti-Phishing Code

An Anti-Phishing Code is a string of text or characters that you set yourself. Once set up, every email Binance sends you will contain this Anti-Phishing Code.

Its principle is very simple:

• You set the Anti-Phishing Code to "MYCODE123"
• Afterwards, every email Binance sends you will display "MYCODE123" at the top
• If you receive an email claiming to be from Binance but it does not display "MYCODE123" or displays the wrong code, then it is a fake phishing email

Scammers cannot know your Anti-Phishing Code, so it is impossible for them to have the correct Anti-Phishing Code in their forged emails. This is the brilliance of this feature.

Why You Must Set Up an Anti-Phishing Code

How Realistic Are Phishing Emails

Today's phishing emails are forged to look increasingly realistic. Scammers will:

• Completely imitate Binance's email templates and layout
• Use very similar sender addresses (such as support@binanace.com, with an extra 'a')
• Make the email content look exactly the same as a genuine Binance email
• Include links that look normal but actually point to a phishing website

Without an Anti-Phishing Code, it is very difficult to tell the real from the fake just by appearance.

Common Phishing Attack Methods

1. Fake Security Warnings

"Abnormal login detected on your account, please verify your identity immediately."

After clicking the link and entering the fake website, the account and password you enter are obtained by the scammer.

2. Fake Withdrawal Notifications

"Someone initiated a withdrawal of 5 BTC from your account. If this was not you, please cancel immediately."

Inducing you to panic click the link and enter information.

3. Fake Upgrade Notifications

"Binance system upgrade, please re-verify your account information."

4. Fake Event Rewards

"Congratulations on winning a reward of 0.5 BTC, please log in to claim."

Real Cases of Loss

Every year, a large number of users lose crypto assets due to phishing attacks. Some users have their entire holdings stolen at once. These losses are usually irreversible—once a cryptocurrency transaction is completed, it cannot be undone.

The Anti-Phishing Code is one of the simplest and most effective defense methods.

Steps to Set Up the Anti-Phishing Code

App Setup

1. Open the Binance App
2. Tap your profile icon in the top left corner
3. Select "Security"
4. Find "Anti-Phishing Code"
5. Tap "Setup" or "Enable"
6. Enter the Anti-Phishing Code you want to set (4-20 characters)
7. Complete security verification (password/verification code)
8. Setup is complete

Web Setup

1. Log in to the Binance Official Website
2. Click your profile icon in the top right corner
3. Select "Security"
4. Find "Anti-Phishing Code"
5. Click "Enable"
6. Enter your Anti-Phishing Code
7. Complete security verification
8. Setup successful

How to Choose an Anti-Phishing Code

Selection Principles

• Easy to remember: You need to be able to remember this code in order to check your emails
• Not too simple: Do not use "123456" or "aaaaaa"
• Has personal meaning: Choose a word or combination whose meaning is known only to you
• Do not use passwords: The Anti-Phishing Code will be displayed in plain text in emails, do not use your password or similar sensitive information

Good Examples

• MyBinance2026 (Easy to remember, has meaning)
• SunFlower88 (Unrelated to Binance but easy to remember)
• A nickname or code name that only you know

Bad Examples

• 123456 (Too simple)
• password (Uses sensitive words)
• Your real name (Private information)
• A part of your bank card number (Sensitive information)

How to Verify After Setup

After setting up the Anti-Phishing Code, you can verify if it is working like this:

1. Perform an action on the Binance App that requires an email notification (like logging in)
2. Check your email inbox
3. Open the email sent by Binance
4. You should see the Anti-Phishing Code you set at the top or in a prominent position in the email
5. If you see the correct code, it means the setup was successful

From now on, every time you receive an email claiming to be from Binance, the first thing to do is check the Anti-Phishing Code.

Checklist After Receiving an Email

Every time you receive a Binance-related email, check each item according to the following checklist:

Step 1: Check the Anti-Phishing Code

• Is your Anti-Phishing Code in the email?
• Is the Anti-Phishing Code correct?
• If there is no Anti-Phishing Code or the code is wrong → This is a phishing email, delete it immediately

Step 2: Check the Sender Address

Binance's official sender addresses are usually:

• do-not-reply@binance.com
• notifications@binance.com
• Other addresses ending in @binance.com

Pay attention to check if the domain name is correct, scammers might use:

• @binanace.com (an extra 'a')
• @binannce.com (an extra 'n')
• @binance-support.com (added a suffix)
• @binance.co (missing the 'm')

Step 3: Do Not Click Links Directly

Even if the Anti-Phishing Code is correct, it is best not to click links in the email directly. Instead:

• Manually enter the Binance website address in your browser
• Use the Binance official website link saved in your bookmarks
• Open the Binance App to operate

Step 4: Verify the Reasonableness of the Email Content

• Have you performed related operations recently?
• Is what the email is asking for reasonable?
• Is there urgent language trying to make you panic?

Modifying the Anti-Phishing Code

If you feel your Anti-Phishing Code might have been leaked, or you want to change to a new one:

1. Go to security settings
2. Find Anti-Phishing Code
3. Select "Modify"
4. Enter the new Anti-Phishing Code
5. Complete security verification
6. Modification successful

It is recommended to change your Anti-Phishing Code periodically (for example, every six months).

Besides the Anti-Phishing Code, What Other Anti-Phishing Measures Are There

1. Bookmark the Binance Official Website

Save the official website address of Binance in your browser's bookmarks, and open it from the bookmarks every time you visit, rather than through a search engine or by clicking a link.

2. Use the Binance Verification Channel

Binance provides an official verification tool (Binance Verify), which you can use to verify whether a certain website, email, or phone number is an official Binance channel.

How to use:

• Visit verify.binance.com
• Enter the website/email/number you want to verify
• The system will tell you whether it is an official channel

3. Beware of Scams on Social Media

In WeChat groups, QQ groups, and Telegram groups, there are often people posing as Binance customer service or official personnel. Remember:

• Binance customer service will not contact you proactively on social media
• Any "customer service" asking you to transfer money is a scammer
• Anyone asking you to provide your password is a scammer
• Do not join Binance-related groups of unknown origins

4. Install Security Software

Installing reliable security software on your device can help identify and block phishing websites.

5. Keep Software Updated

Ensure your browser, operating system, and the Binance App are all the latest versions. Updates usually contain security patches.

What to Do If You Accidentally Click a Phishing Link

Just Clicked the Link But Didn't Enter Any Information

• Close the page immediately
• Clear your browser cache and cookies
• Scan your device for malware
• Generally, there won't be a major problem

Entered Account and Password

Immediate action is required:

1. Immediately log in to Binance (from an official channel) and change your password
2. Check if there are any unauthorized withdrawals or trades
3. If you have Google Authenticator, the account is still safe (because the scammer doesn't have the verification code)
4. Reset the Google Authenticator key
5. Check if the API keys have any abnormalities
6. Contact Binance customer service to report the situation

Entered All Verification Information

The situation is quite urgent:

1. Immediately contact Binance customer service to request an account freeze
2. If there is time, change your password and security settings first
3. Check if any assets have been transferred out
4. If assets are stolen, submit an appeal to Binance
5. If necessary, you can report to the local public security organ

FAQ

Where will the Anti-Phishing Code be displayed after it is set?

The Anti-Phishing Code will be displayed at the top or in a prominent position of every email Binance sends you. It is presented in plain text, allowing you to see it at a glance and verify it.

Will the Anti-Phishing Code be displayed in SMS messages?

Usually not. The Anti-Phishing Code is mainly used for email verification. Due to format limitations, SMS messages generally do not contain the Anti-Phishing Code.

What if I forget my Anti-Phishing Code?

You can log in to the Binance App or the official website's security settings page to view your current Anti-Phishing Code. If you cannot log in, you can contact customer service to reset it.

Can the Anti-Phishing Code prevent all types of phishing?

The Anti-Phishing Code mainly prevents phishing attacks from fake Binance emails. But it cannot prevent all types of cyber attacks, such as phishing websites (fake websites you actively open yourself), social engineering attacks, etc. It needs to be used in conjunction with other security measures.

Is there a risk if someone else knows my Anti-Phishing Code?

The Anti-Phishing Code itself is not a password; someone else cannot use it to log into your account even if they know it. However, if someone else knows your Anti-Phishing Code, in theory, they could forge a more realistic phishing email. Therefore, it is best not to tell your Anti-Phishing Code to others, and change it in time if you find it leaked.

Are there any restrictions on setting an Anti-Phishing Code?

The Anti-Phishing Code usually requires 4-20 characters and can contain letters and numbers. There are not many restrictions, but it is not recommended to use special characters, as they may not display correctly in some email systems.