What to Do If Someone Logs Into Your Binance Account

Stay Calm but Act Fast

Seeing a login notification at 3 AM from a city you have never visited is alarming. But panic leads to mistakes - follow these steps methodically. Visit the Binance Official Website or use the Binance Official App. Apple users see the iOS Installation Guide.

Step 1: Freeze Your Account Immediately

Go to Security Settings and find "Disable Account." This instantly logs out all sessions and blocks all trading and withdrawals. If you cannot log in (password changed), use "Forgot Password" or contact Binance support with identity verification.

Step 2: Assess the Damage

Check withdrawal history for unauthorized transfers - note addresses, amounts, and times. Check trade history for unusual orders (attackers may convert assets before withdrawing). Check security settings for changes to Google Authenticator, email, phone, API keys, or withdrawal whitelist.

Step 3: Reset All Credentials

Change your Binance password to a completely new strong password. Check and reset Google Authenticator if tampered with. Change your email password (attackers may have used it). Delete any unknown API keys.

Step 4: Investigate the Breach

Common attack vectors: phishing websites (check browser history for suspicious domains), malware/keyloggers (run a full virus scan), SIM swap attacks (contact carrier if phone lost signal), email compromise, or public Wi-Fi interception.

Step 5: Contact Binance Support

If assets were lost, submit a security incident report with your account info, unauthorized activity details, and identity documents. The security team will investigate and may freeze suspicious receiving addresses.

Strengthen Security Afterward

Enable Google Authenticator (write recovery key on paper). Set up withdrawal address whitelist (24-hour cooling period for new addresses). Enable login email notifications. Set anti-phishing code. Regularly review device management. Consider hardware security keys. Always type the Binance URL manually or use bookmarks - never click links from search ads or messages.