You discover your Binance account may have been hacked — you received a login alert you didn't initiate, or your balance has mysteriously decreased. Don't panic, but you must act immediately. Every second of delay could mean greater losses. If you don't have an account yet but want to learn about security protections in advance, you can register on Binance and set up all security options right away. Existing users should make sure they've already downloaded the Binance APP — in emergencies, mobile operations are faster than desktop.
Step 1: Freeze Your Account Immediately (Most Critical)
Whether or not you're sure you've been hacked, freeze first. Freezing won't cause any asset loss, but if hackers are still operating your account, freezing can stop them immediately.
If You Can Still Log In
- Open the Binance APP or website
- Go to "Security Center" or "Account Security"
- Find the "Disable Account" option
- Click to confirm disabling
Once disabled, all account functions including login, trading, and withdrawals will be suspended.
If You've Been Locked Out
- Go to the Binance login page and click "Forgot Password"
- The password reset email usually contains a "Freeze Account" link
- You can also access the "Support" portal at the bottom of the Binance website
- Tell the live support agent that your account has been compromised and request an emergency freeze
Freeze Via Email
Check the email you used to register on Binance. If you received security alert emails like "New Device Login," there's usually a "Not you? Click to freeze account" link at the bottom.
Step 2: Secure Your Email
Many account breaches actually start with the email. Hackers first compromise your email, then use it to reset your Binance password.
What you need to do:
- Change your email password immediately to a completely new strong password
- Check your email login history for any unfamiliar IPs
- Check if any email forwarding rules have been set up (a common hacker tactic)
- Enable two-factor authentication on your email as well
Step 3: Assess the Damage
After freezing your account, you can contact support to check operation logs, or review them yourself once the account is restored:
- Check recent withdrawal records for any unauthorized transactions
- Review trading history for suspicious trades
- Check if any API keys were created or modified
- Check if whitelist addresses were tampered with
Screenshot and save all abnormal records — these serve as evidence when filing claims with Binance support or potentially with law enforcement.
Step 4: Contact Binance Support
Reach out to official Binance support through:
- Live Chat: Support portal within the Binance website or APP
- Submit a Ticket: File a security incident ticket in the Help Center
- Email: Send an email to Binance's security incident email
When contacting support, have the following information ready:
- Your registered email address
- Your UID (found in the Personal Center of the APP)
- When you noticed the account anomaly
- Description of the unusual activities you observed
- Screenshot evidence
Support typically responds within 24 hours. Security incidents involving asset loss are usually handled as priority cases.
Step 5: Recovery and Hardening
After Binance support confirms it's safe and unfreezes your account, you need to thoroughly strengthen your security settings:
Reset All Passwords
- Set a completely new Binance login password (different from every other platform)
- Don't reuse any previously used passwords
Re-bind Verification Methods
- Set up Google Authenticator again
- Confirm your phone number binding is correct
- Ensure your email is secure and reliable
Clean Up Authorized Devices and APIs
- In "Device Management," remove all unrecognized devices
- In "API Management," delete all API keys (especially any you didn't create)
- If you had withdrawal whitelist addresses set up, review every single one
Enable All Available Security Features
- Enable Anti-Phishing Code
- Enable Withdrawal Address Whitelist
- If you have a hardware key like YubiKey, consider binding it
Setting up all security options right when you register on Binance is the best practice.
How to Tell If Your Account Was Actually Hacked
Sometimes it might be a false alarm. The following situations may not indicate a hack:
- You logged into Binance on a new device and received a security alert email
- You modified your own security settings, triggering an alert
- You logged in from a different network, causing an IP change alert
But the following situations almost certainly indicate a breach:
- You received a withdrawal confirmation email but didn't initiate any withdrawal
- Assets in your account decreased for no reason
- Your password was changed and you can't log in
- API keys appeared that you never set up
Fundamental Ways to Prevent Being Hacked
Prevention is better than cure:
- Unique Strong Password: Don't reuse your Binance password on other platforms; at least 12 characters with uppercase, lowercase, numbers, and symbols
- Enable All Verifications: Google Authenticator + SMS + Email
- Beware of Phishing Sites: Only access Binance through official links or by downloading the Binance APP
- Don't Click Suspicious Links: Carefully verify any link claiming to be from "Binance"
- Enable Anti-Phishing Code: Once set, all official Binance emails will carry your unique identification code
FAQ
Q: Can stolen crypto be recovered?
A: It depends on the situation. If the withdrawal hasn't been completed yet (e.g., still in security verification), freezing the account can intercept it. If it has already been transferred to an on-chain address, recovery is very difficult, but you should still report it to Binance and file a report with local law enforcement.
Q: Will Binance compensate for hacking losses?
A: If the loss was caused by a security vulnerability on Binance's platform itself, Binance has the Secure Asset Fund for Users (SAFU) for compensation. If it was caused by the user's own password leak or phishing, users generally bear the loss themselves.
Q: How long does it take to restore a frozen account?
A: If confirmed safe, typically 1-3 business days to unfreeze. If a complex security investigation is involved, it may take longer.
Q: Should I file a police report?
A: If asset loss is confirmed, it's recommended to file a report with local law enforcement and keep the case record. These records may also be useful in subsequent communications with Binance.
Q: How did hackers steal my account?
A: The most common methods include: phishing websites (fake Binance login pages), email compromise followed by password reset, logging in on insecure networks, and malware on your computer or phone. It's recommended to thoroughly check your device security.