The Coinbase withdrawal code text scam explained
A text claiming to carry your Coinbase withdrawal code is not Coinbase confirming a transfer. It is usually the second half of an account takeover, sent right after a scammer triggers your real verification code and needs you to hand it over.
How the fake withdrawal-code text works
The attacker typically already has your email and password, often phished earlier through a fake login page. They enter those credentials on the real Coinbase site, which triggers a genuine one-time code to your phone.
Seconds later you get a text posing as Coinbase support. It warns about a pending withdrawal and asks you to reply with the code to cancel it. That code is the same one the attacker needs to approve the transfer.
The FTC describes this exact pattern across banks, exchanges, and carriers. Scammers pose as someone you trust, then ask for the code to help fix an account problem. Anyone who asks for that code is a scammer, the agency says.
Video: The Bitcoin Express
What Coinbase says it will never do
Coinbase publishes a specific list of actions its own support staff will never take. A withdrawal-code text asking you to reply matches several of them directly.
| Coinbase’s own rule | How the withdrawal-code text breaks it |
|---|---|
| Never asks for your password or 2-step verification code | Asks you to reply with the code sent to your phone |
| Never asks you to secure, move, or access your funds | Claims a withdrawal is pending and needs your action now |
| If a support call drops, the same agent calls back within 5 minutes and re-verifies you first | Arrives as an unsolicited text from an unknown number with no prior verification |
These same impersonation tactics show up outside of text messages too. Fake support numbers, cloned login pages, and lookalike wallet apps lean on the same urgency and borrowed trust that makes the withdrawal-code text work.
If you already replied with the code
Lock your account in the Coinbase app first, then email security@coinbase.com with a screenshot of the text. Coinbase calls this approach lock first, ask later.
Forward the message to 7726 (SPAM) if you use a US carrier, and file a report at ReportFraud.ftc.gov. Change your Coinbase password from a device you trust, and switch two-factor authentication to an authenticator app instead of SMS where the option exists.
Whether a Coinbase wallet is safe for you usually comes down to this same habit: never act on urgency inside a text, and verify through the app or site directly instead.
Withdrawal-code texts are one version of a wider pattern. Social-engineering scams that start on Telegram use the same trick of building trust fast, then asking for the one piece of information that gets into an account.
Frequently asked questions
Is it ever safe to reply to a Coinbase text with a code?
No. Coinbase says its support staff will never ask for your password or two-step verification code, by text, call, or email.
What if the withdrawal mentioned in the text is real?
Log into Coinbase directly through the app or coinbase.com, never through a link in the text, and check your account activity there.
Where do I report a Coinbase withdrawal-code text scam?
Forward it to 7726 (SPAM) on a US carrier, email security@coinbase.com, and file a report at ReportFraud.ftc.gov.
