Anti-Phishing

Received a 'Binance' SMS Asking You to Click a Link? SMS Phishing Identification

Common scripts, number spoofing tactics, identification methods, and emergency responses for SMS phishing (Smishing) impersonating Binance.

SMS phishing is harder to spot than email phishing — text messages lack anti-phishing codes and hover functionality. This article provides methods for identification. Download links: Binance website, mobile Binance official app, if you don't have the iOS app installed see the iOS install guide.

I. Characteristics of Official Binance SMS

TypeRealFake
Verification Code SMSOnly 6-digit numbers + the word "Binance"Contains links / long texts
Login AlertsVery rare (mostly via email / APP)Common
Fund MovementsMostly via APP push notifications"Click to view immediately"
"Customer Service" Reaching OutNeverCommon

Binance text messages do not contain links — this is the most critical way to identify them.

II. Common Phishing SMS Scripts

1. "Your Binance account has an anomaly, verify immediately: bit.ly/xxxx"

Classic intimidation + short link.

2. "100 USDT has arrived, confirm receipt: xxx.com"

Temptation + call-to-action button.

3. "Binance KYC is about to expire, update link: xxx"

Creating false urgency.

4. "Customer service is here to help, please add WeChat xxx"

Luring you off the platform.

5. "You have a withdrawal request, click to cancel: xxx"

Intimidation + reverse psychology.

III. Why SMS Phishing Is Hard to Identify

  • No anti-phishing code mechanism
  • SMS sender numbers can be forged (SMS Spoofing)
  • Short links mask the real domains
  • Mobile screens are small, making URLs easy to misread

IV. The Golden Rule

Official Binance text messages never contain links.

Any "Binance" text message with a link, no matter how real and credible the content looks, is a phishing attempt.

V. What to Do If You Receive a Suspicious SMS

1. Do Not Click the Link

Never click on any short links or domains.

2. Do Not Reply

Do not reply to the text message. Replying confirms your number is active, attracting more phishing attempts.

3. Take a Screenshot and Report

Take a screenshot of the SMS and report it through the Binance Help Center.

4. Self-Check Your Account

Open the Binance APP (do not enter via the SMS link) and review:

  • Login history
  • Device management
  • Asset changes

5. Block the Number

iOS: Messages → Info → Block this Caller. Android: Messages APP → Long press → Block.

VI. Complementary Defense Against SIM Swap

SMS phishing often works in tandem with SIM Swapping:

  1. The attacker tricks you into clicking a fake link to steal your password
  2. Simultaneously, they deceive your carrier's customer service into issuing a replacement SIM card to steal your number
  3. They use your number to receive 2FA text messages
  4. They log in and withdraw funds

Defenses:

  • Do not use SMS as your only 2FA method
  • Set a strong password + PIN for your carrier account
  • Pay attention to any sudden loss of cell signal

VII. Carrier-Level Defenses

Contact Your Carrier to Strengthen Protection

Carriers in China offer services like "Number Security Lock". Once enabled, reporting a loss and getting a new SIM requires you to be physically present at a branch.

Disable International SMS

If you don't need international text messages, ask your carrier to turn them off. Some phishing messages are sent through international channels.

VIII. SMS Phishing in Different Regions

Mainland China

Phishing texts often spoof the 1069 SMS gateway. Identification: any message containing a URL is fake.

Overseas

International SMS phishing spoofs short codes (5-6 digits). The same rule applies: do not trust anything with a link.

FAQ

Q1: Is iMessage phishing the same? Yes. iMessage and RCS can also be exploited for phishing. The rules remain the same.

Q2: What if I block the text and then can't receive real verification codes? Distinguish the numbers: blocking a specific number won't affect others. Binance verification codes usually come from different short codes.

Q3: How did they get my number to send phishing texts? Usually through data breaches. Once breached, it's impossible to completely stop, so long-term defense is recommended.

Q4: Can I trace the phisher in reverse? No. SMS sender numbers are almost certainly spoofed or burner numbers.

Extended Reading

Keep going

After this article, head back to the topic index and pick up the next piece in the same category.

Topics

Related security guides

Why Must You Set Up an Anti-Phishing Code? 2026-04-18 How to Monitor Binance Account Phishing Signals Long-Term? 4 Actions to Take Monthly 2026-04-17 Can I open the Binance "statement" PDF email attachment? Document phishing defense 2026-04-15 Is it a scam when customer service asks me to open screen sharing? Remote assistance phishing 2026-04-13