SMS spoofing is a scam that relies on manipulation rather than technical hacking. The scammer changes the sender name or number on a text message so it looks like it's coming from a trusted source, often Binance.US or another company you already do business with. The goal is to get you to follow instructions in the message, like calling a number, clicking a link, or sharing sensitive information.
Because of how text messaging works, a spoofed message can land in the same thread as real messages you've received before, which makes it harder to tell real from fake at a glance.
How to spot a spoofed message
Watch for messages warning you about account activity or a transaction that asks you to call a phone number. Binance.US will never ask you to call a number to speak with support or security. Any message like this is a scam, and calling the number will only put your assets at risk. Always reach out through Support directly in the app or on the official website instead.
Also steer clear of links sent by text. A link can lead to a phishing site built to steal your login details or install malware on your device. Stick to the official Binance.US app and website, and if you're ever unsure whether a link or message is real, contact Support before clicking anything.
How to protect your account
Enable Anti-Phishing Code. This is a code you set yourself that appears in legitimate messages from Binance.US, so you can tell a real message from a fake one at a glance. Set it up from your exchange account's security settings.
Verify before you respond. Double-check the source of any unexpected message before acting on it. If a text claims to be from Binance.US and you're not sure it's real, don't reply to it or use any link or number inside it. Contact Support directly instead.
Enable two-step verification (2FA). Two-step verification (2FA) adds a second layer of protection beyond your password. Binance.US currently supports passkeys for logging in, which offer stronger, more convenient protection than a password alone. Turn on two-step verification (2FA) for your account and any other accounts that support it.
Never share sensitive information over text. Don't send passwords, two-step verification (2FA) codes, or other personal details by text message, even if the request looks legitimate.
What a spoofed message often looks like
Scammers frequently use urgency to get a reaction. A common version warns of a login from an unfamiliar location or a withdrawal you supposedly didn't authorize, and asks you to call a number to fix it. Calling usually ends with the scammer talking you into moving your crypto to another wallet for "safekeeping," when it's actually going straight to them.
Another version tells you to "verify" or "upgrade" your account, or warns that your account will be suspended unless you click a link. The link leads to a fake site designed to steal your login details or your assets, not a real Binance.US page.
A more targeted version references a specific action, like asking you to confirm or cancel a withdrawal you never started. If you get a message like this, check your account activity directly in the app rather than acting on the text.
If you've been targeted
Report the incident to law enforcement right away. If the message claimed to be from Binance.US, contact Support so we're aware of it too.
If you believe your account has been compromised, disable your account and contact Support immediately, and consider freezing your credit and your bank or credit cards as an added precaution.
Never send your account details, two-step verification (2FA) codes, or other financial information to anyone, even if the request seems to come from a legitimate source. Scammers use email and other channels the same way they use SMS, so the same caution applies everywhere.
Final thoughts
SMS spoofing works by exploiting trust and urgency, not by breaking through security systems. Staying protected means questioning unexpected messages, using tools like Anti-Phishing Code and two-step verification (2FA), and reporting anything suspicious right away.