How Do Phishing Emails Trick People?
Have you ever received an email that looks like it's from Binance, telling you "Your account has a security risk — please log in to verify immediately" or "Congratulations, you've earned an airdrop reward — click to claim"? If you clicked the link in the email and entered your credentials, your account was likely compromised.
This is a phishing email — a fraudulent message disguised as Binance to trick you into clicking a fake website link and entering your login information. These fake emails are becoming increasingly sophisticated in their disguises — from sender names and email formatting to website styling, they can appear nearly identical to the real Binance.
Binance's "Anti-Phishing Code" feature was designed specifically for this problem — it lets you instantly distinguish real Binance emails from fake phishing attempts.
What Is an Anti-Phishing Code?
An Anti-Phishing Code is a personalized text string that you create yourself. Once set, every official email Binance sends you will include this text.
For example, if you set your Anti-Phishing Code to "Apple2025," every genuine Binance email will display "Apple2025." If you receive an email claiming to be from Binance but it doesn't contain your Anti-Phishing Code, it's almost certainly a phishing email.
This method is simple but highly effective because scammers have no way of knowing what Anti-Phishing Code you set, making it impossible for them to forge this information in phishing emails.
Setting Up Your Anti-Phishing Code Takes Just 3 Minutes
Step 1: Navigate to Security Settings (1 minute)
App:
- Open the Binance official app
- Tap your profile icon in the top left
- Go to "Security" settings
- Find "Anti-Phishing Code" option
- Tap "Enable" or "Set Up"
Web:
- Log in to the Binance website
- Click the account icon in the top right
- Select "Security" > "Advanced Security Settings"
- Find "Anti-Phishing Code" and click "Enable"
Step 2: Create Your Unique Anti-Phishing Code (1 minute)
Enter your Anti-Phishing Code in the input field.
Recommendations:
- At least 4 characters, ideally 6 to 20 characters
- Use a combination that's easy for you to remember but hard for others to guess
- Can include letters and numbers
- Do not use your password, birthday, phone number, or other personal information
- Do not use overly simple words (like "123456" or "password")
Good Anti-Phishing Code examples:
- "Mango2025Blue"
- "Happy7Star"
- "CryptoSafe99"
Step 3: Confirm and Activate (1 minute)
After entering your Anti-Phishing Code, you may need to complete identity verification (Google Authenticator code, SMS code, etc.). After verification, the Anti-Phishing Code takes effect immediately.
From this point forward, every official Binance email you receive will display your Anti-Phishing Code.
How to Use the Anti-Phishing Code to Verify Emails
Genuine Binance Emails
When you receive an email from Binance, opening it will show your Anti-Phishing Code in a prominent position (usually at the top or bottom of the email). For example:
"Your Anti-Phishing Code: Mango2025Blue"
Seeing your correct Anti-Phishing Code confirms the email was genuinely sent by Binance.
Phishing Emails
If an email claiming to be from Binance:
- Does not display an Anti-Phishing Code → Phishing email
- Displays the wrong Anti-Phishing Code → Phishing email
- Says "Please update your Anti-Phishing Code" → Very likely a phishing email
When encountering suspicious emails:
- Do not click any links in the email
- Do not download any attachments
- Do not reply to the email
- Delete it immediately
- If you need to access your Binance account, manually open your browser and type the official Binance URL or use the app
What Attacks the Anti-Phishing Code Prevents
Spoofed Email Attacks
Scammers forge the sender address (Email Spoofing) to send emails that appear to come from binance.com. The Anti-Phishing Code effectively identifies these forged emails.
Content Clone Attacks
Scammers copy genuine Binance email templates and replace the links with phishing website URLs. Even if the email styling is identical, the absence of the correct Anti-Phishing Code exposes the fraud.
Urgency-Based Attacks
"Your account is about to be frozen," "Abnormal login detected," "Please verify immediately" — these urgency-creating emails are the most common phishing tactic. With an Anti-Phishing Code, you can calmly check whether the correct code is present before deciding whether action is needed.
Managing Your Anti-Phishing Code
Changing Your Anti-Phishing Code
If you suspect your Anti-Phishing Code may have been compromised, or simply want to rotate it periodically:
- Go to Binance security settings
- Find the Anti-Phishing Code option
- Tap "Change"
- Enter a new Anti-Phishing Code
- Complete identity verification
It's recommended to change your Anti-Phishing Code every 3 to 6 months, even without signs of compromise.
Remembering Your Anti-Phishing Code
The effectiveness of your Anti-Phishing Code depends on you remembering it. If you forget what you set, you cannot determine whether the code in an email is correct.
Record your Anti-Phishing Code in a secure location (alongside your Google Authenticator backup key), and develop the habit of checking the Anti-Phishing Code every time you receive a Binance email.
Anti-Phishing Code Coverage Across Communication Channels
The Anti-Phishing Code primarily covers emails sent by Binance. For SMS and in-app notifications, the Anti-Phishing Code may not be displayed. Therefore:
- Always remain cautious about SMS messages claiming to be from Binance
- Do not click links in text messages — open the app directly
- Binance will never ask for your password or verification codes via SMS
Additional Anti-Phishing Measures Beyond the Code
Check the URL
Every time you log into Binance, carefully examine the URL in your browser's address bar. The correct Binance URL should start with the proper domain and display HTTPS encryption (lock icon).
Phishing website domains are typically very similar to the real URL with subtle differences, such as:
- binance.com (correct)
- b1nance.com (digit "1" replacing letter "i")
- binance-login.com (extra words added)
- binannce.com (extra "n")
Use Bookmarks
Save the Binance official URL as a browser bookmark and always access it through the bookmark rather than through search engine results or email links.
Verify the Email Sender
While sender addresses can be forged, checking is still useful. Official Binance emails typically come from @binance.com or related official subdomains.
Use Binance's Official Verification Tool
Binance provides a "Binance Verify" tool where you can enter email addresses, URLs, phone numbers, and other information to check whether they are from Binance's official sources.
FAQ
Does the Anti-Phishing Code appear in all Binance emails?
Yes. Once set, all official Binance emails (including login notifications, trade confirmations, security alerts, and marketing emails) will contain your Anti-Phishing Code.
Is there a security risk if my Anti-Phishing Code is leaked?
The Anti-Phishing Code itself is not a login credential — its exposure won't directly compromise your account. However, if leaked, scammers could theoretically include your code in phishing emails, reducing the protection's effectiveness. If you suspect your code has been exposed, change it immediately.
Am I 100% safe after setting up an Anti-Phishing Code?
No. The Anti-Phishing Code is just one of many defense tools. You still need to stay vigilant, check URLs, use two-factor authentication, and employ other measures to comprehensively protect your account.
What if I forget my Anti-Phishing Code?
After logging into Binance, you can view your current Anti-Phishing Code in the security settings, or change it to a new one directly.
Summary
The Anti-Phishing Code is a simple-to-set-up yet remarkably effective security feature. Setup takes just 3 minutes, and afterward, a quick glance at any email tells you whether it's genuine.
Key takeaways:
- Set it up now — it only takes 3 minutes
- Choose a code that's easy to remember but hard to guess
- Develop the habit of checking the Anti-Phishing Code in every email
- Rotate your code periodically
- Anti-Phishing Code + Google Authenticator + security awareness = comprehensive protection
Don't wait until you've been scammed to regret not setting this up. Take action now.
Android APK direct install, iOS requires overseas Apple ID