The safety of your accounts is as important to us as it is to you. That is why we offer you these security tips and simple practices you can follow to ensure your information doesn't fall into the wrong hands.
Important: If anyone promises you money to set up an account and requests a username and password to do so, you are being scammed.
Logging In
Logging In
When logging into Binance.US always check that the URL begins with binance.us/login or https://www.binance.us/login before entering sensitive info like your password.
Phishing scams are common and involve redirecting users to an alternative log in page with a slightly different URL where any information you enter is sent to the hostile page owner.
Communications with Binance.US
Communications with Binance.US
Binance.US will only ever attempt to contact you via the following methods:
Email: Always ensure the email address ends with one of the following: @binance.us, @new.binance.us, @post.binance.us, and @mail.binance.us
Twitter: @BinanceUS or @BinanceUShelp
Reddit: Moderators (Mods) on the /r/BinanceUS will have a picture of their Mod Badge
Important
Binance.US will NEVER solicit money, ask you to send your crypto to an external wallet, or ask for your password (outside of the main sign-in page).
Always avoid clicking links or answering emails/messages from unknown senders.
Avoid Phone Calls
Avoid Phone Calls
Binance.US will not contact you or ask to be contacted via telephone. Telephone scams are common. Fortunately, they are quite easy to avoid with a few rules of thumb.
Never call numbers claiming to be associated with Binance.US. While some companies offer phone support, Binance.US does not. Representatives of Binance.US will never provide you with a telephone number.
Never call numbers sent to you over social media. Many scams providing you with a phone number to call will be found via email or social media. Do not call numbers sent to you from unverified accounts.
Never provide personal information to unknown incoming callers. If you receive a phone call prompting you to provide your personal/account details, hang up. Representatives of Binance.US will never call you, nor will representatives of social media websites, your email provider, or most governing entities.
To learn more about phone scams, please see the Federal Trade Commission's Consumer Information on Phone Scams.
Two-Factor Authentication
Two-Factor Authentication
Two-factor authentication (2FA) is a second layer of security beyond your password. Be sure to enable two-factor authentication on any accounts that offer it. We highly recommend our customers enable more than one method of two-factor authentication in your Security Settings.
Here are instructions on setting up two-factor authentication (SMS as well as authenticator apps).
Passwords
Passwords
Strong passwords are essential for account security. To choose a strong, effective password, follow these simple guidelines:
Do not share your passwords. Your passwords are meant to be kept secret. Representatives of Binance.US will never ask you for your password.
Do not use passwords containing things or people you care about or common phrases. Your password should never be a common phrase, nor should it be the name of your child, pet, spouse, etc. It also should never contain important dates such as birthdate or anniversary. This type of information is usually accessible via social media — and to malicious parties.
Do not use the same password twice. Remembering passwords is hard, so it is common to use the same password for multiple online accounts. This is, however, bad practice. If this password is discovered by an unwanted party, they then have access to more than one of your accounts.
Consider using a password manager. The most secure passwords are long, randomized, and contain uppercase letters, lowercase letters, numbers, and symbols. A password manager can automatically generate and catalog secure passwords.
Assets
Assets
Keep your assets safe and make sure they are sent where you want them to be sent — and only where you want them to be sent.
Do not send fiat or cryptocurrency to anybody asking for it on social media or via email or phone. Representatives of Binance.US will never ask you to send assets over Facebook, Twitter, or any other form of social media - the same goes for phone and email.
Always copy/paste cryptocurrency addresses. When sending cryptocurrency, be sure to copy and paste the entire address. Typing cryptocurrency addresses leaves too much room for error. For more information on keeping your crypto safe, see our article on how to secure your cryptocurrency.
Always confirm cryptocurrency addresses multiple times. Check the addresses you are sending to and check more than once. To confirm you copied and pasted the full address, compare the first few numbers and last few numbers of the address you are trying to send assets to. Once cryptocurrency is sent, there is no way to reverse the transaction.
Use trusted wallets. Which wallet provider you choose is up to you, but it is crucial that you ensure your provider keeps your funds safe.
If needed, make sure you have added a memo/destination tag/payment ID. Some cryptocurrencies require information in addition to the address, such as a destination tag or payment ID. Always be sure that you add this information, as it is this information that routes your assets accordingly.