What is an anti-phishing code? Spot fake exchange emails at a glance
Short answer
An anti-phishing code is a word or phrase you choose in your exchange account. Once it's set, the exchange's emails to you include it. If an email doesn't show your code, or shows the wrong one, it's a fake made to look like the exchange. Don't click its links.
- Pick something only you would know. Don't use your password or birthday.
- The code only shows that an email came from the exchange. Real or not, never hand over your password or verification codes.
In one line
A word you set yourself that shows up in real exchange emails and is missing from fake ones.
An example
You set your anti-phishing code to “orange2026”. Then an email arrives about a new device logging in to your account:
- It shows “orange2026”: it came from the exchange.
- It doesn’t, or the code is wrong: it’s a fake. Don’t click anything in it.
Related
FAQ
What should I use as my anti-phishing code?
A word or short phrase only you would know and nobody could guess. Don't use your password or birthday, and don't tell anyone.
If an email has my code, is it definitely real?
Most likely it came from the exchange, but anyone who learns your code can copy it, so keep it private. Real or not, never hand over your password or verification codes.
I haven't set a code yet. How can I check an email?
Don't click links in the email. Open the official website or app yourself and see if there's anything to it. You can also check the sender's address with the exchange's own verification tool: Binance Verify at Binance, [Channel verification] at OKX.