What is a phishing site? A copycat site that steals your login
Short answer
A phishing site is a fake copy of a real site: same look, address one or two letters off. It's built to get you to type in your password, codes or seed phrase, or to connect your wallet. Binance is at binance.com and OKX at okx.com: type the address yourself or use a bookmark.
- Don't tap links in DMs, group chats or text messages, or the ads at the top of search results.
- Set an anti-phishing code. Real emails from the exchange show your code, so fakes stand out.
- Not sure about a site, group or account? Check it with the exchange's official verification tool.
In one line
A phishing site is a fake version of a real site: it looks identical and waits for you to type in your password, codes or seed phrase.
An example
You get a message saying your account shows “unusual activity” and asking you to verify it through a link.
- The link opens a page that looks exactly like the exchange, but the address has an extra letter or a different ending.
- The moment you log in, the scammer has your password and codes. They log in to your account and withdraw your crypto.
Related
FAQ
I typed my password into a phishing site. What now?
Change your password and reset two-factor authentication (2FA) right away in the official app, and freeze your account if you need to. Check for logins and withdrawal addresses you don't recognise. If money has already left, contact the exchange through the help centre on its official site and report it to the police.
The site has a padlock and https. Does that mean it's real?
No. Phishing sites can have a padlock and https too. It only means the connection is encrypted, not that the site is genuine. Check the address letter by letter.
Is the top search result the official site?
Not always. The top results are often ads, and scammers buy ads too. Type the address yourself or save it as a bookmark.