Altcoins Talks - Cryptocurrency Forum
Cryptocurrency Ecosystem => Crypto Exchanges => Binance => Topic started by: paid2 on January 09, 2024, 02:46:23 PM
-
When you use a CEX, you should be very careful, a lot of people are trying to impersonate them to try to steal your logins or infos. If you trust Binance or any CEX with your private data, KYC, bank details, addresses, money etc..., you should always be sure to always avoid to be scammed via phishing.
You should use Binance Verify (official service from Binance).
https://www.binance.com/en/official-verification (https://www.binance.com/en/official-verification)
It is useful to check the website link, email addresses, phone numbers, WeChat IDs, Twitter account or Telegram IDs. If you want to be sure that you are in communication with the real Binance team, this is the way to go.
-
Thank you, when this market goes into an uptrend, scammers will diligently look for opportunities and prey. This Binance tool will help users feel more secure when they use Binance services.
I only use Binance mobile app so I'm not too concerned about this issue, but those who need help from Binance will need to verify the information. It would be unfortunate when a user has a problem and then gets scammed: a double pain!
-
Agree! this is one of the nicest habits to build over time.
Since it's no secret that most crypto users uses/have used more than one exchange, I would like to also mention that such handles verification tool is also available on a good number of centralized exchanges -- can be typically found on the exchange's footer.
To name a few:
Bitfinex: https://www.bitfinex.com/channels/
Bybit: https://www.bybit.com/en/verification
Kucoin: https://www.kucoin.com/cert
MEXC: https://www.mexc.com/official-verify
OKX: https://www.okx.com/support-center/channel-verification
This is extremely useful for exchanges that make use of multiple domains as well which can pretty much trigger the alarm of careful users ahahah.
-
Yes this is very important step we should be careful when logging in our account. Phishing links are increasing every day and there are great support and promotion from the twitter fake accounts, telegram and the most worst is google promotional sites which appears in the top when someone search for binance. We should bookmark all important sites website and social pages for safety.
We should also be careful from old article because most of exchanges change the username of telegram and hacker using this username to decieve people.
-
I agree with you on this OP, because a lot of scammers are out there with their own link and that is why one need to download apps from the official site to stay safe from phishing links, to avoid the loss of asset as these scammers do come in different method to see how they can have access to your private data and steal your funds. This should be applied to all CEX exchange as they are now a place for scammers to get their victims from.
-
Thanks for sharing this with us as I always confirm the source either from Coinmarketcap, or Coingecko if it is related to exchanges, swaps or dex, etc. I never used any exchanges, by directly writing the keyword in Google, as I only have to do this the first time, after that I either bookmarked it and if I have to download the app then it obviously is a one-time confirmation process.
Talking about phishing links, I don't receive them that much, or maybe I don't give a shit to any email coming from these cexs. I have not faced any issues till now with Binance and I have like using it for around 2+ years. The experience is smooth, I am simply sharing my experience not trying to say words for their promotional purposes. hehe. Besides, this confirmation, we should even not click on the promotional ads coming straight from these exchanges because the last time I checked when the website of Houbi exchange was hacked the scammer even replicated the links with phishing ones and the owner did not even know it.
PS: I doubt the exchange was Houbi but please confirm it by yourself.
-
When you use a CEX, you should be very careful, a lot of people are trying to impersonate them to try to steal your logins or infos. If you trust Binance or any CEX with your private data, KYC, bank details, addresses, money etc..., you should always be sure to always avoid to be scammed via phishing.
You should use Binance Verify (official service from Binance).
https://www.binance.com/en/official-verification (https://www.binance.com/en/official-verification)
It is useful to check the website link, email addresses, phone numbers, WeChat IDs, Twitter account or Telegram IDs. If you want to be sure that you are in communication with the real Binance team, this is the way to go.
Or just never share anything with anyone directly. Binance has it's built-in KYC portal. no one from Binance ask you for any details directly via any messaging apps, emails or any other source of communications. so whenever you receive an email, msg from anywhere pretending to be a binance staff or representative, you should know immediately that is fake.
and not only Binance, scammers impersonate so many other personalities, admins of telegram and discords groups so you should avoid sending your personal details and clicking on any links from anyone.
-
Or just never share anything with anyone directly. Binance has it's built-in KYC portal. no one from Binance ask you for any details directly via any messaging apps, emails or any other source of communications. so whenever you receive an email, msg from anywhere pretending to be a binance staff or representative, you should know immediately that is fake.
and not only Binance, scammers impersonate so many other personalities, admins of telegram and discords groups so you should avoid sending your personal details and clicking on any links from anyone.
You're right but at the same time, (legit) Binance can ask you to fill in some spreasheets, and to link some personnal documents. It is part of their SoF-EDD process when you have to justify some incomes or transactions. There are tons of scenarios which could lead the customer support to ask for specific documents to you if needed. It is not always shady.
I personnaly never share anything with Binance and never do any KYC. I stopped using Binance years ago. As a former Binance employee, you know, it is like Mcdonald's: once you were employed by them and you saw the kitchen, you don't want to eat any of their products again. Same for me with Binance, I know that using their service is not in my personnal interest.
-
Or just never share anything with anyone directly. Binance has it's built-in KYC portal. no one from Binance ask you for any details directly via any messaging apps, emails or any other source of communications. so whenever you receive an email, msg from anywhere pretending to be a binance staff or representative, you should know immediately that is fake.
and not only Binance, scammers impersonate so many other personalities, admins of telegram and discords groups so you should avoid sending your personal details and clicking on any links from anyone.
You're right but at the same time, (legit) Binance can ask you to fill in some spreasheets, and to link some personnal documents. It is part of their SoF-EDD process when you have to justify some incomes or transactions. There are tons of scenarios which could lead the customer support to ask for specific documents to you if needed. It is not always shady.
I personnaly never share anything with Binance and never do any KYC. I stopped using Binance years ago. As a former Binance employee, you know, it is like Mcdonald's: once you were employed by them and you saw the kitchen, you don't want to eat any of their products again. Same for me with Binance, I know that using their service is not in my personnal interest.
damn, you made me not to order in mcdonalds anymore. you worked there?
though i am a binance user since 2016. i've not really talked to any off the representative or chat support there except when i was asked to submit once again my kyc documents. nothing contact again after that but i'm executing some trading every week. so it would be surprising for me to see one will just message me all of a sudden.
you would prefer to have a transcript when you chat with support so if they contact me via email or tg. i would rather ask them to chat with me on the support ticket.
-
I personnaly never share anything with Binance and never do any KYC. I stopped using Binance years ago. As a former Binance employee, you know, it is like Mcdonald's: once you were employed by them and you saw the kitchen, you don't want to eat any of their products again. Same for me with Binance, I know that using their service is not in my personnal interest.
Is it alright for you to say things like that though? You did not sign any NDA or something similar with them before you left? I'm not a lawyer but your post kinda imply that Binance products are terrible for its users (probably true though). While I'm sure they won't go after you just because of that, I think it is never wrong to be more careful.
Back to the topic, what kind of spreadsheets are they asking us to fill? Don't they provide a dedicated form for that? It would be odd if they just linked Google Sheets for users to input their documents. If any communication is done via their ticket chat, a dedicated tool for taking pictures, uploading documents etf would be really helpful.
-
]Is it alright for you to say things like that though? You did not sign any NDA or something similar with them before you left? I'm not a lawyer but your post kinda imply that Binance products are terrible for its users (probably true though). While I'm sure they won't go after you just because of that, I think it is never wrong to be more careful.
Of course I did signed a NDA. Indeed I will never share for examples the names of some internal tools, or I will never be specific about some processes, etc...etc... But I am allowed to say what I want about the company, as long as other CEX cannot take profit of these informations. But you're right, I pay a lot of attention when I talk about them, even if I know perfectly the conditions of my former contract and the NDA.
Back to the topic, what kind of spreadsheets are they asking us to fill? Don't they provide a dedicated form for that? It would be odd if they just linked Google Sheets for users to input their documents. If any communication is done via their ticket chat, a dedicated tool for taking pictures, uploading documents etf would be really helpful.
Yeah in general they send an email, ask to connect to a chat session with an agent of your local language. And this agent sometimes will need to ask you to fill a spreadsheets with the source of some funds for example, or other details. You can upload documents and photos/screenshots in a Binance chat, but it would not be enough in some rare cases.
-
As a former Binance employee, you know, it is like Mcdonald's: once you were employed by them and you saw the kitchen, you don't want to eat any of their products again. Same for me with Binance, I know that using their service is not in my personnal interest.
I don't think it is a good attitude toward the exchange you used to work for. I do know NDA has its effective time so if the time is over, you are free to talk about them but just saying, I think you are exaggerating things here.
I know KYC is bad for privacy and I am not defending Binance, but almost all big (Tier 1) centralized exchanges do this because of stricter regulatory enforcement globally recent months.
Of course I did signed a NDA. Indeed I will never share for examples the names of some internal tools, or I will never be specific about some processes, etc...etc... But I am allowed to say what I want about the company, as long as other CEX cannot take profit of these informations. But you're right, I pay a lot of attention when I talk about them, even if I know perfectly the conditions of my former contract and the NDA.
It's good to do this man.
There is Punny code attack and if people manually type what they see, to verify information at the page you gave, maybe they will get result is valid.
But if they actually interact with those emails, it's phishing and they will have risk of losing money. Visually they are same but differently in their actual links.
Chrome Extension Detects URL Homograph (Unicode) Attacks (https://www.bleepingcomputer.com/news/security/chrome-extension-detects-url-homograph-unicode-attacks/)
-
I don't think it is a good attitude toward the exchange you used to work for. I do know NDA has its effective time so if the time is over, you are free to talk about them but just saying, I think you are exaggerating things here.
I know KYC is bad for privacy and I am not defending Binance, but almost all big (Tier 1) centralized exchanges do this because of stricter regulatory enforcement globally recent months.
It is not only about KYC, I think people are free to accept to share their personnal data or not, as long as we have some good no-KYC plateforms I won't complain from my side :)
To be honnest, I am not exaggerating things, but in the same time I understand why you think like that when I read my previous message again. It just depends of our personnal situation, regarding taxes, national laws etc... In my personnal situation, the way Binance (but I could tell the same for Coinbase or Kraken I guess) works, is really not compatible with my personnal interests.
You're right more and more services are compliant with AML/CTF regulations, asking for KYC and personnal data. Even some big BTC mining pool are now asking for a KYC lol, crazy times... but heh, if people want to use regulated services why not. I guess that if I was born in America I would not dare to try dodging IRS...
There is Punny code attack and if people manually type what they see, to verify information at the page you gave, maybe they will get result is valid.
But if they actually interact with those emails, it's phishing and they will have risk of losing money. Visually they are same but differently in their actual links.
Chrome Extension Detects URL Homograph (Unicode) Attacks (https://www.bleepingcomputer.com/news/security/chrome-extension-detects-url-homograph-unicode-attacks/)
Well done noticing this, thank you! It's really good to know!
I was totally unaware about this kind of attacks
-
When you use a CEX, you should be very careful, a lot of people are trying to impersonate them to try to steal your logins or infos. If you trust Binance or any CEX with your private data, KYC, bank details, addresses, money etc..., you should always be sure to always avoid to be scammed via phishing.
You should use Binance Verify (official service from Binance).
https://www.binance.com/en/official-verification (https://www.binance.com/en/official-verification)
It is useful to check the website link, email addresses, phone numbers, WeChat IDs, Twitter account or Telegram IDs. If you want to be sure that you are in communication with the real Binance team, this is the way to go.
If you're a regular user of Binance its important to bookmark the platform and if you happen to receive a notification supposedly coming from Binance do not click the link log in to your Binance account first using the bookmark that you created so if you click that link you will see if you are redirected to a real Binance where you are already log in if you are not log in then it's a phishing link another way if you are still unsure is to copy paste the link check the age on Whois, the real Binance was registered in 2017 and will expire in 2025
-
When you use a CEX, you should be very careful, a lot of people are trying to impersonate them to try to steal your logins or infos. If you trust Binance or any CEX with your private data, KYC, bank details, addresses, money etc..., you should always be sure to always avoid to be scammed via phishing.
Phishing remains to be a big problem in the world and market of cryptocurrency, even years after it got started. This is so true with most newbies who have not yet experienced to be victims of this malady. I once was lost tokens worth $2500 at that time due to phishing using the Slack platform. I was then so innocent and even stupid at that time...maybe around 2016 or 2017 right when ICOs were on the rage. These days phishing strategies must have evolved to the point that it can sometimes be hard to tell which is which...that is why it is good that Binance has a way to verify correct information and the people officially working with them. One way to fight scams, phishing, hacking and similar frauds is to always get educated and updated of the many things happening in our industry.
-
Phishing remains to be a big problem in the world and market of cryptocurrency, even years after it got started. This is so true with most newbies who have not yet experienced to be victims of this malady. I once was lost tokens worth $2500 at that time due to phishing using the Slack platform. I was then so innocent and even stupid at that time...maybe around 2016 or 2017 right when ICOs were on the rage. These days phishing strategies must have evolved to the point that it can sometimes be hard to tell which is which...that is why it is good that Binance has a way to verify correct information and the people officially working with them. One way to fight scams, phishing, hacking and similar frauds is to always get educated and updated of the many things happening in our industry.
Sorry to read that you lost 2,500 usd man. That's a very expensive lesson, but at least you did learn something and apparently now you are full aware of this threat... Good to see that this event didn't killed your motivation to use cryptocurrencies :)
I agree that each plateform should have this kind of tool, or even better, I am dreaming to see big CEXs proposing a PGP key to sign their email/messages.. Maybe one day in the future, we can always hope.