Coinbase Support Scam Calls: Fake Scripts & How to Verify

Why phone-call scams work so well

Fake “Coinbase support” numbers and call centers are a high-volume social-engineering industry. Scammers buy leaked emails and phone numbers, spoof caller IDs, and run scripts that feel like a real security team. Coinbase has said social engineering—not protocol hacks—drives the vast majority of customer losses it sees, and that similar attacks hit banks and brokers too when asset values rise. ^[2] The goal is almost always the same: get you to move crypto into a wallet the attacker controls, or to hand over a seed phrase, password, or one-time code.

This page focuses on the phone-call and SMS-to-call pattern that Bing and users often search as “Coinbase support script” or “is Coinbase calling me.” For WhatsApp, Telegram, and email impersonation across exchanges, see our fake exchange support scams guide and the Scam Watch hub.

The typical Coinbase support calling script

Coinbase published a detailed minute-by-minute example of how the call unfolds. The wording changes; the structure rarely does. ^[2]

Step 1Unsolicited text about a “suspicious transfer”You get a text claiming a BTC or ETH transfer is pending and asking you to press 1 to cancel. Anyone can send that text. Coinbase’s own walkthrough treats unsolicited texts and calls as a warning flag—ignore them and open the app from your own bookmark instead.
Step 2Immediate callback from “Coinbase Security”Seconds later a calm, fluent caller claims your account is compromised. They may recite your address, email, or rough balances scraped from old breaches and social media. Reciting personal data is not proof they work for Coinbase.
Step 3Pressure to move funds to a “secure wallet”The caller walks you through installing a self-custody wallet (often Coinbase Wallet or another app) so you can “protect” funds. Self-custody wallets are controlled by whoever holds the seed phrase—not by Coinbase.com support.
Step 4Seed phrase trapThey either dictate a seed phrase for you to import, or ask you to read yours aloud “so they can secure the wallet.” Either way, they control the wallet. Coinbase states it will never ask for or provide a seed phrase.
Step 5Drain of everything you transferredOnce assets leave your exchange balance for a wallet the scammer controls, the funds are usually gone. Confirmed crypto transfers are irreversible; recovery cold-callers who promise to get it back for a fee are often a second scam.

What Coinbase will NEVER ask

Coinbase Help’s technical-support scam page is explicit. Customer service agents will never: ^[1]^[3]

Ask you to secure, move, or access your funds
Provide a wallet seed phrase or ask you for your seed phrase
Ask for your password or 2-step verification code
Ask you to install software on your device
Remotely access your device to take action on your account

The same Help article adds: Coinbase will never call or text you to give you a new seed phrase or wallet address to move funds to, and will never ask you to contact an unknown number to reach them. If you are asked for any of the above, disconnect and email security@coinbase.com immediately. ^[1] Extortion-style variants also push cryptocurrency payments, gift cards, or “insurance” products in Coinbase’s name—Coinbase says it does not offer those insurance products and staff will never ask you to send crypto to external addresses. ^[1]^[3]

Hard stop: seed phrase, password, 2FA / 2-step code, remote-access software (AnyDesk, TeamViewer, and lookalikes), “secure wallet” transfers, gift cards, or crypto payments “to unlock” an account. Hang up. Do not argue. Do not stay on the line “just to check.”

How to verify a caller (or hang up safely)

Caller ID can be spoofed. Coinbase warns that scammers can spoof legitimate-looking phone numbers on outbound calls. ^[1] Verification is about the channel you open, not the number on the screen.

Did you start this contact yourself from a bookmarked help.coinbase.com page or from inside the official Coinbase app?
Are they asking you to move funds, share a seed phrase, password, 2FA code, or install remote-access software? If yes, hang up.
Can you confirm the same alert inside the official app or site you typed yourself—without using any link or number the caller gave you?
Would a genuine agent re-verify identity without asking for secrets that let them take over the account?

Official support is started from Coinbase’s Contact us / Help Center flow (chat, phone callback, email, or mail), not from a number in a text, ad, or social post. Open Contacting Coinbase Support from a bookmark or typed URL. ^[4] Coinbase notes that if a genuine support call drops, an agent may call the same number back within five minutes and re-verify identity with a security question—still without requesting seed phrases, passwords, 2FA codes, software installs, or remote access. ^[1]

We do not publish a support phone number on this page. Numbers change, ads spoof them, and the safest habit is always: start from the live Contact us page, never from search ads or the caller’s script.

If you already engaged the caller

Hang up. Do not call back any number the scammer gave you.
Uninstall remote-access tools and restart the device. Change the password on the email tied to your exchange account.
In the official Coinbase app or site you typed yourself: lock the account if available, rotate password and 2FA, remove unknown devices, API keys, and new withdrawal addresses.
Email security@coinbase.com with what happened. Use Help Center contact options for account recovery steps. ^[1]^[2]
If a seed phrase was shared, assume that wallet is emptyable. Create a new wallet offline, move any remaining assets you still control, and never reuse the compromised phrase.
Report to ic3.gov with transaction hashes, addresses, amounts, and contact details. ^[5] Be wary of anyone who DMs you promising guaranteed recovery for an upfront fee.

Related WhatsApp and Telegram angles

The same script often jumps channels: a text becomes a call, then a WhatsApp “senior specialist,” or a Telegram “compliance desk.” Urgency language (“your account will be frozen in 10 minutes”), requests for screenshots of 2FA apps, and pressure to install screen-sharing tools are the tells. Treat any support contact that did not start from your bookmarked Help Center as hostile until proven otherwise through the official app. Deeper multi-exchange checks live in Fake Exchange Support Scams; romance and long-con investment patterns are covered in pig-butchering scams.

Hardening tips that reduce call-scam damage

Prefer a hardware security key or passkey over SMS 2FA for exchange login.
Turn on withdrawal allow-listing so new addresses need a delay or approval. Coinbase lists this as a protection step on its scam Help pages. ^[1]
Keep long-term ETH off the exchange in a hardware wallet. Compare options in Ledger vs Trezor.
Review stale token approvals if you use DeFi—drainers and approvals are a different but related loss path (token approvals guide).
Use a dedicated email for your exchange account when practical, as Coinbase’s social-engineering post recommends. ^[2]

Frequently asked questions

Is Coinbase calling me real?

Treat any unexpected call that claims to be Coinbase and asks you to move assets as a scam. Coinbase’s February 2025 security post states that Coinbase will never make an unsolicited phone call to a customer and will never ask you to transfer funds. If you already opened a support ticket, verify any callback only through the official Contact us flow—and still refuse seed phrases, passwords, 2FA codes, and remote access.

What is a typical Coinbase support calling script?

A common script starts with a fake fraud text, then a reassuring “security” callback, then instructions to create a “secure wallet,” then a seed-phrase handoff, then a drain of everything you moved. Coinbase published a minute-by-minute version of this pattern on its blog. The exact wording changes; the ask for seed phrases, remote access, or off-platform transfers does not.

Will Coinbase support ever ask for my seed phrase?

No. Coinbase Help says agents will never provide or ask for a seed phrase, never ask for your password or 2-step verification code, never ask you to install software, and never remotely access your device. If anyone does, disconnect and email security@coinbase.com.

How do I verify a Coinbase support caller?

Do not use a number from Google ads, social media, or the call itself. Open help.coinbase.com or the Contact us page from a bookmark or typed URL, start support there, and confirm any account alert inside the official app. Spoofed caller IDs exist, so a familiar-looking number is not proof.

What should I do if I already shared a code or installed remote access?

Hang up, uninstall remote-access software, lock your Coinbase account in-app, change your password, rotate 2FA, remove unknown devices and withdrawal addresses, and email security@coinbase.com. If a seed phrase was exposed, treat that wallet as compromised and move remaining assets with a newly created wallet you control—never one the caller provided. Also file a report at ic3.gov.

Are WhatsApp and Telegram “Coinbase support” chats real?

No legitimate Coinbase support starts in a random WhatsApp or Telegram DM. Those channels are the same impersonation pattern as fake phone support: urgency, remote-access apps, and requests for codes or seed phrases. See our broader fake exchange support guide for the multi-channel checklist.

Sources

Independent educational guide. GrowYourEthereum is not affiliated with Coinbase and was not paid for this page. Not financial, legal, or tax advice. Verify time-sensitive support procedures on Coinbase’s live Help Center before acting. Claims above were checked against the linked Coinbase Help and blog pages on October 15, 2026.

Coinbase Support Scam Calls: How Fake Scripts Work and How to Verify a Caller