The Anti-Phishing Code makes it possible to distinguish between genuine and fake Binance emails at a glance. Beginners can set it up in 5 minutes after registration. Simply go to the Binance Official Website → Security → Anti-Phishing Code. The Official Binance App also provides an entry point. For region-switching tips, refer to the Binance App Download guide. Here is your step-by-step setup guide.
In One Sentence
An Anti-Phishing Code = A "secret code" you set on Binance, which will appear in every official email Binance sends you. Phishers cannot forge this code.
How It Works
You create a "secret code" consisting of 4–20 characters:
- Example: FoxBN2026
- The Binance system adds this string to all emails sent to you.
- Genuine Email: Displays this string.
- Phishing Email: Does not have it or displays something else.
How to Set It Up
Step 1: Go to the Security Page
On the App or Official Website, tap your Profile Icon → Security → "Anti-Phishing Code."
Step 2: Enable
Click "Enable" or "Create Anti-Phishing Code."
Step 3: Enter Your Code
- 4–20 characters.
- A combination of letters and numbers.
- Recommended: 8 characters.
- Example: FoxBN2026
Step 4: Verification
Enter your 2FA/Email verification code to confirm the change.
Step 5: Done
Your Anti-Phishing Code is now active.
Every Future Email Will Include This Code
All emails sent by Binance, including:
- Login alerts
- Withdrawal confirmations
- Security warnings
- Official announcements
- Marketing emails
All of them will now display your custom code.
Example:
[FoxBN2026] Your withdrawal request has been submitted...
Since phishers cannot forge your custom code, you can identify fake emails instantly.
Checking a Real Email
Open your Gmail or Outlook and find an email from Binance:
- The code is usually displayed at the top or in a fixed position.
- Often looks like "Dear User [FoxBN2026]" or "Anti-phishing code: FoxBN2026."
Every single legitimate email will contain it.
Why Phishers Cannot Forge It
- The code is known only to you and the Binance system.
- It is never made public.
- There are no third-party APIs to look it up.
- It only appears in the email headers and body once sent to you.
Phishers have no way to obtain this string, meaning it will be missing from their fake emails.
Recommended Code Selection
| Choice | Example |
|---|---|
| 8 characters (letters + numbers) | FoxBN26 |
| Last name + Year | Smith2026 |
| Custom identifier | MyBN66 |
What to Avoid:
- Codes that are too short (e.g., 1234).
- Sequences that are too simple (e.g., abcde).
- Using your actual login password.
- Using your ID number (for privacy reasons).
How to Use It Daily
Whenever you receive a "Binance email":
- Check for your Anti-Phishing Code.
- Code present → Likely genuine.
- Code missing → 100% fake; do not click any links.
This is one of the most effective anti-phishing tools for beginners.
Anti-Phishing Code vs. 2FA
They do not conflict; you should enable both:
| Security Mechanism | Purpose |
|---|---|
| 2FA | Dual verification for login and sensitive actions. |
| Anti-Phishing Code | Identifying genuine emails. |
The Anti-Phishing Code is your primary defense at the "email level."
Phishing Scenario Examples
Scenario 1: Fake "Account Locked" Email
A phisher sends an email saying:
"Your Binance account has been locked. Click here to reset."
Verification:
- Genuine: Displays "FoxBN2026."
- Fake: No code present. Action: Delete it immediately.
Scenario 2: Fake "Withdrawal Confirmation"
"A withdrawal request for 1,000 USDT has been submitted. Please confirm."
Apply the same verification method as above.
Scenario 3: Fake "Lucky Draw"
"Congratulations! You won a 100 USDT reward."
Missing code = Fake.
How to Change Your Code
If you want to update your code:
- Security → Anti-Phishing Code → Change.
- Enter your new code.
- Verify.
Note: Older emails will still show the old code (already sent); only new emails will show the updated one.
The Cost of Not Enabling It
- You cannot quickly verify the legitimacy of emails.
- You are more likely to fall for phishing links.
- The risk of account theft increases significantly.
Setting this up takes 5 minutes, but the security payoff is massive.
Share with Family and Friends
Encourage other beginners in your circle to use this tool:
- It is easier for less tech-savvy users to remember a simple "secret code."
- If they don't see the code, they don't click.
- It is one of the most effective ways to teach anti-fraud awareness.
FAQ
Q: Can my Anti-Phishing Code be leaked?
A: It only appears in the body of emails sent to you. Theoretically, it would only be leaked if your email account itself was compromised.
Q: What if I forget my Anti-Phishing Code?
A: Log in to your account → Security → Anti-Phishing Code → View current setting.
Q: Does this protect SMS messages?
A: No. It only appears in emails. For SMS security, rely on 2FA and general vigilance.
Q: Do App push notifications have an Anti-Phishing Code?
A: Usually, no. Push notifications are sent directly from Binance's servers to the app and cannot be easily forged.
Further Reading
- How to Set Up 2FA: Your Second Line of Defense
- Withdrawal Whitelist: Preventing Theft
- I Received a Link from a Friend: How to Judge URL Authenticity