Reviewed guide | 2026-10-10
Impersonation Calls and Texts Targeting Australian Crypto Accounts
Scammers in Australia increasingly pose as exchange staff, banks or government agencies to reach crypto accounts. Learn how these approaches work and how to harden your exchange account against them.
Multiple exchanges | Australia | AUD | fees, access and account safety
Many Australians have received a call or text claiming that their crypto account has been compromised, that a suspicious withdrawal is pending, or that a government agency needs them to move funds. These approaches are designed to create urgency and pressure people into sharing codes, installing remote-access software or transferring funds to a so-called safe wallet. This guide explains the common scripts and the settings on Binance, OKX, Bybit and Bitget that make such attacks far less likely to succeed.
Recognising the common scripts
The most frequent approaches include a fake fraud alert from the exchange, a caller posing as a bank investigator, and messages claiming a government body requires verification. They often know some personal details, which makes them seem genuine. The common thread is a request to act immediately: read out a code, download an app, or move crypto somewhere for protection. Genuine exchanges and agencies do not ask you to do these things.
Verifying contact independently
If you receive an unexpected call, hang up and contact the organisation through a channel you find yourself, such as the support section inside the official app. Do not use phone numbers or links provided in the message. Exchanges typically handle support through their app or website rather than unsolicited phone calls, and their help centres describe how they contact customers.
Settings that blunt these attacks
Use a passkey or authenticator app instead of SMS codes, so that a stolen phone number cannot be used to reset access. Set an anti-phishing code so genuine emails carry your chosen phrase. Enable the withdrawal address allowlist and any waiting period for new addresses, which gives you time to notice and react if someone gains access. Keep login and withdrawal alerts switched on.
What to do if you engaged with a scammer
If you shared a code or installed software, act quickly. Uninstall any remote-access tool, change your exchange and email passwords from a clean device, close all active sessions and review API keys and saved addresses. Contact the exchange through its official support channel. Australians can also report scams to the relevant national reporting services, which helps others recognise the same approach.
Risk boundary: Australia Crypto Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Hang up on unexpected callers and contact the exchange through its official app.
- Replace SMS codes with a passkey or authenticator so a SIM swap cannot reset access.
- Enable the withdrawal allowlist and keep a waiting period for new addresses.
- Uninstall any remote-access software immediately if a caller asked you to add it.
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat.