This happened to my friend Ali, who had an issue logging into his Binance account. Instead of visiting the official support page, he googled “Binance live support” and clicked on the first link that popped up. It led to a site that looked exactly like Binance’s support page, complete with a live chat popup.

The agent on chat was polite, knowledgeable, and asked for his user ID and email. Then, they said they needed to “verify ownership” and asked for a code he’d just received via email. What Ali didn’t realize was that they had just triggered a password reset request using his email, and the code he gave them let them in.

Within minutes, his account was hijacked. They changed his password, enabled a new withdrawal address, and emptied his account—around $2,500 in crypto gone in under 10 minutes.

He was devastated and reported it to Binance, but the funds had already been sent through a mixer and were untraceable.

Scammers are running real-time phishing traps through fake support sites. Always access support from within the platform or via the official domain. Never share codes or login details with anyone, even if they seem professional.