Two checks: the domain first, then the anti-phishing code
The display name on an email can be faked freely, but neither the sending address nor the anti-phishing code you set can be. Make these two a habit and you can judge a suspicious message within ten seconds.
What to prepare before you start
These five things cover almost every delay people run into: Enable the anti-phishing code in security settings and remember what you set.
Learn to reveal the full sender address by tapping or clicking the display name. Add the official sending address to your contacts for future comparison.
Resolve not to log in by clicking links inside emails.
Four checks on any email you receive
In order, and anything odd shows up immediately: Expand the full sender address and compare the domain against the official one.
Confirm the anti-phishing code you set appears in the body; without it, it is forged. Do not click links in the mail; enter from your bookmark and check the in-site messages.
For anything urging "act now" or "verify immediately", confirm in-platform that the matter is real. Once confirmed as forged, report it to official support and delete it.
Fees, limits and processing times
Numbers change from time to time, always confirm on the official fee page before you commit size: Turn on Google Authenticator or a hardware key, then add withdrawal address whitelisting and an anti-phishing code to every email you receive.
Review the device list periodically, and use the global lock if you ever suspect a session is still active somewhere else. Official entry: type binance.com yourself or use your own bookmark, then check the padlock and the exact spelling before typing any password.
App install: search the publisher name "Binance" on App Store / Google Play, or pull the APK from the official download page rather than a third-party store. In-app chat is usually the fastest channel for account issues, and the help centre holds step-by-step articles for most problems.
For anything touching funds, open a ticket and keep the case number; never share passwords, codes or seed phrases with anyone claiming to be support.
The Binance-specific part
The Binance anti-phishing code is set in the security centre, after which every official email carries it in the body. If a message lacks the identifier, treat it as forged however convincing it looks.
Frequently asked questions
If the display name is official, is it genuine
No. Display names are freely editable; only the full sending address is reliable.
What is an anti-phishing code
An identifier you define in security settings that official mail includes automatically, proving authenticity. The link in the mail looks like the official site.
Can I click it
No. Even if it looks right, enter through your own bookmark.
Risk notes and next steps
Keep reading:代币化股票的对手方风险;杠杆仓位与强制平仓;美股行情总览. Official mail never asks for your password or seed phrase.
Setting the anti-phishing code takes one minute and then works permanently. Cross-check any asset-related email against the in-site message centre.
