Discovering unauthorized activity on your exchange profile triggers immediate panic. If your Coinbase account was hacked, every second counts to prevent total financial loss. Cryptocurrencies move fast, and blockchain transactions cannot be reversed.
You need a clear triage plan right now. This guide walks you through locking your profile, cutting off attacker access, documenting the breach, and avoiding common post-hack recovery scams.
Immediate Emergency Actions
When unauthorized trades or withdrawals occur, speed dictates the outcome. Do not wait for customer service emails before taking local security measures.
- Lock Your Profile: Log into the Coinbase Help Center interface or mobile app. Navigate to security settings and select Lock Account. This action immediately terminates active sessions across all devices and freezes outgoing transfers.
- Secure Your Email: Most exchange takeovers begin with a compromised email inbox. Change your email password instantly and revoke access for any unrecognized third-party apps connected to your mail provider.
- Upgrade Two-Factor Authentication: If you used SMS-based verification, switch immediately to a hardware security key or an authenticator app like Google Authenticator. Phone numbers remain vulnerable to SIM swapping.
- Check Linked Financials: Review associated bank accounts, debit cards, and PayPal profiles linked to the exchange. Alert your traditional financial institutions to place temporary freezes on ACH transfers if necessary.
How the Compromise Happened
Understanding the attack vector prevents future breaches and helps determine what other personal data is exposed. Attackers rarely crack platform cryptography directly; instead, they exploit user endpoints.
- Phishing URLs: Fake login pages mimicking official branding trick users into typing credentials and two-factor codes.
- SIM Jacking: Criminals trick mobile carriers into porting your phone number to their device, intercepting SMS verification codes.
- Session Hijacking: Malware or malicious browser extensions steal active browser cookies, allowing attackers to bypass authentication entirely.
- Credential Stuffing: Reusing passwords across multiple websites leaves your exchange profile exposed if an unrelated forum suffers a data leak.
Documenting the Incident for Support and Authorities
Once the bleeding stops, gather evidence. Coinbase support handles thousands of tickets daily, and clear documentation accelerates your case review.
- Export Transaction Logs: Take screenshots or download CSV files showing unauthorized trades, conversion history, and wallet withdrawals.
- Save Communications: Keep records of suspicious login alerts, password reset notifications, and phishing emails.
- File Official Reports: Submit a formal complaint through the FBI Internet Crime Complaint Center (IC3) and notify local law enforcement to obtain an official incident report number.
Beware of Recovery Scams
Desperation makes victims prime targets for secondary scams. Cybercriminals monitor public forums, Reddit, and Twitter, waiting for hacked users to cry for help.
- Fake Support Agents: Scammers post rogue phone numbers online or message victims directly, claiming they can reverse blockchain transactions. Official support channels never handle account recovery via direct messages on social media.
- Remote Access Traps: Never download remote desktop software (such as AnyDesk or TeamViewer) at the request of someone claiming to fix your account.
- Upfront Fee Fraud: Recovery services demanding payment in advance via cryptocurrency or gift cards are always fraudulent.
Frequently Asked Questions
Can I get my stolen cryptocurrency back from Coinbase?
Cryptocurrency transactions are irreversible. Unless the breach stemmed directly from a verified platform system failure rather than compromised user credentials, exchanges rarely issue reimbursements.
How do I unlock my profile after locking it?
To regain access, sign in with your email and password, complete verification steps, and follow the on-screen prompts. Note that cryptocurrency sends remain paused for 24 hours after an account unlock for security purposes.
What is the official phone number for Coinbase support?
The primary official customer service line is 1-888-908-7930. Be aware that attackers routinely use caller ID spoofing to make fraudulent calls appear genuine.
Should I hire a lawyer after a crypto hack?
While some legal firms specialize in digital asset recovery or arbitration claims, legal fees can outweigh potential recoveries if the perpetrator's identity remains anonymous. Consult an attorney only after weighing costs against the total stolen balance.
