Scam reporting and account protection
A scam report doesn’t automatically qualify for a Coinbase refund. The options depend on who approved the transfer, the product involved and any applicable protection or incident-specific program. Here’s how to identify your situation and prepare a clear report.

If you approved a crypto transfer after being deceived, Coinbase One’s account-protection overview excludes that type of loss. If someone accessed your account and made an unauthorized crypto withdrawal, eligible members may have a claim under the program’s terms. Coinbase has also announced reimbursement for a specific historical incident, explained below.
Coinbase says initiated cryptocurrency transfers cannot be cancelled or altered. A reimbursement, if approved under a separate program, can compensate an eligible loss without reversing the original blockchain transaction. Reporting promptly is still worthwhile, even when eligibility is uncertain.
Crypto Dispensers provides crypto services and publishes this guide for education. Coinbase and your payment provider assess their own claims. We can’t recover Coinbase funds, approve reimbursement or determine your legal rights. This guide focuses on Coinbase’s published policies and U.S. reporting resources; rules vary by country and product.
| What happened | What to check first |
|---|---|
| You approved a crypto send after a fake support call or investment pitch | Report the deception to Coinbase. The published Coinbase One program excludes deceived-user approvals. Check whether a specific incident program applies. |
| Someone accessed your Coinbase account and sent crypto without your permission | Secure the account and report unauthorized activity. Check enrollment, authentication and other account-protection terms that applied when the send was requested. |
| Your bank or card statement shows an unrecognized payment | Contact that provider promptly and describe the payment accurately. Its investigation and dispute rules depend on the payment type and jurisdiction. |
| A self-custody Coinbase Wallet transaction drained assets | Identify the wallet and transaction. The linked Coinbase One warranty excludes Coinbase Wallet and other listed wallet products. |
| You received a notice about Coinbase’s May 2025 incident | Use the dedicated incident instructions and ask Coinbase whether the loss meets that program’s criteria. |
On a small screen, swipe the table to see every column.
A text may claim a withdrawal is pending or someone added a new device. It might tell you to call a number, cancel a transfer through a link or move crypto to a “safe wallet.” Open Coinbase independently and check your account activity. Leave the links and phone numbers in the message unused.
Coinbase asks people reporting a phishing text to send its security team a screenshot. Use the address in its official reporting instructions. For example, if a text tells you to call to stop a withdrawal, check your activity in the app and use the support channel you opened yourself. Keep passwords, verification codes and recovery phrases private.
Coinbase phishing reporting instructions · Coinbase account lock instructions
If you suspect unauthorized access, follow Coinbase’s account-lock instructions. Security Lock restricts trading, crypto transfers and account-setting changes while you work through recovery. If you can’t sign in, use the official support options linked from that page.
Open Coinbase’s app or navigate independently to its official Help Center. The FBI’s exchange-impersonation warning recommends verifying claims through official channels and avoiding links or phone numbers supplied by an unsolicited caller.
For other access problems, our Coinbase troubleshooting guide separates sign-in, restrictions and transfer issues. A normal loading error alone doesn’t establish that an account was hacked.
Coinbase’s current overview describes possible reimbursement for eligible unauthorized account takeovers. Deceived-user approvals and mistaken transfers are excluded. Availability depends on membership and region, and the program is a limited warranty.
The full disclosures and regional warranty require enrollment when the send was requested, qualifying key authentication, prior identity verification and an account in good standing older than 30 days.
The terms set 45-day deadlines for the claim and required local police and IC3 reports. Check the precise dates immediately. Member home shows your incident cap.
Coverage is limited to qualifying Coinbase-hosted sends signed exclusively by Coinbase. Wallet and Prime products, API-key requests and other listed losses are excluded. Knowingly sharing credentials can void coverage. Coinbase assesses each claim.
Coinbase’s May 15, 2025 incident announcement says it would voluntarily reimburse retail customers who mistakenly sent funds to scammers as a direct result of that data-theft incident before the announcement, following a review of the facts.
Its incident loss-reporting page directs customers who received an impact notice and believe they lost funds before May 15, 2025, to report through secure support. It asks for details about the contact, impersonation, communications and transaction timing. If you believe this describes your loss, ask Coinbase to review it under those specific instructions.
That announcement addresses a defined incident and historical losses. It doesn’t establish automatic reimbursement for every later scam.
A bank debit and a later crypto withdrawal can involve separate events. For example, you may have approved a bank-funded crypto purchase and then sent the crypto after a deceptive call. Tell each provider what actually happened at each step.
The U.S. Consumer Financial Protection Bureau’s unauthorized-transaction guidance explains that reporting deadlines and protections can apply to unauthorized electronic fund transfers. Contact your bank or card issuer promptly using its verified app, statement or website. Ask which dispute process applies, what evidence it needs and whether any requested follow-up must be in writing.
A bank investigation or temporary credit doesn’t establish that Coinbase will reimburse a crypto send. Don’t describe a payment you knowingly approved as unrecognized. If authorization is disputed or unclear, explain the sequence and let the provider assess the facts. For a substantial disputed loss, consider qualified advice in your jurisdiction.
The FBI’s cryptocurrency victim guidance emphasizes transaction addresses, asset type, amount, dates and transaction hashes. Keep a private copy of the records below. Send sensitive material only through verified reporting channels.
Product and payment: [Coinbase account, self-custody wallet, bank debit or card charge]
Timeline: [Date, time and time zone of the contact and each transaction]
Transaction record: [Asset, amount, network, receiving address and transaction hash]
Authorization: [What I approved, what I did not approve, and what I cannot confirm]
Contact and evidence: [Website, caller or message identifiers, screenshots and original communications]
Existing reports: [Coinbase case number, payment-provider reference and any police or IC3 report]
Review requested: [Which transaction and published program I want the provider to assess]
This worksheet is our reporting aid. It isn’t an official claim form or a finding about eligibility. Keep passwords, active verification codes, private keys and recovery phrases out of ordinary correspondence.
In the U.S., report cryptocurrency crime through IC3 and follow local law-enforcement instructions. A report is useful even if you don’t have every transaction detail. Preserve copies, and don’t assume filing alone guarantees recovery.
The FBI warns that fraudulent recovery services target people who have already lost crypto. They may demand an upfront payment, claim special law-enforcement access or keep requesting additional fees.
Be cautious of unsolicited messages promising a guaranteed refund. Don’t send money or financial credentials to an unknown person claiming they can recover your funds. Verify any claimed government affiliation independently. Law enforcement does not charge victims a fee to investigate a crime, according to the FBI.
If Coinbase’s support response doesn’t resolve your concern, its formal complaint process asks for a support case number, the facts, supporting records and the resolution you’re seeking. Use the official process and keep the written response. A complaint is a request for review and doesn’t guarantee a payment.
The published Coinbase One program excludes transfers you authorized after being deceived. Report the scam and check whether a specific incident program or another applicable process covers your circumstances. A refund is not automatic.
Secure the account and report unauthorized activity promptly. Eligible Coinbase One members may have a claim, subject to enrollment, authentication, product, timing and other warranty requirements.
The disclosures require enrollment when Coinbase received the relevant outbound transfer request. A later subscription does not establish that earlier eligibility.
The linked account-protection warranty excludes Coinbase Wallet and other named wallet products. Identify exactly which product held and sent the assets before assessing coverage.
There is no single guaranteed refund timeline for all scam reports. A claim may require investigation and more records, and it may be denied. Ask the provider for the case status and applicable process.
Coinbase says initiated cryptocurrency transactions cannot be cancelled or altered. Report the activity promptly, secure any affected account and preserve the transaction details.
By the Crypto Dispensers team. Reviewed November 2, 2026.
We checked Coinbase’s account-protection terms, incident reporting and support guidance, plus U.S. consumer and FBI resources. The payment decision table and reporting worksheet are our original editorial synthesis. We used AI assistance for the guide and illustration. We did not submit a claim, test a customer account or verify an individual’s eligibility.
Policies and deadlines can change. Confirm the current terms for your product and region. See our editorial and research standards.
Guide · Wallets and recovery
This guide goes with stage 4. Open the course for its lesson, example and check.
Your Crypto Dispensers account
Create an account to see the services available to you. You can buy Bitcoin by wire, debit, credit or ACH, sell supported crypto for a USD bank payout, or exchange supported assets. Contact our team if you need help choosing a service.
Creating an account does not authorize a payment. Availability depends on your location, account and required checks.
Helping people access Bitcoin since 2017.
Privacy controls
Necessary cookies are always on so the site works. You can also allow analytics to help us improve the experience, and advertising cookies to measure campaigns and show more relevant ads. You can change this anytime.
Read our privacy policy