Strange email from Binance

[ectbit]

I just got an email from Binance saying that "we couldn't reset the SMS Authentication on your account" Security Items Reset Unsuccessful

Is it a scam email or someone tried to hack my account.

What should i do?

[jackg]

Can you paste the "from" address here for the email?

I'd say it was probably a scam if it said "security items reset" as that doesn't sound like good grammar but it'll probably be easier to work out if you can get the sender's email.

[ectbit]

the address was: do-not-reply@directmail2.binance.com

I googled it and i found that other people had the same problem

[Trojane]

I will say that someone was trying to maybe ,log into your account or alter some security settings .
A computer based handle like this wont make such expensive mistakes ..
So be careful

[israt1@]

the address was: do-not-reply@directmail2.binance.com

I googled it and i found that other people had the same problem

You can use the link to get a better answer. You can also give a picture. If you are told to reset, it is very bad. Probably will go to hack.You turn on all the verifications. Google authenticator, phone, all the verifications. Then the account will be the most secure.

[BTCtester.com]

The senders address could be faked. But what do they want from you. Is there a link in the email asking you to visit a webpage?
Why not logging into your binance account to see if there is as well a message. But don't klick on links in emails, please.

[examplens]

it is very possible that someone is trying to take your Binance account.
I suggest you log in as soon as possible there and change your password. Of course, be sure that you will use a secured device for this login, clear browser... you should also check your computer or what you are already using, maybe you have some malware, keylogger inside.

[BitMaxz]

If you already set up your Binance account with SMS and 2FA including email. They can't easily access your account they're trying to reset it that is why you receive that email from Binance. That is why we need to make sure you have access to your phone number and 2FA and save those backups to offline storage or pc for future recovery or to avoid hijacked pc and collect sensitive info from your online pc.

Did you post or share your email with someone?

[ectbit]

I never shared my email with anyone. I am not using Binance from desktop very often. Only from my mobile and not every day. I don't know what happened.
Anyway i changed all my passwords.

I had the same notification when i logged in, so the email was not phishing

[TimeTeller]

I never shared my email with anyone. I am not using Binance from desktop very often. Only from my mobile and not every day. I don't know what happened.
Anyway i changed all my passwords.

I had the same notification when i logged in, so the email was not phishing

First, don't click the email sent to you. Better log in directly to your binance account.
Once you access your account, check the notifications sent to you.
Because if there is no notif regarding the sms authentication, then, the email is fake.
Maybe someone is trying to change the mobile number attached to your account.
And I don't think directmail2.binance.com comes from official binance account.

The senders address could be faked. But what do they want from you. Is there a link in the email asking you to visit a webpage?
Why not logging into your binance account to see if there is as well a message. But don't klick on links in emails, please.

[stomachgrowls]

I just got an email from Binance saying that "we couldn't reset the SMS Authentication on your account" Security Items Reset Unsuccessful

Is it a scam email or someone tried to hack my account.

What should i do?

Someone is trying to hack your account and as suggested above then its better to change your password right away and set up those 2FA and that email do looks fake.

So better not to click everything and just do on whats suggested mostly by members to avoid problems.

I had the same notification when i logged in, so the email was not phishing

Edit: If thats the case then its clear that someone is trying to reset SMS authentication.

[examplens]

I never shared my email with anyone. I am not using Binance from desktop very often. Only from my mobile and not every day. I don't know what happened.
Anyway i changed all my passwords.

I had the same notification when i logged in, so the email was not phishing

Check login history https://www.binance.com/en/my/security/account-activity
you may notice some suspicious sessions.

In the security settings, there are Anti-Phishing Code options, additional security will not hurt.

btw. it is easily possible to send an email even if you are not the owner of the default domain.

[Jercyhora2]

If you dont sure about something, you should consult to the real management. Try to visit the main website of binance and look for their social media page on facebook, twitter, Telegram etc. They will confirm it whether it's fraud or good.

[sheenshane]

It's impossible to hack your Binance account in the first place if you put a multi-layer of securities protection.  Upon login to your account on Binance, it needs a username and password, and then it requires an E-mail and Google verification code, that's impossible that there's a way to access your account, and now is your SMS verification code.

Is this email from your spam mails?  If yes, you should avoid clicking it because it may have a clickbait there that could be compromised your account, and possible they can access your account.  Presumably, that not only you who have been received this strange email that you have said.  Follow the suggestion above and quickly change your personal information in the Binance account and use an exclusive email account for Binance only, not your personal email account that you frequently use.

[ectbit]

It's not from spam emails.

I don't understand how someone had the opportunity to request an SMS Authentication reset in the first place. Just by simple knowing my email had that possibility?

[BitMaxz]

I don't understand how someone had the opportunity to request an SMS Authentication reset in the first place. Just by simple knowing my email had that possibility?

I haven't experienced yet resetting SMS authentication but I think there is someone who has access to your phone.

Email seems not needed when resetting SMS authentication according to their guide here

Is there someone who can access your phone? Your wife or children? Maybe your wife is trying to withdraw from your Binance account but she didn't know how to withdraw and accidentally press the "[Security verification unavailable]" or maybe your children?

But you don't need to be worry if someone is trying to reset the SMS authentication it will ask for KYC verification. So it won't be easy for hackers or someone to reset it.

[ectbit]

I don't understand how someone had the opportunity to request an SMS Authentication reset in the first place. Just by simple knowing my email had that possibility?

I haven't experienced yet resetting SMS authentication but I think there is someone who has access to your phone.

Email seems not needed when resetting SMS authentication according to their guide here

Is there someone who can access your phone? Your wife or children? Maybe your wife is trying to withdraw from your Binance account but she didn't know how to withdraw and accidentally press the "[Security verification unavailable]" or maybe your children?

But you don't need to be worry if someone is trying to reset the SMS authentication it will ask for KYC verification. So it won't be easy for hackers or someone to reset it.

Nope i live alone and at the time of the incident i had my phone with me, nobody had access to my mobile.

[sunsilk]

It's not from spam emails.

I don't understand how someone had the opportunity to request an SMS Authentication reset in the first place. Just by simple knowing my email had that possibility?

It could be on their server and someone has probably made a mistake of sending you that sms auth email. I've got the wrong email too from another exchange that I use and personally emailed them that it's not me that they're addressing.

And then, they replied that it's a fault on their end so I'm thinking that it's just a mistake on their end, you can email and ask them why have you received an email like that.

Or, your email is leaked from the other website that you've used and the culprit just randomly tried to access your binance account and ask for it to be reset.

[magneto]

Whatever the reason is, you're much better off just changing everything.

This would include passwords, 2FA details, etc.

I've had situations like this before on other sites, and I have never shared any details. Not uncommon as hackers will try to target you in any way, or perhaps your email/password was leaked in some sort of data breach. Whatever the reason is, secure your account now to avoid future issues.

[TryNinja]

It's real, but Binance claimed it was just an error with their messaging system.

We're aware of this issue and apologize for any concerns. An error in our messaging system caused some users to receive this false notification. (1/2)

Funds and accounts are safe. If you received this notification and would like to verify your account security, please feel free to contact Binance customer support. Our team is happy to help. (2/2)

Many people received this, so I assume you haven't been specifically targeted by any hacker due to leaks/malware/etc...