Coinbase withdrawal code, if not requested please call

A text message claims to be from Coinbase and shows a 6‑digit “withdrawal code,” then tells you to call a phone number if you didn’t request it. The goal is to make you call. On the line, scammers act like Coinbase support and try to get your login, your two‑step code, or access to your device so they can take your crypto. Real Coinbase alerts do not tell you to call a number from a text—always check inside the official Coinbase app or website instead.

What’s different in this version

These traits set this message apart from the usual pattern.

Uses a scary “withdrawal code” to make you think money is leaving right now
Provides a toll‑free callback number that routes you to scammers
Adds a fake reference number (CB18904) to sound official
Message shows a foreign-looking mobile number +212 6 82 73 79 13
Pushes you to call instead of checking your account in the Coinbase app or site

How this scam works

1
Step 1: You get an alarming text, email, or call saying a withdrawal/transfer is in progress.
2
Step 2: The message includes a link or phone number and urges you to act immediately to cancel.
3
Step 3: If you click, you land on a look‑alike website that steals your login and one‑time codes.
4
Step 4: If you call, a fake “fraud specialist” asks for your codes, pushes you to move money to a “safe” account, or requests remote access.
5
Step 5: With your access, scammers move your money, change account settings, and lock you out.

✓ Do this

Check your account by opening the official app or typing the company’s website yourself.
Call the number on the back of your card or from the official website, not the number in the alert.
Set up transaction alerts and two‑factor authentication (2FA) in the official app.
If you clicked or shared info, change your password, remove unrecognized devices, and contact your bank’s fraud team immediately.
Report the message to your bank/app and forward phishing emails to their abuse address if available.

✗ Avoid this

Do not click links or call numbers in unexpected withdrawal alerts.
Do not share one‑time codes, PINs, or recovery phrases with anyone—even a supposed bank employee.
Do not move money to a “holding,” “safe,” or “verification” account—this is a common scam tactic.
Do not install remote access software or grant screen‑sharing to someone who contacted you.

Verbatim excerpts from the scam

Exact lines from emails or messages—searchable text so you can compare wording.

1 Excerpt 1

"Your Coinbase withdrawal code is: 675431. Please do not share this code with anyone. If you have not requested this, please call: (888) 279-0278 REF: CB18904"