This is a version of Unauthorized Withdrawal Alert Scam.
Coinbase 'Withdrawal Code' Text With Callback Number
A text claims a Coinbase withdrawal code was created on your account and tells you to call a phone number if you didn’t request it. The goal is to get you on the phone with scammers posing as support so they can collect your code and log in to your account.

What’s different in this version
These traits set this message apart from the usual pattern.
-
Uses a realistic 6-digit “withdrawal code” to make the text look official
-
Provides a U.S. callback number to appear legitimate
-
Includes a reference number to sound professional and urgent
-
Message arrived via iMessage from an international-looking mobile number
How this scam works
- 1
Step 1: You get an alarming text, email, or call saying a withdrawal/transfer is in progress.
- 2
Step 2: The message includes a link or phone number and urges you to act immediately to cancel.
- 3
Step 3: If you click, you land on a look‑alike website that steals your login and one‑time codes.
- 4
Step 4: If you call, a fake “fraud specialist” asks for your codes, pushes you to move money to a “safe” account, or requests remote access.
- 5
Step 5: With your access, scammers move your money, change account settings, and lock you out.
✓ Do this
- Check your account by opening the official app or typing the company’s website yourself.
- Call the number on the back of your card or from the official website, not the number in the alert.
- Set up transaction alerts and two‑factor authentication (2FA) in the official app.
- If you clicked or shared info, change your password, remove unrecognized devices, and contact your bank’s fraud team immediately.
- Report the message to your bank/app and forward phishing emails to their abuse address if available.
✗ Avoid this
- Do not click links or call numbers in unexpected withdrawal alerts.
- Do not share one‑time codes, PINs, or recovery phrases with anyone—even a supposed bank employee.
- Do not move money to a “holding,” “safe,” or “verification” account—this is a common scam tactic.
- Do not install remote access software or grant screen‑sharing to someone who contacted you.
Verbatim excerpts from the scam
Exact lines from emails or messages—searchable text so you can compare wording.
- 1 Excerpt 1"Coinbase Withdrawal Code is 482915. If you did not initiate this request contact us immediately at (202) 221-8244. Quoting reference CB490724"