Making a deposit is the most sensitive step in a series of operations; once money is sent to a fake Binance "receiving address," it cannot be recovered. The checklist below can be completed in under 3 seconds and should be reviewed every time, from opening your browser to confirming the deposit page. When you need direct access, use the official Binance site; for mobile, use the official Binance APP. For iOS installation paths, see the iOS installation guide.
1. The First Second: Check the Root Domain in the Address Bar
Do not look at what is written on the page, and do not look at whether the page logo is Binance yellow. Only look at the last two segments of the address bar:
- Real official site:
xxx.binance.com, for example,accounts.binance.comorwww.binance.com. - Common disguises of fake sites:
binance.xxxx.com("binance" is a subdomain, while the root domain is something else).binance-xx.com/xx-binance.com.blnance.com,bi-nance.com,binnance.com(spelling tricks to deceive the eye).binance.com.xxxx.cn(the rightmost part is the actual root domain).
Remember one rule: Domains are read from right to left. The two rightmost segments are the root domain.
2. The Second Second: Check the Padlock Icon and Certificate
Click the padlock icon on the left side of the address bar. The certificate should be issued to *.binance.com or binance.com. If the certificate is issued to a different domain, or if it is an unknown free certificate (such as some self-signed CAs), close the page immediately.
Note: Having a padlock does not mean it's the real official site. Phishing sites can also obtain free HTTPS certificates. A padlock only proves that "traffic to this domain is encrypted"; it does not prove that "this domain belongs to Binance."
3. The Third Second: Check the Source of the Deposit Address
After entering the deposit page, the on-chain address you are depositing to must be copied from within your Binance account's "Deposit" function. Absolutely do not:
- Copy an address someone else sent you.
- Copy an address from chat groups, Telegram, or direct messages from customer service.
- Scan a QR code from a screenshot (screenshots can easily be swapped).
Every time you deposit, you must re-enter the "Deposit" section on the App or web page → select the coin → select the network → copy it on the spot.
4. Complete Pre-Deposit Checklist
| Step | Item to Check | Passing Standard |
|---|---|---|
| 1 | Browser address bar | The root domain is binance.com |
| 2 | HTTPS Padlock | The certificate is issued to binance.com |
| 3 | Login method | Entered via a bookmark or by manually typing the domain |
| 4 | Deposit coin | Selected within the App/web "Deposit" function |
| 5 | On-chain network | Matches the sender's network (TRC20/BEP20/ERC20, etc.) |
| 6 | Address copying | Copied from within the Binance account; no externally provided addresses accepted |
| 7 | Secondary verification | After pasting it on the sender's end, visually verify the first 6 and last 6 characters against the Binance end |
5. A Few Details That Are Easy to Trip Over
1. Entering via search engines: When searching for "binance", the first result is often an ad. The actual destination domain of the ad link isn't guaranteed to be binance.com. Entering via a browser bookmark or manually typing binance.com is much safer.
2. Entering via short links: You don't know what domain a short link resolves to. Never click into a deposit page from a short link.
3. "Customer service" instructing you to change addresses: Real customer service will never ask you to "change to a new address." Any "customer service" that proactively contacts you saying "the previous address is frozen, please send to this new address" is 100% a scammer.
4. Swapped QR codes: If you scan a QR code from someone else's screen photo, the QR code displayed on their screen might not be the one you provided. Always rely on the character string displayed in the address bar after pasting it on the sending end.
6. The Final Insurance Policy Before a Deposit Arrives
Before sending a large deposit, perform a small test transaction first (e.g., 5–10 USDT). Only send the large amount after confirming the test transaction has arrived. Spending an extra 5 minutes on this step can save you 99% of the anxiety. Between the time the test funds arrive and the large amount is sent, do not switch browser tabs and do not click any chat links, to prevent the address from being swapped by a clipboard hijacking trojan.
Form a habit: Deposit = enter official site via bookmark → copy address in-app → small test transaction → large amount arrives. Once this flow becomes second nature, even the most realistic phishing sites won't be able to scam you.