A quick phishing check before you log in to an exchange, for readers in the Philippines

A text arrives saying your exchange account has been suspended and you must verify within an hour. The link looks plausible, the logo is right and the tone is urgent. This is how many accounts are lost: not through clever hacking, but because someone typed credentials into a copy of the login page. The defence is a short routine you apply every time, however convincing the message looks. This guide sets out that routine for users of Binance, OKX, Bybit and Bitget in the Philippines, along with the settings that make mistakes less costly.

Treat urgency as the warning sign

Genuine platforms do not usually demand that you act within minutes under threat of closure. Scammers rely on urgency because it stops people from checking. When a message pressures you, slow down on purpose. Close it, open the official app yourself, and look at the notices inside your account. If the problem is real, it will be visible there.

Never log in from a link in a message

Use only the app you installed from the official store or a bookmark you created earlier. Do not follow links in texts, emails, chats or social posts, even if they come from a contact. Look closely at web addresses: fake sites often use a small misspelling or an extra word. A password manager helps, because it will not offer to fill credentials on a domain it does not recognise.

Check emails and calls with the anti-phishing code

If the platform offers an anti-phishing code, set it. Genuine emails then show your phrase, and its absence is a red flag. For phone calls, remember that real support will not ask for passwords, full verification codes or a transfer to a safe account. If someone calls claiming to be from the exchange, hang up and use the in-app support channel.

Limit the damage and report

Enable a withdrawal whitelist and a strong second step so that a stolen password alone is not enough. If you did enter credentials on a suspicious page, change the password immediately from a trusted device, review sessions and contact official support. Report the message through the platform's official channel. A short note about the date and details helps support act quickly.

Risk boundary: Philippines Crypto Guide

Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.

Scenario checkpoint

Treat any urgent account warning as suspicious until verified
Open the official app yourself instead of following message links
Set the anti-phishing code and check it in genuine emails
Never share passwords or full codes with callers
Use the withdrawal whitelist and change credentials fast after any mistake