Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following随着加密货币交易日益普及，Coinbase 的安全团队注意到网络犯罪分子在试图窃取资产方面变得越来越有创意和坚持不懈。虽然这听起来可能有点吓人，但好消息是，只需几个简单的步骤，你就能显著提高你的数字安全。这不仅有助于保护你在 Coinbase 的资金，还可以应用于你数字生活的其他方面！
当有人能够登录你的账户进行欺诈活动时，这被称为“账户接管”，简称“ATO”。但这些欺诈者最初是如何进入你的账户的呢？一种常见的方法叫做“SIM 交换”。在 SIM 交换攻击中，欺诈者会冒充你联系你的无线运营商，并说服客服人员将你的手机服务转移到另一台设备上，通过更改与你的账户关联的 SIM 卡号码（因此得名该攻击）。一旦他们成功，他们就能接收到所有发送到你手机号码的电话和短信——包括通过短信发送给你的任何双因素认证码。从那时起，欺诈者通常会把这些短信 2FA 码与被盗的密码配对，试图登录你的电子邮件账户、社交媒体资料、Dropbox 等云存储账户，或 Coinbase 等金融账户。
At Coinbase, we do a lot of behind-the-scenes work to detect and try to stop SIM card exchange APT attacks targeting our customer accounts. We also believe that using SMS based two-factor authentication (2FA) is better than not using 2FA at all. But then again, we encourage everyone to follow these two simple steps and apply them to all accounts they care about-not just Coinbase accounts.
Use the Password Manager
Your password should be at least 16 characters long, extremely complex and unique to your account. It\'s hard to do it yourself, but password managers like 1Password or Dashlane can be used to create and remember your passwords.
Are you currently using a password that was exposed in a third-party data breach? You can check if you are using a risky password by visiting haveibeenpwned.com/Passwords
Use two-factor authentication (2FA)
In addition to strong passwords, use two-factor authentication (2FA) if available. And always use the strongest type of 2FA allowed by the platform, preferably Yubikey or a similar hardware security key.
If your service provider does not allow Yubikey, if possible, use an authentication application such as Google Authenticator or Duo Security instead of SMS based 2FA.
If only text-based 2FA is available, at least require that a one-time 2FA code be sent to your device every time you log in-so that even if someone steals your password, your account will not be able to be accessed.
If an organization does not offer these options, consider not using the service.
