Coinbase refunds scams only in narrow cases, and the burden is on you to prove the transaction was unauthorized
Coinbase will refund money sent to a scammer only if you can show the transaction itself was fraudulent — meaning someone else accessed your account without permission, or Coinbase made an error. If you voluntarily sent crypto to a scammer because you believed their story, Coinbase treats that as a completed transaction you authorized, and they will not reverse it. This is the core rule: authorization, not outcome, determines whether Coinbase will refund you.
The reason is structural. Cryptocurrency transactions are irreversible by design. Once you send Bitcoin, Ethereum, or any other coin to a wallet address, it is gone from Coinbase's control. Coinbase cannot recall it, freeze it, or force the recipient to return it. They can only refund you if they themselves caused the problem — by allowing unauthorized access to your account, by processing a transaction you did not initiate, or by a system error on their end.
If a scammer tricked you into sending money, you have a civil claim against the scammer, not against Coinbase. That claim is nearly impossible to pursue because scammers hide their identity and move money quickly. Coinbase's job is to secure your account and process your instructions correctly, not to judge whether your instructions were wise.
Key Takeaways
- Coinbase will refund you only if someone else accessed your account without permission or if Coinbase made a processing error — not if you sent money to a scammer voluntarily.
- You must report unauthorized transactions to Coinbase within 180 days, and you will need to provide proof that you did not authorize the transaction.
- If your account was compromised, change your password and enable two-factor authentication immediately, then contact Coinbase support with details of the unauthorized transaction.
- Scammed crypto cannot be recovered through Coinbase; your only option is to report the wallet address to law enforcement and hope they can trace it.
- Coinbase's refund window and process depend on whether the transaction was sent to an external wallet or stayed within Coinbase's system.
When Coinbase will actually refund you
Coinbase refunds fall into two categories: account compromise and Coinbase error. Account compromise means someone logged into your account without your permission and moved your money. This includes cases where a scammer obtained your password, bypassed your two-factor authentication, or exploited a security flaw in Coinbase's system that allowed unauthorized access.
If this happened, report it to Coinbase immediately. Go to your account settings, change your password, and contact Coinbase support through the Help Center. You will need to describe what happened, when you first noticed it, and what transactions were unauthorized. Coinbase will investigate whether the login came from an unusual location, device, or IP address. If they find evidence you did not authorize it, they may refund the transaction — but only if the money is still in your account or in another Coinbase user's account. If the scammer withdrew the crypto to an external wallet, Coinbase cannot recover it.
The second category is Coinbase error: you initiated a transaction correctly, but Coinbase processed it wrong. This might mean sending your crypto to the wrong address, charging you twice, or crediting a deposit to the wrong account. These errors are rare, but when they happen, Coinbase is responsible. Report the error with screenshots and transaction IDs, and Coinbase will investigate and refund you if they confirm the mistake.
Why sending money to a scammer is not Coinbase's problem
A scammer contacts you, builds trust over days or weeks, and convinces you to send them crypto. You log into Coinbase, enter the wallet address they gave you, and approve the transaction. From Coinbase's perspective, you authorized it. You knew the recipient's address, you entered it yourself, and you confirmed the amount. Coinbase has no way to know the recipient is a scammer or that you were deceived.
This is different from a credit card or bank transfer. Banks can reverse transactions within a window, and credit card companies have chargeback processes because those systems were built with reversibility in mind. Crypto was not. The blockchain is permanent by design. Once a transaction is confirmed, it cannot be undone by any company, including Coinbase. Coinbase could theoretically freeze the receiving wallet if it belonged to another Coinbase user, but most scammers use external wallets or exchanges outside Coinbase's reach.
Coinbase's terms of service state that you are responsible for the accuracy of the recipient address and that they will not refund transactions to addresses you provided. This protects them from liability for user error and scams, but it also means you bear the risk if you send money to the wrong place.
How to report an unauthorized transaction to Coinbase
If you believe someone accessed your account without permission, do not wait. Log in immediately, change your password, and enable or strengthen two-factor authentication. Then go to Coinbase Help Center and select "Contact Us." Choose the category "Account and Login" or "Suspicious Activity," and describe what happened: when you first noticed the unauthorized transaction, what was moved, and where it went.
Coinbase will ask for specific details: the transaction ID (found in your transaction history), the date and time, the wallet address the crypto was sent to, and any evidence that you did not authorize it. If you have a record of when you last logged in, or if the transaction came from a device or location you do not recognize, include that. Coinbase uses this information to determine whether the transaction was truly unauthorized.
The investigation typically takes 10 to 30 days. Coinbase will review login logs, device information, and IP addresses to see if the access pattern matches your normal behavior. If they find evidence of unauthorized access, they will refund the transaction — but again, only if the money is still recoverable within their system. If the scammer moved it to an external wallet and then off the blockchain, there is nothing Coinbase can do.
What happens if the money left Coinbase
Most scams end with the crypto leaving Coinbase entirely. The scammer provides a wallet address on an external exchange, a personal wallet, or a mixing service designed to hide the trail. Once the transaction is confirmed on the blockchain, it is permanent. Coinbase cannot reverse it, freeze it, or force the recipient to return it.
Your only recourse is to report the wallet address to law enforcement. The FBI's Internet Crime Complaint Center (IC3) accepts reports of cryptocurrency fraud, and some local police departments have cybercrime units. Provide them with the wallet address, the amount, the date, and details about the scammer. Law enforcement can subpoena exchanges to identify the person who owns the wallet, but this is slow and works only if the scammer used a regulated exchange and did not move the money through mixers or privacy coins.
In practice, most scammed crypto is never recovered. Scammers are often overseas, use anonymous wallets, and move money through multiple addresses to obscure the trail. Even if law enforcement identifies them, extradition and asset recovery are difficult. You should assume the money is gone.
Protecting your Coinbase account from compromise
The best defense is preventing unauthorized access in the first place. Use a strong, unique password for Coinbase — not one you use anywhere else. Enable two-factor authentication (2FA) through an authenticator app like Google Authenticator or Authy, not SMS if you can avoid it. SMS-based 2FA can be bypassed through SIM swapping, where a scammer tricks your phone carrier into transferring your number to their device.
Do not share your password, recovery codes, or seed phrase with anyone, including Coinbase employees. Coinbase will never ask for these. Do not click links in emails claiming to be from Coinbase; instead, go directly to coinbase.com and log in yourself. Scammers send phishing emails that look identical to Coinbase's real messages, and clicking the link takes you to a fake login page that steals your credentials.
If you receive a message from someone claiming to be a Coinbase support agent offering to help you recover funds or verify your account, it is a scam. Coinbase support operates only through the Help Center on their website, not through email, text, or social media. Report the message to Coinbase and delete it.
The difference between Coinbase and traditional banks
Banks and credit card companies have fraud protections built into their systems because transactions can be reversed. If someone uses your debit card fraudulently, your bank can reverse the charge and return your money. Credit card companies offer chargeback protection, allowing you to dispute unauthorized charges. These protections exist because the financial system was designed with reversibility in mind.
Cryptocurrency does not work this way. Transactions are irreversible by design. This is a feature, not a bug — it is what makes crypto decentralized and censorship-resistant. But it also means there is no chargeback, no reversal, and no safety net if you send money to the wrong place or to a scammer. Coinbase operates within this system. They can secure your account and process your transactions correctly, but they cannot undo a transaction once it is confirmed on the blockchain.
This is why crypto scams are so effective and so costly. Victims expect the same protections they have with banks, but those protections do not exist. Once you send crypto, it is gone. This is not Coinbase's fault — it is how the technology works.
Frequently Asked Questions
Can Coinbase freeze a scammer's wallet?
Only if the scammer's wallet is also on Coinbase. If they sent the crypto to an external wallet or another exchange, Coinbase has no control over it. Even if the wallet is on Coinbase, Coinbase will not freeze it without a court order or law enforcement request. They cannot unilaterally reverse transactions or seize accounts based on a user's claim of fraud.
What if I can prove I was scammed — will Coinbase refund me then?
No. Proof that you were scammed does not change the fact that you authorized the transaction. Coinbase will refund you only if someone else accessed your account without permission or if Coinbase made an error. If you voluntarily sent the money, even under false pretenses, Coinbase considers it authorized and will not reverse it.
How long do I have to report an unauthorized transaction?
Coinbase's terms state you should report unauthorized transactions as soon as you notice them. While there is no hard deadline, waiting longer makes investigation harder and recovery less likely. If the money has already left Coinbase's system, time makes no difference — it is gone either way. Report it immediately.
Can I dispute the transaction with my bank or credit card company?
If you bought the crypto with a credit card or bank transfer, you can dispute that purchase with your bank or card issuer. They may refund the money you spent to buy the crypto, but only if you can show the purchase itself was unauthorized. If you authorized the purchase but were then scammed into sending the crypto to a scammer, the bank will not help — the problem is not with the purchase, it is with what you did with the crypto afterward.
What should I do if I think my Coinbase account was hacked?
Change your password immediately from a different device, enable two-factor authentication if you have not already, and review your login history and recent transactions. Then contact Coinbase support with details of any unauthorized transactions. Provide transaction IDs, dates, and any evidence that the access was not from you. Coinbase will investigate, but recovery depends on whether the money is still in their system.