Binance Warns of AI Deepfake Impersonation Scams on WhatsApp and Telegram

Deepfake Impersonation on WhatsApp and Telegram

Anyone holding funds on Binance now has one more reason to treat unexpected messages as hostile: the crypto exchange warned users on November 15 that AI-generated deepfakes of its executives and employees are being used in impersonation scams designed to steal crypto. The warning went out in a company post on X dated the same day. “AI deepfakes are making impersonation scams harder to spot,” the post stated, adding that advances in artificial intelligence have made it harder to tell fake messages from real ones. The core of the scam is straightforward: fraudsters produce realistic videos, some highly convincing, featuring people who appear to be Binance executives or staff, then use them to trick targets, in some cases through fraudulent video calls. A victim who joins such a call may believe they are speaking with real company personnel. The exchange says scammers typically make first contact through messaging apps such as WhatsApp or Telegram, presenting themselves with the names, photos and job titles of actual employees to look credible. Once a conversation is running, the impersonator may push the target to send crypto, take part in what is framed as an exclusive investment opportunity, or carry out other financial actions. Against that, the company set out a firm baseline: no one from Binance will ever reach out asking for money or offering unsolicited investment advice, whether a user's funds sit in a spot trading balance or anywhere else. Binance also asked users to be cautious about any unexpected message, even one that appears to come from a company contact they know, and to double-check anything suspicious through its official support channels before acting. A realistic appearance no longer confirms identity, the exchange noted, because AI can now mimic voices and facial expressions with ease.

@binance · X post

“AI deepfakes are making impersonation scams harder to spot,”.

View on X

Binance Verify and Official-Channel Checks

The practical side of the warning centers on verification. Binance points users to its Binance Verify service, which confirms whether a web address, sender email or social media account is official. The company lists several requests that should end a conversation immediately: a screenshot of an account screen, a demand to scan a login QR code, an invitation to switch on remote control, or a request for a password. So does any instruction to send crypto to a different wallet address on the pretext of a “security check” or a “processing fee”; Binance states plainly that no official employee makes such demands. The recommended response is to stop and open the Binance app or website directly, rather than follow any path the contact provided. The company's education arm extends the pattern beyond staff: celebrities and family members can be impersonated too, through fake customer support accounts, fabricated investment advertisement videos and urgent messenger pleas for transfers. For readers weighing the wider set of red flags, COINOTAG's guide to crypto scams to avoid in 2026 lists the recurring patterns in detail. Brand abuse of this kind is not new. An earlier campaign used counterfeit official notices on Telegram to push users toward moving assets into a so-called “Binance insurance vault,” borrowing the company's name and the formatting of a security announcement. The guidance also covers what to do after exposure. Anyone who opened a suspicious file or handed over information should first cut off communication with the sender and then refuse all further instructions, links and QR codes. Trade and withdrawal records should be reviewed inside the official app or website, never through links in messages, with any unfamiliar transaction or login treated as a possible sign of account compromise. If a compromise looks likely, Binance directs users to change their password, review two-factor authentication settings, check for unknown devices and active sessions, and then contact official support to report how they were contacted and what information was shared.

Guidance, Not a Reported Breach

The load-bearing document here is the exchange's own X post, and it says less than the headline suggests: it names the technique, states the baseline that staff never ask for money, and gives no incident counts, loss figures or named cases. Our reading is that the notice is procedural rather than FUD about the platform itself, since the scams it describes run entirely outside the exchange's systems, abusing its brand from WhatsApp, Telegram and fake video calls. The reach is accordingly wide but bounded: it touches anyone who receives unsolicited contact on a messaging app, exchange customer or not, and it stops where the sources stop, at guidance, with no reported breach to quantify.