Recently, telecommunications financial fraud (voice phishing) incidents using digital assets have been occurring frequently.
Accordingly, we are providing information on damage cases and response methods. We ask members to be aware of the information below and take special care to avoid damage.
Damage Type List
*The list of notices below will also be updated as additional types of damage are identified.
Information on security precautions for using Upbit to prevent damage from QR code phishing
- To log in to Upbit, never scan a QR code unless it is one you requested and created yourself (clicking the [QR Code Login] button, etc.).
- If you receive a 2-channel authentication request that you did not directly request, never approve it.
- If you perform QR code authentication unintentionally, take measures such as logging out of all devices, locking yourself, or restricting withdrawal addresses.
Information on security precautions for using Upbit due to the increase in phishing emails
- Please do not respond to the prompt to provide 12 recovery phrases (seed phrases) as the Upbit service will be terminated on a specific date.
- Upbit will never request sensitive information such as password, OTP, private key, or recovery phrase via email under any circumstances.
- If you receive a suspicious email, please report it to Upbit Customer Center immediately.
Information on types of digital asset fraud approached in the name of ‘compensation for investment losses’ and ‘guaranteed high returns’
- Even if you present a document in the name of a government agency or a business card claiming to be an employee of a financial institution, check the facts.
- If you are encouraged to join an exchange by offering to pay compensation for losses in advance in digital assets, do not make any transactions.
- Virtual asset exchanges that have not been reported to the Korea Financial Intelligence Unit are highly likely to be fake exchanges for fraud purposes, so check whether they have been reported.
Information on preventing damage due to increased voice phishing and hacking attempts
- Please be cautious of contacts that impersonate an investigative agency and request information under the pretense of being involved in a specific crime.
- Never click or install contacts, links, or apps from unknown sources.
- Please be especially careful about investment offers with overly favorable terms or approaches through messengers.
Information on security precautions for using Upbit due to the increase in phishing sites
- Be sure to install the mobile app from the official app store (Google Play Store or Apple App Store).
- When accessing the website, be sure to check that the Upbit official website address is correct.
- If any security anomalies are discovered, we recommend checking personal wallet security and moving assets.
Notice on virtual asset investment fraud using impersonation of executives and transaction support details
- Don’t be fooled by KakaoTalk conversations with people who appear to be Upbit employees. We are absolutely not Upbit executives or employees.
- Don’t be fooled by the information message everyone receives when applying for pre-review of transaction support.
- Upbit transaction support is decided privately through resolution by the Transaction Support Review Committee and is always disclosed for the first time through announcements.
Information on phishing text scam methods - Information on burning remaining digital assets of long-term inactivity and dormant accounts Types of scams
- Don't be surprised to hear that digital assets held on exchanges will be burned.
- Do not carelessly click on the links you receive.
- Be suspicious if you are offered a cash transfer to withdraw digital assets.
Information on phishing email fraud methods targeting virtual asset issuers - Types of impersonation by the Financial Supervisory Service's Virtual Asset Inspection Team
- Under no circumstances will the Financial Supervisory Service request the foundation's confidential data or the personal information of the foundation's representative.
- If you receive a related email, please delete it immediately rather than reply.
Notice on virtual asset investment fraud using fake exchanges
- Please check if it is a reported virtual asset exchange before using it.
- Be suspicious of investment recommendations through online investment rooms or social media.
- When using an unverified private exchange, transferring large amounts of money is absolutely prohibited.
Upbit Phishing Site QR Login Caution Notice
- When searching Upbit, please make sure it is the official site URL (https://www.upbit.com or https://upbit.com).
- Impersonation sites use similar URL addresses, and logging in may result in account information leaks and financial damages.
Warning for Upbit impersonation
- When receiving an email, be sure to check the sender's email address, and check it again before clicking on attachments or links.
- Please check the official Upbit SNS address in the notice and be careful of SNS impersonating Upbit.
Information on precautions regarding false transaction support and false reporting (promotion)
- Upbit provides information on all matters related to transaction support only through Upbit announcements.
- Please note the manipulated business card image with the title of Upbit Transaction Support Department written on it.
Notice on illegal pseudo-receipt scams
- If it is advertised as providing high-profit information to an unspecified number of people through SNS such as YouTube, it is highly likely to be an illegal pseudo-receipt scam.
- If they ask for your personal information, asking you to borrow money and invest in addition to your own funds, please refuse unconditionally as this is an illegal company.
Cautionary guidance on preserving investment losses through specific coins
- Be suspicious if an investment reading room encourages you to sign up for a site or create a wallet by offering to compensate for your losses with specific digital assets.
- You may impersonate executives and employees of Upbit or other exchanges. Never access QR codes or links shared with business cards.
Notice on phishing due to false transaction support documents, etc.
- Please look at the forged official documents in the notice and report them if you receive documents in a similar form.
- Upbit does not, under any circumstances, offer transaction support through social media or email or demand compensation for it.
Beware of illegal brokers and transaction support scams
- If illegal brokers demand payment in the name of transaction support through SNS, phone, or email, please report it.
Notice on telecommunications financial fraud
- Be aware of techniques that impersonate a customer center representative number and encourage the purchase of specific digital assets by creating a digital asset wallet.
- Upbit does not select specific digital assets and sell them to members through phone calls, text messages, KakaoTalk, etc.
Metamask signature request phishing prevention precautions
- Please check the MetaMask signature precautions in the notice and be careful about similar phishing sites.
Cautionary notice regarding coin purchase proposals under the pretense of compensating for losses in reading rooms and lottos.
- Please check the precautions in the notice and be careful of offers to buy coins under the pretense of compensating for losses in reading rooms or lotto.
- Please keep in mind that it is not common practice to sell a coin that is already listed on an exchange and can be easily liquidated at a lower price than the market price. New coin listing information on domestic exchanges is highly confidential and cannot be promoted externally.
Information on email fraud methods for impersonating employees of the Financial Supervisory Service and submitting explanatory materials related to unfair transactions
- Beware of emails purporting to be employees of the Financial Supervisory Service requesting submission of explanations regarding unfair trading of virtual assets.
- Do not access suspicious links, but check the authenticity and report it through the Financial Supervisory Service website.
Notice on impersonation of current and former Upbit employees
- They promote the business they run by posting an image of their employee ID along with the information that they worked at Upbit on certain social media.
- If a friend you only know online recommends a high-yield investment, be suspicious as it is most likely a scam.
Notice on false advertisements impersonating Upbit
- Please be especially careful as false advertisements and phishing attempts impersonating Upbit have been confirmed.
- If you are encouraged to enter account information or install a program by offering guaranteed profits or subscription benefits, do not respond but check through official channels.
How to report
- PC Web: Customer Center > 1:1 Inquiry > Financial Accident > Hacking/Identity Theft/Voice Phishing
- Mobile: More > Customer Center > 1:1 Inquiry > Financial Accident > Hacking/Identity Theft/Voice Phishing
- Police complaint portal
- Financial Supervisory Service Reporting Portal > Complaints/Reports > Illegal Finance Reporting Center > Reporting unfair trading and investment fraud in virtual assets
- Cyber crime reporting portal
Upbit will continue to strive to provide a transparent and sound trading environment.
thank you