Fake Binance SMS Scam: The MASAK Frozen Assets Text

The most common way into crypto fraud lately is no longer a fake investment platform; it is a single short text message on the phone. The message mentions Binance, says the assets have been frozen by MASAK (the Financial Crimes Investigation Board) and asks the recipient to click a link. The most striking part of this scheme is that the message also reaches people who do not even have an account on the exchange. Binance has no connection with this scheme; its name is being misused.

🚨 How the Message Is Built

The text combines three elements:

• A well-known brand name: Whether or not the person has an account, the name of a world-famous crypto exchange gives the message an appearance of legitimacy.
• An official institution name: The name of the Financial Crimes Investigation Board (MASAK) creates the impression that an official procedure is under way and suppresses the urge to object.
• Time pressure: By stating that only a short period is allowed to verify the assets, the message prevents the person from stopping to think and check.

When the link is clicked, the user is taken to a login page made to look like the real one, or to an app they are asked to install on the phone. The aim is not money directly but account access details and identity data; the money then leaves the user's own account once this information is obtained.

🔍 Why Can It Not Be Told Apart from Genuine Messages?

The point where users are most often misled comes from a technical detail. The sender name shown on a text message does not prove who actually sent it; this field can be imitated. The practical result is that a fake message can land in the same conversation thread as genuine verification codes received earlier. Because the user sees a new message in a thread they have trusted for years, they do not question its content.

In some examples the brand name is written with dots between the letters so that the message passes filters; in others the sender field carries a meaningless header made up of abbreviations.

🚩 What Is Known About the Use of an Institution's Name

The whole scheme rests on one false assumption: that a public body would contact citizens by text message and ask them to click a link. In fact, the Financial Crimes Investigation Board does not send text messages to citizens, and an official warning has been issued about message campaigns run in this institution's name. The same institution's name is also used in messages saying "there is a case file about you" and in calls made by people posing as a law firm.

The picture is similar on the crypto exchange side: platforms do not notify users of matters such as account restrictions through a link in a text message.

📉 The Phone Leg of the Same Scheme

The scheme is not limited to messages. Phone calls are also made using the same brand name, with callers posing as customer representatives. One of the numbers used for these calls appeared in user reports as 0850 533 38 81. The story in the calls is the same: there is a problem with the account and a transaction must be verified urgently.

The message and call legs can reinforce each other; when the person who received the message hesitates, they are phoned shortly afterwards for "verification".

🛡️ Points Usually Checked When Such a Message Arrives

• Links in text messages are not opened; an account is accessed only through one's own registered app or an official address typed in directly.
• A familiar-looking sender name, or a message landing under older verification messages, does not show that the message is genuine.
• A genuine message sent in the name of a public body does not contain a link, an app installation or a request to enter information.
• These messages can arrive even where there is no crypto exchange account; this is evidence that the message is sent in bulk.

❓ Frequently Asked Questions