New users often ask "which one is the real Binance website?" Binance officially owns multiple domains, and combined with different regional versions, it's genuinely easy to get confused. This article lists every official domain and then explains how to spot a phishing site. The safest approach is to go through this site's recommended Binance Official Site entry point; for installation, use the Official Binance App. iPhone users should check the iOS Installation Guide.
The global version of Binance has exactly one primary domain: binance.com. This has been the core domain, unchanged, since 2017.
When accessing binance.com from mainland China, network-level restrictions on the domain often cause a redirect to a risk notice page or a failure to load. Binance automatically redirects to mirror domains to keep access available for users.
The table below lists all official Binance domains in use as of April 2026 and what each is used for.
| Domain | Purpose | Notes |
|---|---|---|
| binance.com | Global primary domain | Default entry point |
| binance.cc | Global mirror | Resolves identically to the primary site |
| binance.info | Global mirror | Used for SEO and Chinese-language users |
| binance.me | Global mirror | Used in certain regions |
| binance.us | US version | Fully independent from the global version |
| binance.je | Jersey version | No longer in operation |
| accounts.binance.com | Account center | Used only for login and registration |
| api.binance.com | API endpoint | Used for programmatic trading |
| www.bnbchain.org | BNB Chain public chain site | Independent from the exchange domains |
binance.us and binance.com are two completely separate systems. Accounts, KYC, and assets do not carry over between them. Users in mainland China should use binance.com and should not register on binance.us.
Phishing sites exist to steal login credentials or trick users into sending crypto to an attacker's address. Common tactics include:
Examples include binnance.com, binance-com.com, binnance.cc, b1nance.com, binance-login.com, and similar domains that differ from the official one by just one or two characters.
When you search "Binance" on Baidu, Bing, or Google, the very first result is often a phishing ad. The ad link goes through multiple redirects before landing on a forged login page.
Phishing short links like bit.ly/xxx or t.cn/xxx redirect to forged pages. The vast majority of "Binance giveaway" links seen on social media are phishing.
Some phishing sites use a legitimate SSL certificate (the green padlock), leading users to mistakenly assume it's official. A certificate only proves the connection is encrypted — it doesn't prove the site's identity.
After a victim enters their username and password, scammers show a fake "network error" message, then redirect to the real Binance site. The user assumes it was just a network hiccup, while their password has already been intercepted.
After opening your browser, the address bar must display exactly one of binance.com / binance.cc / binance.info / binance.me. Any extra characters (prefix, suffix, hyphen) mean it's phishing.
After logging into your account, turn on the anti-phishing code under "Account > Security." Once enabled, every official Binance email will include this custom string. Any "Binance email" without it is fake.
Once you've confirmed the correct domain, bookmark it immediately and only access Binance through that bookmark going forward. Never open Binance through a search engine.
iPhone users: switch your Apple App Store to a non-mainland-China Apple ID, then search "Binance." The developer must be listed as "Binance Inc."
Android users: go to binance.com/en/download to download the APK. The developer signature should be "Binance," with package name com.binance.dev.
Desktop client: the Windows and Mac clients can also be downloaded from the binance.com/en/download page. Any third-party download site carries a risk of tampering.
Open the real Binance site, tap your avatar in the top-right corner, go to Account Security, and select "Disable Account." This immediately freezes all trading and withdrawal functions.
After freezing your account, use the "Forgot Password" flow to reset your password and re-bind Google Authenticator. Your original Authenticator becomes invalid immediately.
Go to "API Management" and delete any unauthorized API keys, then go to "Withdrawal Whitelist" and remove any unfamiliar addresses.
Open a ticket through the support icon in the bottom-right corner of the official site, choosing "Account Compromised" as the category. Support will freeze all assets in the account for 24 hours, during which any withdrawal request is manually reviewed.
For larger amounts, report the incident to your local police and provide the on-chain transaction hash. Police can coordinate an investigation with Binance's risk control team.
If you see any of the following, it can almost certainly be identified as phishing:
Legitimate Binance emails come from the following domains:
Any email ending in @binance-help.com, @binance-team.com, @bin-ance.com, or similar is forged. See our dedicated article on spotting phishing emails for a detailed method.
Q: Is it normal for binance.com not to load in mainland China? Yes, that's normal. Binance's overseas nodes have restricted access from mainland China, and you'll need a compliant network environment.
Q: What's the difference between binance.cc and binance.com? binance.cc is an official mirror domain owned by Binance. Accounts, assets, and KYC are fully interoperable with the primary domain.
Q: Is the first result when I search "Binance official site" on Baidu real? In the vast majority of cases, it's a paid ad, and the advertiser is a phishing site. It's best to type binance.com directly or use this site's indexed entry point.
Q: Can I log into Binance using the Baidu browser? You can, but it's better to use a mainstream browser like Chrome, Edge, or Firefox, and turn on the browser's built-in anti-phishing detection.
Q: Is scanning a QR code to log into Binance on my phone safe? Binance officially supports QR code login, but only from a device that has already logged into the official Binance app. Any third-party webpage that asks you to scan a QR code to log in is phishing.
Q: My account got phished and my assets have already been transferred out — can they be recovered? The odds of recovery are low, but you can submit the on-chain transaction hash to Binance's risk control team, and Binance can freeze the receiving account. If the receiving party used a mixer, recovery is generally impossible.