Is this account alert from CoinSpot a scam?

Researched & maintained by Scam ScannerLast updated 1 October 2026

No. CoinSpot is a legitimate Australian cryptocurrency exchange, not a scam. Two separate risks trade on its name: scammers impersonate CoinSpot with account-locked texts and fake verification pages, and investment scammers steer victims into buying crypto through real Australian exchanges like CoinSpot before persuading them to send it on to wallets the scammer controls. The good news: a few quick checks almost always tell a real CoinSpot message from a fake.

Genuine CoinSpot links lead to coinspot.com.au — but a link can be made to look real, so don't go by the link alone. Below is how genuine CoinSpot contact usually works, the scams commonly run in its name, the red flags that give a fake away, and an example to compare against. Got a message in front of you? Check it now for an instant verdict.

What a real CoinSpot message looks like

Genuine messages from CoinSpot link to coinspot.com.au. Treat a link to any other address as a warning sign.

CoinSpot's terms of use say it will communicate with customers by email and telephone, and will not provide links to other websites or request sensitive information such as 2-factor codes and passwords
A message that asks you to click a link or enter a code is worth checking inside the CoinSpot app or at an address you type yourself, whatever name or number it comes from
Texts and emails can carry a spoofed sender name or address, so a message that looks like CoinSpot proves nothing on its own
CoinSpot's security guide says it offers anti-phishing phrases to help protect users

What a genuine CoinSpot contact shouldn't do

Provide links to other websites or request sensitive information such as 2-factor codes and passwords, according to CoinSpot's terms of use
Ask you to share a recovery (seed) phrase; CoinSpot's security guide says recovery phrases should not be shared with anyone
Ask you to share your password; Moneysmart says an exchange or platform won't

Common CoinSpot scams

Scammers send SMS claiming your CoinSpot account is locked or needs verification, with a link to a fake login page.
Messages pretend to be urgent security alerts asking you to confirm your details on coinspot-secure-login[.]example or similar lookalike domains.
Fraudsters pose as CoinSpot support and request you enter a code sent via SMS on a fraudulent website to 'unlock' funds.

Red flags to watch for

The message arrives as an unexpected SMS even though you never requested a login code.
The text contains a link, especially one to a domain other than coinspot.com.au; a link that looks right still proves nothing, so check in the app or by typing the address yourself.
The message creates urgency by claiming your account will be frozen or funds lost if you do not act immediately.
The sender asks you to enter a verification code on a website instead of the official CoinSpot app or site.

CoinSpot scam examples

These composed examples show how scams impersonating CoinSpot typically read, with the tells that give each one away. Compare them against anything you've received.

Example scam text messageExample only. Not a real message.

CoinSpot: Unusual sign-in detected from a new device. Your account has been temporarily locked. Restore access within 2 hours at coinspot-id-restore[.]example or pending withdrawals will be reversed.

What gives it away:

CoinSpot's terms of use say it will communicate with customers by email and telephone and won't provide links to other websites or request sensitive information such as 2-factor codes and passwords, so a text pushing a link is a reason to check your account yourself in the app
The lock-plus-deadline combination exists to make you click before you think
The link goes to a lookalike address rather than the exchange's own website; a link that looks right would still prove nothing

Example scam fake websiteExample only. Not a real message.

A page styled as a 'CoinSpot Verification Centre' at coinspot-account-review[.]example asks you to enter your email, password and the SMS code just sent to your phone 'to release your held funds'.

What gives it away:

CoinSpot's terms of use say it won't request sensitive information such as 2-factor codes and passwords; a page asking for your password and SMS code is a login-capture page, whoever it claims to be
'Held funds' is an invented problem; the page exists purely to capture your login and the code that unlocks it
Polish proves nothing: type the address yourself or open the app, because a page you reached from a message is the wrong place to enter a password or code

Not sure about your message?

Paste the suspicious CoinSpot text or email and get an instant scam verdict, free.

Check your message now Get the iPhone app

See all free scam checker tools →

How to verify a message from CoinSpot

CoinSpot's real website is coinspot.com.au and the official app is the CoinSpot app. Reach CoinSpot through those channels, never through the details inside a message you're unsure about.

Don't tap the link, reply to the text or enter any code on the page it opens
Type coinspot.com.au into your browser yourself, or open the official CoinSpot app, and check your account status there; if something is genuinely wrong it will show inside your account
CoinSpot's terms of use say it won't provide links to other websites or request 2-factor codes and passwords, so an unexpected message that does either deserves extra suspicion; check in the app instead
Check anything unexpected from inside your logged-in app, or at an address you typed yourself

If you have been scammed in CoinSpot's name

Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.

Change your CoinSpot password immediately from coinspot.com.au (typed yourself) and enable 2FA if it is not already active
Change that password anywhere else you reused it, since harvested logins are tried across other services
If you paid a scammer by card or bank transfer, call your bank immediately to try to block or dispute the payment
If you shared identity documents, contact IDCARE (idcare.org) for free identity support
Report the scam to Scamwatch and ReportCyber using the links below, and forward the scam SMS to 7226 so carriers can block the sender

Where to report a scam impersonating CoinSpot

Received — or fell for — a message impersonating CoinSpot? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.

Scamwatch — Report the scam to the ACCC's national scam service.
ReportCyber — Report cybercrime and financial loss to the police.
ACMA — Complain about scam texts and spam SMS, email or calls.
Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
IDCARE — Free identity and cyber support if your details were taken.

CoinSpot scam activity in 2026

The examples on this page show account-locked and unusual-sign-in texts that funnel you to a lookalike login page, sometimes followed by a page demanding the SMS code that has just landed on your phone. Because CoinSpot is a well-known Australian exchange, its name can also appear inside broader investment scams, where a 'broker' walks victims through opening a genuine account and then transferring crypto out to a wallet the scammer controls. The common elements are a link, a deadline and a code request. A habit that helps against all of it: don't act through the message; log in by typing coinspot.com.au yourself or opening the official app.

Frequently asked questions

I got a text from CoinSpot with a link — is it a scam?

Treat it as a scam attempt. CoinSpot's terms of use say it will communicate with customers by email and telephone and won't provide links to other websites or request sensitive information such as 2-factor codes and passwords. Don't click the link; check your account in the app or at coinspot.com.au typed in yourself.

How do I know if a CoinSpot message is real?

Don't judge by the sender name or number, which can be spoofed. Check anything unexpected by logging in through the official app or typing coinspot.com.au yourself; a message that asks you to click a link or enter a code is a reason to stop. CoinSpot's terms of use say it won't provide links to other websites or request 2-factor codes and passwords.

What should I do if I clicked a link in a fake CoinSpot text?

Change your CoinSpot password immediately from coinspot.com.au, enable 2FA if not already active, and report the SMS at scamwatch.gov.au.

What is CoinSpot's real website?

Scam Scanner's brand database lists coinspot.com.au as CoinSpot's website, and the CoinSpot app is the other way in. Type the address yourself instead of following links; variations that bolt words like 'secure', 'verify' or 'login' onto the CoinSpot name on a different domain are typical of phishing pages.

How do I report a CoinSpot scam?

Report the message to Scamwatch (scamwatch.gov.au) and forward scam texts to 7226 (spells SCAM) so your carrier can block the sender. If you lost money or crypto, also lodge a report with ReportCyber at cyber.gov.au. Reporting quickly helps the National Anti-Scam Centre disrupt the campaign for others.

Related scam types

Scams impersonating CoinSpot usually fit one of these patterns. Learn how each works:

Related brands

Other crypto names scammers impersonate — check a message from one:

Sources

Text or SMS scams (Scamwatch (National Anti-Scam Centre))
Investment scams (Scamwatch (National Anti-Scam Centre))
Report a scam (Scamwatch (National Anti-Scam Centre))

This guide is general information, not legal or financial advice — always verify with CoinSpot through an official channel.