Top

Binance survey reveals evolving security habits of Asian platform users

Markets·May 09, 2025, 6:21 AM

Global crypto exchange Binance has carried out a survey which reveals that the security habits of Asian platform users are evolving positively.

https://asset.coinness.com/en/news/260ca4e27d6072376b88fad1d462b0ec.webp
Photo by Vadim Artyukhin on Unsplash

Users responding to more sophisticated scams

In a blog post published by the crypto exchange platform on May 6, Binance revealed that it had carried out a survey of nearly 30,000 platform users across Asia. The company’s takeaway following analysis of the survey data is that “scams are evolving — and so are crypto users.”

 

The firm suggested that users are “stepping up their security game,” with exchanges facing growing demand from their users for real-time protection and smarter security tools.

 

Increasing use of 2FA

The exchange platform found that 80.5% of survey respondents now use Binance two-factor authentication (2FA). While the use of 2FA is definitely a move in the right direction, it doesn’t guarantee the safety of a user’s digital assets. 

 

In an article published by Forbes last month Forbes Contributor Davey Winder warned that infostealer malware can compromise 2FA codes in as little as 10 seconds. In June of last year, an OKX user lost $2 million in crypto to a hacker who utilized AI despite the victim having used Google’s 2FA.

 

Double-checking transfers

The survey found that 73.3% of users double-check transfers before sending digital assets. Due to the nature of decentralized cryptocurrency, crypto transactions are not easily reversed and are usually irreversible. That puts a greater responsibility on crypto users to ensure that they are sending funds to the appropriate wallet address.

 

Double-checking transfer addresses is not only necessary due to human error. Malware is also used by hackers to spoof such addresses, tricking the sender into sending the digital assets to their address rather than the one that was originally intended.

 

It emerged in May 2024 that a Bitcoin trader had lost more than $70 million in Bitcoin in an “address poisoning” scam. Binance itself had warned users last September that “clipper malware,” which intercepts clipboard data on a user’s phone or desktop, replacing copied wallet addresses with alternative addresses under the hacker’s control, is increasingly being employed in hacking attempts.

 

While the survey has revealed a positive evolution in the security habits of Asian platform users, there’s still room for further improvement. Just 17.6% of survey respondents utilize address whitelisting, a measure that restricts account user access to a safe list of pre-defined trusted addresses.

 

Only 21.5% of survey respondents use anti-phishing codes as a security mechanism. The objective of phishing is to steal data, install malware on a user’s device or otherwise gain account access. An anti-phishing code aids the user in verifying the authenticity of emails and texts from a specific service.

 

Security remains a major issue within crypto. Last month, hackers employed social engineering tactics to steal $330 million in Bitcoin from an elderly American victim.

Exchange platforms themselves continue to struggle to safeguard user funds. Earlier this year, Binance competitor, Dubai-headquartered Bybit, suffered a $1.5 billion hack believed to have been perpetrated by North Korea’s Lazarus Group. Lazarus is also thought to have been behind a $235 million crypto theft at Indian crypto exchange WazirX in July 2024.

More to Read
View All
Web3 & Enterprise·

Dec 05, 2023

Wemade and Mystic Games to bring two new games to WEMIX PLAY

Wemade and Mystic Games to bring two new games to WEMIX PLAYWemade has signed a deal with game development studio Mystic Games to onboard Mystic Games’ two new blockchain role-playing games (RPG), Call of the VoYd and Heroes of the VoYd, to WEMIX PLAY, Wemade’s blockchain gaming platform, according to an official announcement by WEMIX on Tuesday. Mystic Games is a subsidiary of the Swedish gaming company App Creation Experts and the first Swedish firm to onboard WEMIX PLAY.Photo by Priscilla Du Preez 🇨🇦 on UnsplashForging a future of versatile gaming experiencesMystic Games plans to implement inter-game play mechanisms between the two games, meaning that tokens and NFTs from both games can be used interchangeably.“We believe in a future where your time and skill in gaming can be just as valuable as your time spent working and with other hobbies,” said Matthew Buxton, CEO of Mystic Games. “We look forward to a bright future together.”This collaboration signifies WEMADE’s foray into the Swedish gaming market and aims to bring innovative and fun blockchain gaming experiences through Mystic Games’ titles on the WEMIX PLAY platform.Engaging adventuresCall of the VoYd is an active roguelite survival shooting game that involves battling various characters from beasts of ancient worlds to futuristic monster robots. Heroes of the VoYd offers a similar experience where players can battle monsters, but it mainly differs in its idle gameplay.

news
Policy & Regulation·

Aug 26, 2023

Binance Takes P2P Service Measures in Response to Sanctioned Russian Banks

Binance Takes P2P Service Measures in Response to Sanctioned Russian BanksGlobal crypto exchange Binance has removed the option for users to conduct transactions via sanctioned Russian banks on its peer-to-peer (P2P) platform, a decision that comes on the heels of a Wall Street Journal exposé published earlier this week, shedding light on the platform’s involvement in facilitating the movement of funds for Russian users.Previously, Binance’s peer-to-peer service featured five Russian banks under sanctions as a method for ruble transfers between users. However, the company swiftly acted to address potential compliance concerns. Fittingly, this latest news was also broken by the Wall Street Journal on Friday.Dmitry Sidorov on PexelsSailing too close to the windWhen approached regarding the omission of these banks, a Binance spokesperson stated: “We regularly update our systems to ensure compliance with local and global regulatory standards. When gaps are pointed out to us, we seek to address and remediate them as soon as possible.”The Wall Street Journal’s article outlined how Binance’s peer-to-peer platform facilitated ruble-to-crypto trades that frequently involved the sanctioned Russian banks, with Rosbank and Tinkoff Bank being prominent examples.These trades often utilized layers of intermediaries to convert funds from these banks into Binance balances, as detailed by various company resources, user screenshots, and messages in official chat groups. Despite these revelations, Binance’s exchange had continued to handle significant volumes of ruble trading, according to data compiled by digital asset research firm CCData.US DoJ probeBinance’s activities in Russia could potentially contribute to its ongoing legal challenges in the United States. The US Justice Department (DoJ) has been probing the company’s actions for potential violations of American sanctions on Russia. In response to such concerns, the Binance spokesperson emphasized:“Binance aims to diligently comply with the global sanctions rules and enforces sanctions on people, organizations, entities, and countries that have been blacklisted by the international community, denying such actors access to the Binance platform.”WorkaroundsTraders, however, had reportedly found workarounds to the bank removals, as observed in the official Telegram chat group for Russian clients. Many shared that they could still engage with sanctioned banks by selecting alternative payment methods and then manually inputting their Rosbank or Tinkoff bank details.Earlier this year, an investigative report by CNBC alleged that employees of the company had told it that Binance staff regularly helped Chinese customers to bypass Know Your Customer (KYC) controls in order to access the platform. More recently, another report, once again by the Wall Street Journal, found that business in China was booming, which surprised many given that China banned crypto trading within the country in 2021.It’s apparent that the company is reacting to regulatory and legal pressures in taking the decision to make these changes to its P2P service. Perennial crypto critic US Senator Elizabeth Warren took to X (formerly Twitter) on Friday, stating:“I rang the alarm about sanctions evasion by Russia using the crypto platform Binance — and urged [the DoJ] to investigate potentially false statements it made to Congress. We need stronger crypto regulations to rein in illicit finance.“

news
Policy & Regulation·

Nov 08, 2023

Indian police arrest eight more in $300M crypto scam

Indian police arrest eight more in $300M crypto scamIndian authorities have apprehended eight new individuals in connection with a sprawling $300 million (2500 crore Indian rupees) cryptocurrency scam that victimized approximately 100,000 people.According to a report published by local news media outlet The Times of India, the arrests have been made as part of an ongoing investigation. Of the eight individuals arrested, four have been identified as police officers.Photo by Big G Media on UnsplashLong running scamAs the investigation has unfolded, it has revealed an operation which is alleged to have been masterminded by Subhash Sharma, who remains at large. What has been termed the Himachal Pradesh crypto scam began to unravel in late September, although the Indian authorities believe that the origins of the scam stretch back to 2018.The perpetrators lured unsuspecting victims with investment schemes involving a local cryptocurrency known as Korvio Coin (KRO coins). As the scheme expanded, various other cryptocurrencies were introduced through fraudulent websites. One of these projects was abandoned after individuals had already invested, leading to significant financial losses.Targeting police officers and government officialsThe target audience for this particular scam has set it apart from that of others, given that police officers seem to have been involved while their colleagues are counted among the victims of the scam. Reports indicate that over 1,000 police personnel became entangled in the fraudulent web. While some officers were themselves victims, others made substantial gains. A few voluntarily took on the role of promoters, lending an air of credibility to the operation.Alongside police officers, 5,000 government officials also fell prey to the fraudulent investment schemes. The gravity of the situation became evident when it was revealed that around 56 complaints had been filed with police stations over the past two years.Multi-agency responseIn response to mounting concerns, multiple agencies, including the Enforcement Directorate and regional police teams, embarked on a comprehensive investigation under the guidance of a Special Investigation Team (SIT). The investigation has uncovered that over 100 individuals profited to the tune of $240,000 each, while another 200 reaped around $120,000 each from the scam.While the arrests have mounted to a total of 18 individuals, Sharma continues to evade capture. However, authorities have managed to identify and seize several properties associated with Sharma.In a separate investigation, the Enforcement Directorate is scrutinizing the roles of five women suspected of working as agents or promoters for the elusive kingpin. These developments underscore the vast extent of this crypto scam and the imperative for swift and thorough legal action.While crypto and Web3 more broadly have yet to fully unfold and reach full potential, there is no doubt that the sector has been blighted by ongoing scams, hacks and sharp practice. A recent report by Singapore-based blockchain security firm Immunefi estimated Q3 losses within the sector of $686 million.In August, a $120 million crypto ponzi scheme was uncovered in India’s Odisha state. Meanwhile, authorities in Hong Kong continue to come to terms with a fraud perpetrated by Dubai-based crypto exchange platform JPEX.As the investigation continues to unfold, the authorities are determined to bring all involved parties to justice, with a view towards sending a stern message to those who exploit unsuspecting individuals under the guise of cryptocurrency.

news
Loading