> 1. locked out of coinbase.com
Standard path first: coinbase.com/signin → Forgot password → Try another way → Account recovery. Expect a 24–72h mandatory security wait after any 2FA reset. Have ready: government ID, selfie, last 4 digits of a linked payment method, access to the original signup email.
When it fails — email hijacked, ID loop, SIM swap, name change, old country — that's an escalation case. We document, package, and route through channels the front-line queue can't reach.
> 2. unauthorized withdrawals — freeze first, ask later
If you see withdrawals you didn't make: stop everything. Do not log in from the same device.
1. From a different device on a different network, freeze the account via Settings → Security → Lock account.
2. File a police report — Coinbase's fraud team requires a case number for escalation.
3. Contact any linked bank; ACH pulls can sometimes be reversed within 60 days.
4. Preserve every notification, SMS, and login-alert timestamp. Do not delete anything.
What you say in the first 72 hours shapes the entire investigation. Talk to an operative before you send Coinbase a second message.
> 3. wrong-chain deposits (the expensive mistake)
You picked BEP-20 on Binance when Coinbase gave you an Ethereum address. Funds show sent, nothing arrives. The tokens are not lost — they're sitting at your Coinbase-generated address on the wrong EVM chain.
Coinbase custodies the key. They will sometimes sweep for a short list of supported networks + tokens (5% fee, $100 minimum, 4–12 weeks). Unsupported chains are declined outright.
DO NOT send more funds to test. If Coinbase declines, it becomes a private-key extraction problem — partner counsel can, in some jurisdictions, compel a signed transaction from a custodian for provable-owner funds.
> 4. coinbase wallet is a different product
Coinbase Wallet (the standalone app with a 12-word seed phrase) is self-custody. Coinbase support cannot help. Password lost, phrase partial, device bricked — that's a wallet-recovery workflow, not a support ticket.
· Have the phrase, forgot the password → reinstall and restore.
· Have the phrase, forgot a custom passphrase (25th word) → dictionary attack.
· Phrase partial (10 of 12 words) → BIP-39 checksum reconstruction.
· Phone bricked, no backup → device forensics.
> what coinbase will never do
If you see any of these, it's a scam:
· Ask for your seed phrase (Coinbase.com doesn't have one for you).
· Ask you to sync your wallet with a support agent.
· Send a WalletConnect QR code.
· DM you first on Telegram, WhatsApp, Discord, or X.
· Offer to reverse a blockchain transaction for a fee.
Public blockchain transactions are irreversible by design. Every service promising to reverse one is a scam. What can be recovered is access to a wallet you already own — never funds you sent to a third party.
> what to do right now
1. Diagnose which of the five problems you actually have (assessment covers this in 3 minutes).
2. If it's suspected compromise: freeze the account from a clean device before anything else.
3. Preserve evidence — screenshots, timestamps, tx hashes.
4. Open a case. Free. Private terminal. No plaintext seed ever required.