People type three searches for the same afternoon: coinbase refund, coinbase scam, coinbase withdrawal. Coinbase is a real exchange, publicly traded on Nasdaq as COIN. A refund from Coinbase, a scam that used the name, and a withdrawal that never arrived are three different files. Coinbase's own help says an on-chain send cannot be cancelled, and that Coinbase cannot retrieve funds sent to the wrong address or the wrong network. The file that can still be reviewed is the one where the coins left for someone else, or a bank payment you did not authorise is still inside a dispute window.
Buying bitcoin or USDT on Coinbase and then sending it to a manager, a romantic contact, or a “safe wallet” is the usual path. The purchase can be a real Coinbase purchase. The loss is the send after it. Coinbase's help treats that on-chain send as final. A Coinbase refund of the purchase does not unwind a transfer you approved to someone else's address.
A drain after a code, a remote-access session, or a seed phrase used the account's own withdrawal tools. Save the transaction hash and the message. Lock the account from a page you typed yourself, and write to security@coinbase.com, which is the address on Coinbase's impersonation page. Do not send the password, the codes, or the phrase to the person offering to get the refund.
A cash withdrawal that is still sitting inside Coinbase is their queue or the receiving bank. It is not a trail we can follow, because the coins have not left. A withdrawal that already says completed, to an address you do not recognise, is the send. Bring that hash.
Say whether the coins are still in the Coinbase account or already sent. A balance screenshot on its own is not the trail.
The hash and the approximate time if the crypto left. The card or bank reference if a payment you did not authorise never became a send. Do not include your password, your 2-step codes, or a seed phrase.
The text, email, call or chat, including the number and the link. If someone is now offering to force the refund, include that pitch and do not pay it.
The company check is the Coinbase review: a real, publicly traded exchange. If the coins already moved, read how a crypto trace works. If someone wants a fee up front to force the refund, read how to tell that pitch from an investigation.
Concrete cases from our forensic review archive: an exchange brand whose deposit addresses we trace · an exchange whose impersonators cash out traced funds · a cloned domain whose wallet trail we documented
Coinbase's own help says an on-chain send cannot be cancelled, and that Coinbase cannot retrieve funds sent to the wrong address or the wrong network. The published exception is a send to an email, phone number or username that the recipient never claims: if they have no Coinbase account, Coinbase says the funds return after 30 days, and a transfer that is still pending can be cancelled. A completed send to a crypto address is a different file. What can still be reviewed is the hash of that send, and a card or bank payment you did not authorise.
No. Coinbase is a real exchange, publicly traded on Nasdaq as COIN. The scam around the brand is impersonation. Coinbase's security page says staff will not ask for your password, your 2-step code or a seed phrase, will not ask you to install remote software, will not ask you to send crypto to an outside address, and will not call you to troubleshoot the account. A locked account or a slow cash withdrawal is their own process, opened at coinbase.com. A stranger who had you buy there and send the coins out is the case.
If it has not left the account, it is Coinbase's review, a limit, or the bank, and the status that counts is the one on coinbase.com typed by you. If the withdrawal says completed and the destination is not your address, the send is finished. Coinbase's help treats that transfer as final. The hash and the date are what a case review uses.
A fee in crypto, a password, or a seed phrase is the second theft. Coinbase has already published that they cannot reverse a completed on-chain send. Do not pay the fee and do not send the login. Send the hash, the date, and the pitch.
Comments are moderated. We only publish comments from verified clients.
Thank you. Your comment has been submitted for moderation and will appear after review.
Send the date, the transaction hash or the bank reference, and how you were contacted. Do not include your password, your 2-step codes, or a seed phrase. We will tell you whether the trail still reaches an exchange or a bank dispute. The assessment is free.
Tell us what's happening. We'll respond within one business day — or immediately for active investigations.