PipeFlare

Recover a Locked or Hacked Coinbase Account

Locked or hacked Coinbase account? The official recovery form, real response times, and the impersonation scams that spiked after the 2025 data leak.

Updated June 2026 ยท Reviewed by the PipeFlare team

Use the official Account Recovery form at help.coinbase.com โ€” never trust a DM, call, or text claiming to be Coinbase support

Coinbase account recovery is a documented queue, not a phone call. The biggest risk during recovery is fake support โ€” and the 2025 breach of ~69,000 Coinbase customer records made impersonators much more convincing.

Read the official source โ†’

Category

Account access lost

Recoverability

Often recoverable

What you need

The email tied to the account, a valid government photo ID, and a device that can record a video selfie

Time window

Hours to days โ€” Coinbase reviews recovery requests in a queue; lost 2FA plus lost email takes longer

About this situation

If your Coinbase account is locked, hacked, or you lost 2-step verification, there is one safe path: the official Account Recovery form at help.coinbase.com. Coinbase will ask for your email, a government ID, and a video selfie. The queue takes hours to days. The biggest threat right now is not the lock itself โ€” it is fake "Coinbase support" that floods your DMs the moment you post about the problem. Real Coinbase support never DMs first, never calls you, and never asks for your password or recovery phrase.

How it actually works

Coinbase account recovery is a queued identity check, not a phone call. You open the official form at help.coinbase.com and submit the email on the account, a valid government photo ID, and a short video selfie. A reviewer matches your face and ID against the KYC records from when you opened the account. If they match, Coinbase restores access, usually with a temporary 2FA reset and a 24 to 48 hour hold on withdrawals to block takeover attempts. If documents do not match, they ask for more. The process is queue-based, which is why response time varies and why no one can "speed it up."

Step by step

  1. 1Type help.coinbase.com into your browser yourself. Do not click links from emails, texts, DMs, or search ads.
  2. 2Open the Account Recovery form and submit your email, government ID, and a clear video selfie.
  3. 3Ignore every DM, call, or message offering to help โ€” Coinbase never contacts you first, and every fake agent is a scam.
  4. 4Wait for the reply from a verified @coinbase.com email, then reset your password and re-enable 2FA on a hardware key or authenticator app.

What works in your favor

  • The recovery process is public, documented, and works for most users who still have their ID and original email.
  • A form-based queue is safer than phone or DM support โ€” it cannot be tricked by a smooth-talking caller.
  • After recovery, Coinbase applies a short withdrawal hold that blocks attackers who got in during the lockout.

Watch out for

  • Response times stretch to several days when the queue is busy or your documents need a second review.
  • Losing both 2FA and your email at the same time slows recovery a lot and may need extra proof.
  • The 2025 Coinbase data leak exposed names, emails, phone numbers, ID images, and balances for about 69,000 users โ€” impersonators now have real account details and sound very convincing.

Common questions

How do I recover a locked Coinbase account?

Go to help.coinbase.com and open the Account Recovery form. Submit the email tied to the account, a government photo ID, and a short video selfie. Coinbase reviews the request in a queue and either restores access or asks for more documents. Do not use any other recovery link โ€” only the official help center.

How long does Coinbase account recovery take?

Most reviews finish within 24 to 72 hours. Simple cases with a clear ID and matching selfie move fastest. Cases where you lost both 2FA and your email take longer because Coinbase needs more proof. No one outside Coinbase can move you up the queue.

Will Coinbase support ever DM, call, or text me first?

No. Coinbase's official policy says they never call users, never DM on X, Telegram, or Discord, and never open a chat first. They only reply to tickets you open at help.coinbase.com. Anyone reaching out unprompted and claiming to be Coinbase is a scammer โ€” block and report to security@coinbase.com.

Does the 2025 Coinbase data breach change how I should recover my account?

Yes. In May 2025 Coinbase disclosed that bribed overseas support contractors leaked data on roughly 69,000 users, including names, emails, phone numbers, addresses, ID images, and account balances. Passwords and seed phrases were not taken. The leak means scammers can now quote real account details to sound legit. Trust only the help.coinbase.com form, never a caller or DM โ€” even if they know your balance.

What if my Coinbase account was hacked and the crypto is already gone?

Lock the account through the recovery form right away, then file a report at ic3.gov within 24 hours. If you can identify which exchange the stolen funds were sent to, contact their compliance team with the transaction hash. A fast report sometimes results in a freeze before the attacker withdraws. After the funds hit a mixer or non-cooperating exchange, recovery becomes very unlikely.

Sources

Other recovery guides

Want to avoid the next mistake?

Beginner guides to wallets, gas, networks, and how transactions actually work.

See the basics โ†’