Short answer
Treat any Telegram DM from someone posing as exchange support as a scam. If an account claiming to be Coinbase, Kraken, Gemini, or Binance.US support messages you first on Telegram, assume it's a scammer. Binance's help center, for example, says its customer service representatives will never contact you via private Telegram messages. Genuine support conversations start on your side: the help or chat button inside the official app, or the support page on the exchange's own website.
The Telegram scam pattern
Step 1: You join a large public Telegram group for a crypto project, the kind where plenty of the accounts are bots.
Step 2: Hours or days later, a Telegram account with a name like "Coinbase_Support_Officer" or "Kraken_Help_Center" DMs you. They mention you've been "asking for help" or "we noticed an issue with your account."
Step 3: They direct you to a fake support form, a fake "verification" page, or a Telegram in-line bot that asks for your seed phrase, wallet password, or private key.
Step 4: Within minutes of providing any of this, your wallet is drained.
The scammer's account is usually brand new, with an empty profile and next to no message history. It often borrows the profile picture of a real Coinbase or Kraken employee and uses a look-alike username with swapped characters (lowercase L for I, zero for O).
Why exchange support won't DM you on Telegram
Three reasons:
The exchanges say so. Binance's help center has an article on spotting scammers who impersonate Binance on Telegram, and it states that Binance customer service representatives will never contact you via private Telegram messages. Binance's official verification page adds that Binance will never request funds or tokens through private communications. For Coinbase, Kraken or Gemini, go by the contact channels listed in each exchange's own help center, not by a handle someone sent you.
Identity verification. Telegram has no way to verify you are the account holder. Email + 2FA does. Phone callback after you initiate does.
Anyone can pose as support. Telegram usernames and display names are free to register, so an account called "Binance_Support" proves nothing. Binance points users to its Binance Verify tool, where you can paste a Telegram handle, email address, phone number or URL and check whether it really belongs to Binance.
Many exchanges run Telegram channels for announcements or community chat. That doesn't make a private message from "support" legitimate, so handle those DMs the same way.
The pattern to internalize
Treat unsolicited support contact as a scam. If you have an issue with your exchange account, you initiate the contact — through the in-app help button or by emailing the support address listed on the official website.
If you receive a Telegram DM (or X DM, or Discord DM) claiming to be exchange support, the correct response is no response. Don't engage. Don't ask "is this real?" Just close the message. If something really is wrong with your account, you'll see it when you log in to the official app or website yourself.
Same scam in Telegram-heavy markets
In Russia, Ukraine and other markets where people use Telegram for almost everything, the same script turns up in the local language, with handles built on patterns like "[Exchange]_Support_[country code]" or "[Exchange]_Help_[country]". These are illustrative patterns, not real accounts. The defense doesn't change: reach support through official channels, and treat unsolicited DMs as scams.
If you already handed something over
If you typed your seed phrase or private key into their form, treat that wallet as compromised: create a new wallet with a new seed phrase and move whatever is left into it right away. If you connected your wallet to a site they sent you, revoke the token approvals you granted, using a token-approval checker or your wallet's own approval settings. If you gave them your exchange login or a 2FA code, change the password, reset 2FA and contact support through the official app. Then report the account in Telegram (open its profile and choose Report) and block it.
Further reading: Phishing, Phishing scam atlas 2026.