Coinbase login URL: the real address

Coinbase's real sign-in page is on login.coinbase.com. If a link takes you anywhere else and asks for your Coinbase password, close it. We opened each address below on 9 November 2026.

login.coinbase.com

www.coinbase.com/signin sends you here

Domains Coinbase uses

Not a complete list. Each address below can have subdomains in front of it (www., login.), and they are still Coinbase's.

How to read the address

Look at the part between https:// and the first single /. Read it from the right. The real thing ends in coinbase.com, with nothing but a dot before it.

Everything after the first / is chosen by whoever made the page, so …/coinbase.com/signin in the path proves nothing.

What fake Coinbase pages looked like

On 5 November 2026, PhishTank listed 23 live, verified phishing URLs that its volunteers labelled Coinbase.

Hostnames from the same list that use Coinbase's name without being Coinbase's, newest first. Dots are written as [.] so none of them is a working link.

Report a fake Coinbase email or page

Contact Coinbase through its help center at help.coinbase.com. We could not open Coinbase's phishing page to confirm a reporting address.

Source: Coinbase Help, checked 9 November 2026.

Lures to watch for

Not sure about a link? Paste it into the free link checker. It reads the address only and doesn't open the page. The PhishClean browser extension also checks each page you open for signs of a fake sign-in form.

Questions

What is Coinbase's official login URL?

login.coinbase.com (www.coinbase.com/signin sends you here). A real Coinbase address ends in coinbase.com, read from the right of the hostname.

How do I report a fake Coinbase email or website?

Contact Coinbase through its help center at help.coinbase.com. We could not open Coinbase's phishing page to confirm a reporting address.

Do fake Coinbase sites use Coinbase's name in the address?

In PhishTank's list of live phishing URLs on 5 November 2026, 7 of the 23 URLs labelled Coinbase (30.4%) had the brand's name in the hostname, so most gave no such clue. 100% used HTTPS, so a padlock proves nothing.

How we checked

See also: official sign-in addresses of 15 brands.

Last updated: , when the sign-in addresses were checked.