Fake tokens with real names
Anyone can create a token on BNB Smart Chain, give it any name and any symbol, and have it appear in wallets and trading interfaces looking entirely ordinary. Creating one called BNB takes minutes and costs a fraction of a dollar, and nothing in the protocol prevents it.
This matters because BNB itself is the network's native currency rather than a token, so anything appearing as a BNB-branded token on BNB Smart Chain is by definition something else. A wallet displaying two BNB entries is showing one real balance alongside one impostor.
The reliable defense against all of it is the contract address, since every token has a unique one, and checking the one you are about to trade against the project's own published address settles the question completely. Names and symbols can be copied freely, while an address is unique to one contract.
Where the address comes from matters as much as checking it. Take it from the project's official documentation or a major data provider you navigated to yourself, since an address supplied by whoever is promoting the token proves nothing at all. BNB networks and contracts covers the identifiers worth knowing.
Fake websites and applications
Copying a website is trivial, and search advertising lets a copy sit directly above the original. Fake versions exist of every popular wallet, bridge, staking page and decentralized exchange, and they are frequently indistinguishable from the real thing by eye (source: MetaMask Support).
What they want is either your recovery phrase, typed into a convincing restore screen, or a transaction approval that hands over permission to move your tokens. Both are actions you take voluntarily, which is why the interface is designed to look correct.
Three habits close this route off almost entirely, and the first is to reach applications through addresses you found yourself and saved, since a bookmark you created is worth more than any search result. Treat sponsored results with suspicion, because buying an advertisement against a well-known name is cheap and effective. And read what a transaction actually does before approving it, since the wallet's confirmation screen is the last accurate description you will see.
Official staking for BNB runs through BNB Chain's own application, reached from the project's documentation, and any other page offering to stake your BNB deserves that verification before you connect anything. How to stake BNB covers the real process from wallet to confirmation.
Approvals that keep working
This one is less obvious than the others, and it causes losses long after the event that set it up.
Using a decentralized application usually means granting it permission to move a token on your behalf, and that permission commonly persists after the transaction that requested it. A malicious contract asks for a broad approval, waits, and uses it later, which is why funds sometimes disappear from a wallet that has done nothing recently.
Two responses help against this one. Review your existing approvals periodically and revoke any you no longer need, using a tool for the purpose, and read approval requests carefully at the moment they appear rather than clicking through them. An approval covering an unlimited amount is worth questioning when a specific amount would do.
Recovery phrase attacks
The most direct route to someone's coins is simply asking for their recovery phrase, and it succeeds often enough to remain a staple of the field.
The requests arrive in recognizable forms: support staff who need it to fix a problem, a wallet migration that requires re-entering it, an airdrop that verifies eligibility by asking for it, or a validation service that promises to repair a stuck transaction. Each of them carries a plausible reason and a degree of urgency.
The rule here is absolute and simple, which is exactly what makes it useful. Your recovery phrase goes into your own wallet when restoring it, and nowhere else ever. Every legitimate application, support agent and website functions without seeing it, so a request for it identifies the requester regardless of how convincing the surrounding presentation is.
The same holds for private keys, and for any screen asking you to enter either into a website. BNB wallet setup covers storing the phrase where it stays safe.
Fake migrations and rebrands
Real projects occasionally migrate to new contracts, and holders genuinely have to swap old tokens for new ones. Scammers imitate that pattern, because it provides a legitimate-sounding reason to connect a wallet and approve a transaction.
BNB's own history supplies a specific version of this pattern. The coin was renamed from Binance Coin on February 15, 2022, and holders had to do nothing at all, because a rename changes labels while leaving the blockchain untouched. Any page offering to convert Binance Coin into BNB is describing an event that never happened. The rebrand covers exactly what changed and what carried across.
Beacon Chain provides a second version of the same thing. That network was retired in December 2024, and a legitimate recovery process exists for tokens left on it, run through a tool published in the project's own repository. Sites offering Beacon Chain recovery in exchange for a fee, a wallet connection or a recovery phrase are imitating that process. The Beacon Chain sunset covers the genuine recovery route in detail.
Yields that promise more than the network produces
Some scams need no technical component at all, because they work on arithmetic that nobody checks.
Staking BNB pays rewards funded by transaction fees, which produces a modest single-digit return that varies with how busy the network is. A platform advertising a much higher guaranteed yield on BNB is either taking risks it has not described or paying early participants with later participants' money.
The question that settles it is where the return comes from. Native staking has a clear answer: fees paid by users of the network, shared out after the validator's commission. A service that answers that question vaguely has told you what you needed to know. BNB staking explained covers how the real rewards are generated.
Consumer protection guidance describes the general pattern well, and the features it names recur across crypto schemes: guaranteed returns, pressure to act quickly, and payment demanded in cryptocurrency (source: FTC).
The checks that catch most of it
- Verify the contract address against the project's own documentation before trading any token, since names and symbols can be copied and addresses cannot.
- Reach applications through your own bookmarks instead of search results, because advertising against a well-known name is cheap.
- Give your recovery phrase to nobody, ever, including anything presenting itself as support, migration or verification.
- Read approval requests before signing, and revoke old approvals periodically.
- Ask where a yield comes from and treat a vague answer as the answer.
- Send a test amount first on any transfer large enough to matter, since transactions are irreversible.
Urgency is the common thread running through all of these. A limited window, a closing allocation, an account about to be frozen: the pressure exists to stop you performing the check that would end the attempt. Slowing down is the single most effective defense available to anyone. Whether BNB is safe sets these risks alongside the others.
Frequently asked questions
How do you tell a real BNB token from a fake one?
Check the contract address against the project's own documentation, because names and symbols can be copied freely while an address is unique. On BNB Smart Chain there is a further clue: BNB is the network's native currency rather than a token, so anything appearing as a BNB-branded token there is something else entirely. Get the address from official documentation or a major data provider you navigated to yourself.
Will anyone legitimate ever ask for your recovery phrase?
Never, under any circumstances whatsoever, and the rule has no exceptions. Wallet developers, exchange support teams, blockchain projects and legitimate applications all operate without ever seeing it, because it is the key to your coins rather than a password. A request for it identifies the requester regardless of how convincing the surrounding presentation is, and that rule holds even inside an interface that looks completely correct.
Why do funds disappear from a wallet that did nothing?
Usually because of an approval granted at some earlier point. Using a decentralized application means giving it permission to move a token on your behalf, and that permission commonly persists afterwards, so a malicious contract can grant itself broad access and use it weeks later. Reviewing and revoking old approvals periodically closes that door.
Did the 2022 rebrand require holders to swap tokens?
No swap took place at any point, because renaming changes labels while leaving the blockchain, the balances and the contract exactly as they were. Any page offering to convert Binance Coin into BNB is describing an event that never happened, and connecting a wallet to one is how people lose funds. Genuine migrations are announced through a project's own official channels.
What return should staking BNB actually produce?
A modest single-digit percentage that varies with network activity, because rewards come from transaction fees rather than from a fixed rate. A platform promising a much higher guaranteed yield is either taking undisclosed risks or paying earlier participants with later money. The question that settles it is where the return comes from, and native staking answers it precisely.
What should you do if you have been scammed?
Move any remaining funds to a new wallet with a new recovery phrase, revoke approvals from the compromised address, and report the incident to your national consumer protection or fraud authority. The transaction itself is permanent, so recovering the funds is very unlikely, and the priority is preventing further loss from the same access.
Researched and written by the BloFin Academy editorial team with AI-assisted drafting. Updated September 2026. Primary sources include BloFin's Help Center and the FTC. All facts independently verified against cited documentation current as of September 2026.
This article is educational and general in nature, not financial or investment advice. Cryptocurrencies like BNB carry real risks, including irreversible transfers, look-alike token contracts, persistent contract approvals, and sites that imitate real applications. Nothing here is a recommendation to buy, sell, or hold any asset. Do your own research, and consider speaking with a licensed professional before making financial decisions. BloFin does not provide investment advice.