Coinbase Subdomain Prompts Users to Enter Seed Phrases
By Helen Partz
Published on March 19, 2026.
Security researchers have raised concerns about a Coinbase-associated Commerce page that appeared to prompt users to enter wallet recovery phrases, potentially leading to phishing scams. The page was flagged by the founder of the blockchain security platform SlowMist, Yu Xian. The company has yet to comment on the issue publicly. The guide, now appearing to have been removed, reportedly outlined an option for users to recover funds by importing their seed phrase into a compatible wallet such as Coinbase Wallet or MetaMask. It also directed users to a withdrawal tool hosted at the same subdomain.
Read Original Article