Telegram posts are advertising what they claim are millions of Binance records for up to $900,000 in cryptocurrency. The advertisements also include a warning threatening to release the information if Binance does not pay. Binance now says the listing appears likely to be a scam, though its investigation is still ongoing.
What Is Being Advertised?
In a November 3 report, cybersecurity firm Brandefense said it identified four versions of the advertisement posted between October 30 and November 2, 2026.
The posts claim to contain 335.9 million lines of data, including customer emails, phone numbers, passwords, identity documents, transaction histories, and even cryptocurrency wallet private keys.
The advertised prices varied. One post from November 1 asked for $500,000, while two posted the following day listed $900,000. One of those later advertisements suggested the price could be negotiated down to $500,000.
A similar listing was also reported on an underground forum, although that does not prove the seller actually possesses the information.
Brandefense could not confirm whether the records were genuine or came from Binance. Researchers also questioned why so many different types of sensitive information would be offered together, raising the possibility that the listing contains recycled data or is simply a scam.
The advertised figure refers to lines of data, not necessarily individual Binance customers.
The timing is worth mentioning. Binance suffered a separate cryptocurrency theft on October 29, which we previously covered in our October 2026 crypto hacks report.
In its October 30 security update, Binance said it had found no evidence of leaked wallet private keys during that attack. The statement concerned the earlier theft, not the alleged data sale, and no connection between the two has been established.
What Does Binance Say?
Binance Customer Support has now responded directly to the listing. The company said it has found no evidence that customer identity records, account credentials, wallet private keys or its internal systems were compromised in connection with it.
Binance said it does not store passwords as plain text or hold private keys for users' external wallets. It also pointed to references to places where Binance no longer operates. These details led the company to question the claim, but it said it was still investigating.
The support account also warned users not to share passwords, two-factor authentication codes, seed phrases or private keys in response to suspicious messages.