The Bitget hack reported as occurring in September 2026 is a reminder for Canadian crypto users to be cautious about account security and urgent messages. The available description does not confirm what happened, which accounts may be affected, or whether customers lost funds, so do not treat claims about the incident as verified instructions to act.
Bitget hack: what the scam risk looks like
A security incident involving a crypto exchange can lead to confusion and create an opening for criminals. They may pretend to be the exchange, a support agent, a security specialist or someone who can recover stolen cryptocurrency. Their aim may be to get account credentials, verification codes, access to a device, or a payment.
A message that mentions the Bitget hack is not proof that it came from Bitget or that your account is affected. Fraudsters can use a real or reported incident to make a message feel urgent and personal. They may contact people by email, text, social media, messaging apps or phone, and they can make a message appear to come from a familiar sender.
Be particularly wary of anyone who says they can return cryptocurrency for an upfront fee, asks you to move coins to a “safe” wallet, or tells you to share a password or one-time verification code. Do not install software or give remote access to a device because someone claims it is needed to secure an account.
If you hold crypto through an exchange, review your account using the app or website you normally use, reached independently rather than through a message link. Check official service notices and contact support through the service’s verified channels. Do not assume that a social media account, search result, or sponsored post is an official source.
Red flags to watch for
- Pressure to act immediately: A stranger says you must transfer funds, change a wallet address, or share a code right away to prevent a loss.
- Requests for secret information: Someone asks for your password, recovery phrase, private key, verification code, or a screenshot that reveals account details.
- Unexpected recovery offers: A person claims they can trace or retrieve lost crypto in exchange for a fee, a deposit, or access to your account.
- Links or attachments in an unexpected message: The message asks you to sign in, download an app, open a file, or connect a wallet. Instead, open the official service directly using a route you already trust.
- A request to move funds: A supposed support agent says your coins must be sent to a different wallet for protection or verification. Treat an unsolicited transfer instruction as a serious warning.
- Unusual payment methods: Someone asks for crypto, gift cards, a wire transfer, or another hard-to-reverse payment to investigate or fix an account problem.
- Claims that cannot be checked independently: The person discourages you from contacting the exchange through its normal support process, or tells you to keep the conversation secret.
- Lookalike accounts and websites: A familiar name or logo is not enough to establish that a profile, web page, or message is genuine. Check the address and account through a trusted route.
What to do if you’ve been targeted
- Stop communicating through the suspicious contact. Do not click more links, reply with codes, send funds, or install software. If you already opened a link, do not enter more information on that page.
- Use a trusted device and independently reached account channels. Sign in only through the official app or website you normally use. Check account activity, security notices and withdrawal history, if available. Do not use a link supplied by the person who contacted you.
- Secure your email account first if it may be exposed. Change its password from a trusted device, choose a unique password, and enable multi-factor authentication where available. Email access can be used to reset passwords on other accounts.
- Change affected passwords and review access. If you entered a password or reused it elsewhere, change it on each affected account. Sign out unfamiliar sessions and revoke access you do not recognize, using the service’s normal security settings.
- Contact the exchange through verified support channels. Explain what happened and ask what steps are available for your account. Do not rely on a reply from an unsolicited social media account or pay someone who promises a guaranteed recovery.
- Contact your bank or payment provider if money or banking details are involved. Ask whether a payment can be stopped, recalled or otherwise addressed. If you shared card, bank or identity details, tell the institution what was exposed and follow its advice.
- Preserve evidence. Keep messages, email headers if available, usernames, wallet addresses, transaction records and screenshots. Do not delete the conversation before recording details that may help your bank, police or the Canadian Anti-Fraud Centre.
- Check your devices. If you installed software or gave someone remote access, disconnect from the session and seek help removing it. From a separate trusted device, change important passwords and check for unfamiliar account activity.
- Warn people who may be contacted through you. If your email or social accounts were accessed, tell close contacts through another channel not to trust unexpected requests for money or codes that appear to come from your account.
How to report a crypto exchange incident
Report suspected fraud to the Canadian Anti-Fraud Centre online or by calling 1-888-495-8501. You can report an attempted scam even if you did not lose money. Include the contact details, messages, payment information and any other evidence you saved.
Contact your local police service if money was taken, your account was accessed without permission, or you experienced threats or identity misuse. If funds or banking details are involved, contact your bank or payment provider promptly as well. Keep a record of when you reported the incident and any file or reference number you receive.
For general cyber-safety guidance, visit the Government of Canada’s Canadian Centre for Cyber Security. If someone contacts you claiming to resolve the Bitget hack or recover crypto, verify the claim independently and do not provide account secrets or send a payment to prove ownership.
Reviewed by our editorial team on .
The Scam Alert Team tracks fraud targeting Canadians and turns official warnings into clear, practical advice. Our team has a background in IT and cybersecurity, and every article is fact-checked against official sources before publication. How we verify alerts