要点
多重签名钱包需要多个私钥来对交易进行签名和授权，这为用户和企业提供了额外的安全保障。与多重签名钱包相关的骗局种类繁多，其中以 Tron 网络上的骗局最为常见。在一种常见的多重签名骗局中，诈骗者会向用户授予其钱包的部分访问权限，并诱骗用户转账支付所谓的交易手续费。为了防范多重签名骗局，用户应对个人信息进行严格保密，避免使用陌生人的助记词或私钥，并警惕欺诈性 App、邮件和网站。

简介
多重签名钱包非常适合需要团队协作或寻求额外安全保障的用户。但需要注意的是，诈骗者有时也会利用多重签名钱包来欺骗用户，窃取其加密货币。接下来，我们将详细了解多重签名钱包的运作机制，以及一些常见的多重签名骗局。
什么是多重签名钱包？
在加密货币领域，[多重签名](https://academy.binance.com/en/articles/what-is-a-multisig-wallet)钱包是一种需要多个私钥授权才能完成交易的钱包。这种机制类似于数字版的双重身份验证 ([2FA](https://academy.binance.com/en/articles/what-is-two-factor-authentication-2fa))，需要两个或多个授权（签名）才能进行交易。
多重签名钱包可以设置不同的授权要求，例如“3 个密钥需 2 个授权”或“5 个密钥需 3 个授权”等。这种设计类似于金库的多重钥匙系统，没有获得其他人的授权，任何人都无法单独开启。
多重签名钱包通常应用于商业合作、去中心化自治组织 ([DAO](https://academy.binance.com/en/articles/decentralized-autonomous-organizations-daos-explained)) 以及合资企业。对于家族基金或希望进一步提升数字资产安全性的用户，多重签名钱包也是一个不错的选择。
多重签名钱包旨在提升安全性，那么不法分子是如何利用其机制设计骗局的呢？
什么是多重签名骗局？
这种骗局背后的逻辑并不复杂：诈骗者让受害者误以为他们可以完全掌控某一[加密货币钱包](https://academy.binance.com/en/articles/how-to-set-up-a-crypto-wallet)，而事实并非如此。以下是一名诈骗者在 YouTube 视频下方的评论示例：

您可能会在 YouTube、X、Telegram 等社交媒体平台上遇到此类骗局的多种形式，但万变不离其宗，这类消息通常都会包含[私钥](https://academy.binance.com/en/glossary/private-key)或[助记词](https://academy.binance.com/en/glossary/seed-phrase)。如果您是第一次接触此类信息，可能会误以为是新用户在寻求帮助，但务必提高警惕，切勿上当受骗。
多重签名骗局是如何运作的？
多重签名骗局的类型多种多样，而由于 Tron 多重签名钱包的特殊运作机制，此类骗局在 Tron 网络上尤为常见。
一些复杂的多重签名骗局会引诱用户为钱包设置多重签名，并将诈骗者添加为共同所有者。一旦诈骗者获得这一权限，他们就可以控制资金流向，甚至在某些情况下直接窃取用户的资产。
此类骗局通常与[网络钓鱼](https://academy.binance.com/en/articles/what-is-phishing)或冒名顶替的诈骗手段相结合。诈骗者可能会伪装成值得信赖的客服人员来骗取受害者的信任。
然而，最常见的多重签名骗局要简单得多。这些骗局通常不需要受害者泄露助记词或私钥，而是引诱受害者向诈骗者进行加密货币转账，通过其多重签名钱包骗取资金。以下是一个典型案例。
SafePal 多重签名骗局诱饵
为了说明此类骗局的运作方式，我们以上述 YouTube 评论中提供的助记词为例进行说明。首先，用户需要安装 SafePal 钱包插件，并使用诈骗者提供的助记词导入其钱包。
打开钱包后，我们可以看到，诈骗者在 Tron 网络上持有 2,022 [USDT](https://academy.binance.com/en/articles/what-is-tether-usdt)（TRC-20 代币）。此时，大多数受害者会尝试将这些 USDT 从诈骗者的钱包转出。

然而，钱包中并没有足够的 TRX 来支付交易手续费。这时，受害者可能会相信只需向诈骗者的钱包转入少量 TRX，就能顺利提走这些 USDT。
诈骗者的目标是引诱那些试图窃取资金的贪婪受害者。这些受害者通常急于操作，会迅速向诈骗者的钱包发送加密货币来支付手续费。然而，当受害者转账后，很快就会发现无法完成交易，因为这是一个多重签名钱包。
在多重签名钱包中，完成转账需要多个私钥（[签名](https://academy.binance.com/en/articles/what-is-a-digital-signature)）的共同授权。即便受害者拥有一个密钥，也无法单独完成交易签名。
值得庆幸的是，此类骗局的受害者通常只会损失少量用于支付 [Gas 费](https://academy.binance.com/en/glossary/gas)的加密货币。然而，之前提及的更复杂的多重签名骗局可能会直接瞄准您的加密货币钱包，导致更严重的损失。
核实诈骗者的钱包地址
如果我们在 TronScan [区块链浏览器](https://academy.binance.com/en/articles/how-to-use-a-bitcoin-blockchain-explorer)中搜索诈骗者的钱包地址（以 Kk78Z 结尾），会发现该账户实际上受另一个地址（以 bHCoc 结尾）控制。这正是 Tron 网络上的多重签名钱包的特点。

Tron 多重签名钱包可以通过多种方式进行设置。钱包的权限可根据分配给每个多重签名账户的权重进行自定义。
在上述示例中，诈骗者的账户（以 bHCoc 结尾）拥有多重签名钱包的完全访问权限（即“所有者权限”），而用于引诱受害者的钱包账户（以 Kk78Z 结尾）仅具有有限的功能。
如何防范多重签名骗局
为了防范多重签名骗局及其他类型的诈骗，您应该对个人信息进行严格保密，避免使用陌生人的助记词或私钥，并警惕钓鱼邮件和网站。
1. 妥善保管私钥和助记词
任何合法的公司、钱包供应商或加密货币交易平台都不会要求您提供私钥或助记词。请务必妥善保管这些信息，切勿与他人分享。
2. 仅使用官方钱包 App 和软件
请确保只使用来自可信官方渠道的钱包软件和 App。目前市面上存在许多假冒的加密货币钱包和交易平台，在使用前请务必核实网址并验证 App 的真实性。
3. 定期审查钱包权限
对于多重签名钱包用户，建议定期检查谁有权限访问您的钱包。您可以在大多数钱包的设置中查看权限。如果发现未经授权的签名，请立即删除。您还应该删除不再使用的 [DeFi](https://academy.binance.com/en/articles/the-complete-beginners-guide-to-decentralized-finance-defi) App 的权限。
4. 使用硬件钱包提升安全性
[硬件钱包](https://academy.binance.com/en/articles/ten-tips-for-using-a-hardware-wallet-securely)是一种可以离线存储加密货币的物理设备。即使您的多重签名设置被破坏，攻击者若没有通过硬件钱包进行物理确认，仍无法转移您的资金。
5. 启用双重身份验证 (2FA)
大多数钱包供应商和交易平台均提供[双重身份验证](https://academy.binance.com/en/articles/what-is-two-factor-authentication-2fa) (2FA) 功能。启用这一设置可以有效增强安全保护，防止您的钱包遭到未经授权的访问。
6. 随时了解最新信息
加密货币安全领域发展迅速，新的骗局和攻击手段层出不穷。密切关注最新信息，了解最新威胁与最佳安全实践至关重要。
7. 钱包警告
遗憾的是，辨别一个钱包是否为多重签名钱包并不容易。但是，随着诈骗行为日益猖獗，部分钱包供应商增加了安全功能，提醒用户警惕存在潜在风险的钱包。
以下是来自 SafePal 和 [Trust Wallet](https://academy.binance.com/en/articles/what-is-trust-wallet) 的警告示例，提示用户资金已被冻结。

结语
多重签名钱包可以提升加密货币交易的安全性，但诈骗分子也在其中找到了可乘之机。从网络钓鱼到交易手续费陷阱，各类诈骗手段层出不穷，了解这些套路能够有效保护您的资产安全。
养成良好的安全习惯至关重要。请妥善保管私钥，定期检查钱包权限，并在点击任何链接或进行转账前仔细甄别是否存在诈骗风险。时刻保持警惕，关注最新信息，您就可以更安心地使用多重签名钱包，远离骗局威胁。
延伸阅读
[五种方法提高币安账户的安全性](https://academy.binance.com/en/articles/5-ways-to-improve-your-binance-account-security)[什么是多重签名钱包？](https://academy.binance.com/en/articles/what-is-a-multisig-wallet)[币安如何打击金融犯罪](https://academy.binance.com/en/articles/how-binance-fights-financial-crime)
免责声明：本文内容按“原样”提供，仅作一般资讯及教育用途，不构成任何陈述或保证。本文不构成财务、法律或其他专业建议，且无意建议购买任何特定产品或服务。您应自行向合适的专业顾问寻求建议。如本文由第三方投稿，请注意本文观点属于第三方投稿人，不一定反映币安学院的观点。欲知详情，敬请点击[此处](https://academy.binance.com/en/articles/disclaimer)阅读免责声明全文。数字资产价格可能会波动。您的投资价值可能会下跌或上涨，且您可能无法收回投资本金。您应全权负责自己的投资决策，币安学院对您可能遭受的任何损失概不负责。本文不构成财务、法律或其他专业建议。欲知详情，敬请参阅我们的[《使用条款》](https://www.binance.com/en/terms)和[《风险提示》](https://www.binance.com/en/risk-warning)。

Introduction

Security is a top priority at Binance. While we do everything to keep your account secure, you also have the power to greatly increase the security of your Binance account. 

In this article, we describe a few simple steps that you can take to secure your account, along with general good habits that you should keep in mind. Just like you, it’s in our interest to keep your account safe. The blockchain industry is growing fast, so creating a more secure environment will benefit us all.

So what are the steps you can take to increase the security of your Binance account?

1. Use a strong password and change it regularly

This may sound quite obvious, but it’s an essential step for securing your Binance account. You should use strong and unique passwords for every one of your accounts on the Internet. This is especially true for those that hold value – like your cryptocurrency exchange account. Ideally, these passwords should be more than eight characters long, containing both uppercase and lowercase letters, numbers, and special characters.

One of the best ways to generate, manage, and store secure passwords are password managers. This way, you can hold and manage your different passwords in a secure and convenient way, all in the same place. Most password managers will employ sophisticated encryption mechanisms to provide an additional layer of protection. Be sure to only use trusted password manager software, and of course, create a strong master password.

Having a strong password is an excellent first step, but it doesn’t mean you’re set forever. It’s also good practice to change your passwords regularly, as attackers may have ways to obtain your passwords regardless. This is not only true for your Binance account, but also your email associated with your Binance account. 

While we’re at your email, here’s another point to consider – it’s beneficial to use different email addresses for different accounts. This way, you can mitigate some of the potentially detrimental effects of data breaches. Especially if you’re using an old email account, there’s a high chance that it has been part of a breach in the past. However, if you’re using dedicated email addresses for each service, there’s a smaller chance that a breach will affect multiple of your accounts. The website Have I Been Pwned is a great resource to check if any of your accounts were ever the victim of a data breach.

Please note that once you change the password of your Binance account, you won’t be able to withdraw funds in the following 24 hours. This is to prevent potential attackers from locking you out of your account while withdrawing your funds.

2. Enable Two-Factor Authentication (2FA)

Activating Two-Factor Authentication (2FA) should be among the first things you do after creating a Binance account. Binance supports two types of 2FA: SMS and Google Authentication. Out of these two, we recommend Google Authenticator. Just make sure to write down your reset key in case you need to transfer your 2FA codes to a new mobile phone.

While SMS authentication may be easier to use, it’s deemed less secure than Google Authenticator. SIM swapping is a real threat, and some high profile accounts have been a victim of this technique. In 2019, Twitter CEO Jack Dorsey was hacked with this method, leaving attackers free reign over his Twitter account with millions of followers.

These aren’t the only ways to secure your account with 2FA. We’ll shortly discuss another method called Universal 2nd Factor (U2F) authentication. It involves a secure hardware device that protects your account. And good news, Binance supports that too!

3. Check the list of devices authorized to access your account

You can check the devices that are authorized to access your Binance account in the Device Management tab. When using the Binance app, you can find this tab under the “Account” tab. 

If you see any devices you don’t recognize or don’t use anymore, remove them. Once you remove a device, it won’t be able to access your account again, unless you re-allow it through an email confirmation. As we’ve discussed earlier, this is why the security of your email account is also of paramount importance.

You can also check account activity, that is, what IP address was your account accessed from and when. If you see anything suspicious, immediately disable your account. This will suspend trading and withdrawals, delete all your API keys, and remove all devices that can access your account.

4. Manage your withdrawal addresses

Your Binance account has a security feature called Address Management. It allows you to limit the wallet addresses that you can withdraw funds to. If you turn this on, each newly added address will require an email confirmation to be added to the whitelist.

To reiterate, this is why keeping your email account secure is so critical! It’s the foundation of your online security.

Can’t decide what crypto wallet to withdraw your funds to? You could try out Trust Wallet, it’s an excellent choice if you’re looking for a secure software wallet for your mobile phone. You could also invest in a hardware wallet to keep your private keys offline.

5. Learn about phishing

Phishing is a type of attack where a malicious actor tries to pose as someone else (for example, a business) to obtain your personal information. It’s one of the most common attacks out there, and you should be wary of it.

As a general rule of thumb, it’s best to only visit Binance from a saved bookmark instead of typing the address each time. If you haven’t already, feel free to bookmark the link right now: https://www.binance.com. With this simple step, you can already avoid a good chunk of the fake Binance websites that aim to trick you into getting access to your account information.

The Anti-Phishing Code feature allows you to set a unique code to be included in all your Binance notification emails. By enabling the Anti-Phishing code, you’ll be able to tell if the notification emails you’re receiving from Binance are genuine. If you’d like to learn more about how to use it, check out our Anti-Phishing Code Guide.

Would you like to learn about other ways to avoid phishing? Check out What is Phishing?. 

6. Follow API security guidelines

The Binance API is an excellent way for more advanced traders to maximize their experience with the Binance trading engine. The Binance API allows you to create custom trading strategies. 

However, using API keys brings some risks because you’re allowing your data to be shared with external applications. When you’re using the Binance API, you should consider restricting access based on IP address. This way, only the whitelisted IP addresses will be enabled. You should also consider changing your API keys regularly, and avoid giving your keys to external parties.

7. Use Universal 2nd Factor (U2F) Authentication

Binance supports U2F-compatible authenticators, such as the Yubico YubiKey. These devices will grant you access to your account only if they’re plugged in to your computer or paired wirelessly.

You could think of this device as similar to your Google Authenticator, but instead of a piece of software, it’s a piece of hardware. This means that accessing your account requires physical access to this hardware as well.

Closing Thoughts

Keeping your Binance account secure is an important consideration. We went through some of the simple steps you can take to protect your account and keep hackers from accessing your precious bitcoins and altcoins.

If you’d like to check your current security level, go to your Security dashboard. If you’re using the Binance app, go to the “Security” section of your “Account” tab.

If you’d like to learn more, check out our other articles on security-related topics!

Introduction

Security is a top priority at Binance. While we do everything to keep your account secure, you also have the power to greatly increase the security of your Binance account. 

In this article, we describe a few simple steps that you can take to secure your account, along with general good habits that you should keep in mind. Just like you, it’s in our interest to keep your account safe. The blockchain industry is growing fast, so creating a more secure environment will benefit us all.

So what are the steps you can take to increase the security of your Binance account?

1. Use a strong password and change it regularly

This may sound quite obvious, but it’s an essential step for securing your Binance account. You should use strong and unique passwords for every one of your accounts on the Internet. This is especially true for those that hold value – like your cryptocurrency exchange account. Ideally, these passwords should be more than eight characters long, containing both uppercase and lowercase letters, numbers, and special characters.

One of the best ways to generate, manage, and store secure passwords are password managers. This way, you can hold and manage your different passwords in a secure and convenient way, all in the same place. Most password managers will employ sophisticated encryption mechanisms to provide an additional layer of protection. Be sure to only use trusted password manager software, and of course, create a strong master password.

Having a strong password is an excellent first step, but it doesn’t mean you’re set forever. It’s also good practice to change your passwords regularly, as attackers may have ways to obtain your passwords regardless. This is not only true for your Binance account, but also your email associated with your Binance account. 

While we’re at your email, here’s another point to consider – it’s beneficial to use different email addresses for different accounts. This way, you can mitigate some of the potentially detrimental effects of data breaches. Especially if you’re using an old email account, there’s a high chance that it has been part of a breach in the past. However, if you’re using dedicated email addresses for each service, there’s a smaller chance that a breach will affect multiple of your accounts. The website Have I Been Pwned is a great resource to check if any of your accounts were ever the victim of a data breach.

Please note that once you change the password of your Binance account, you won’t be able to withdraw funds in the following 24 hours. This is to prevent potential attackers from locking you out of your account while withdrawing your funds.

2. Enable Two-Factor Authentication (2FA)

Activating Two-Factor Authentication (2FA) should be among the first things you do after creating a Binance account. Binance supports two types of 2FA: SMS and Google Authentication. Out of these two, we recommend Google Authenticator. Just make sure to write down your reset key in case you need to transfer your 2FA codes to a new mobile phone.

While SMS authentication may be easier to use, it’s deemed less secure than Google Authenticator. SIM swapping is a real threat, and some high profile accounts have been a victim of this technique. In 2019, Twitter CEO Jack Dorsey was hacked with this method, leaving attackers free reign over his Twitter account with millions of followers.

These aren’t the only ways to secure your account with 2FA. We’ll shortly discuss another method called Universal 2nd Factor (U2F) authentication. It involves a secure hardware device that protects your account. And good news, Binance supports that too!

3. Check the list of devices authorized to access your account

You can check the devices that are authorized to access your Binance account in the Device Management tab. When using the Binance app, you can find this tab under the “Account” tab. 

If you see any devices you don’t recognize or don’t use anymore, remove them. Once you remove a device, it won’t be able to access your account again, unless you re-allow it through an email confirmation. As we’ve discussed earlier, this is why the security of your email account is also of paramount importance.

You can also check account activity, that is, what IP address was your account accessed from and when. If you see anything suspicious, immediately disable your account. This will suspend trading and withdrawals, delete all your API keys, and remove all devices that can access your account.

4. Manage your withdrawal addresses

Your Binance account has a security feature called Address Management. It allows you to limit the wallet addresses that you can withdraw funds to. If you turn this on, each newly added address will require an email confirmation to be added to the whitelist.

To reiterate, this is why keeping your email account secure is so critical! It’s the foundation of your online security.

Can’t decide what crypto wallet to withdraw your funds to? You could try out Trust Wallet, it’s an excellent choice if you’re looking for a secure software wallet for your mobile phone. You could also invest in a hardware wallet to keep your private keys offline.

5. Learn about phishing

Phishing is a type of attack where a malicious actor tries to pose as someone else (for example, a business) to obtain your personal information. It’s one of the most common attacks out there, and you should be wary of it.

As a general rule of thumb, it’s best to only visit Binance from a saved bookmark instead of typing the address each time. If you haven’t already, feel free to bookmark the link right now: https://www.binance.com. With this simple step, you can already avoid a good chunk of the fake Binance websites that aim to trick you into getting access to your account information.

The Anti-Phishing Code feature allows you to set a unique code to be included in all your Binance notification emails. By enabling the Anti-Phishing code, you’ll be able to tell if the notification emails you’re receiving from Binance are genuine. If you’d like to learn more about how to use it, check out our Anti-Phishing Code Guide.

Would you like to learn about other ways to avoid phishing? Check out What is Phishing?. 

6. Follow API security guidelines

The Binance API is an excellent way for more advanced traders to maximize their experience with the Binance trading engine. The Binance API allows you to create custom trading strategies. 

However, using API keys brings some risks because you’re allowing your data to be shared with external applications. When you’re using the Binance API, you should consider restricting access based on IP address. This way, only the whitelisted IP addresses will be enabled. You should also consider changing your API keys regularly, and avoid giving your keys to external parties.

7. Use Universal 2nd Factor (U2F) Authentication

Binance supports U2F-compatible authenticators, such as the Yubico YubiKey. These devices will grant you access to your account only if they’re plugged in to your computer or paired wirelessly.

You could think of this device as similar to your Google Authenticator, but instead of a piece of software, it’s a piece of hardware. This means that accessing your account requires physical access to this hardware as well.

Closing Thoughts

Keeping your Binance account secure is an important consideration. We went through some of the simple steps you can take to protect your account and keep hackers from accessing your precious bitcoins and altcoins.

If you’d like to check your current security level, go to your Security dashboard. If you’re using the Binance app, go to the “Security” section of your “Account” tab.

If you’d like to learn more, check out our other articles on security-related topics!