Coinbase's 'Please Hand Over Your Seed Phrase' Page Sends Security Gurus Into Orbit

Security sleuths are collectively doing a spit-take over a live Coinbase Commerce page that casually asks users to type their entire 12-word seed phrase into a text box, as if it's a pizza order. It’s the kind of move that makes you check if you’ve accidentally wandered onto a .biz domain from 2003.

SlowMist founder Evilcos sounded the alarm, stating he’s utterly baffled as to why Coinbase would host this page, admitting he initially assumed the subdomain had been pwned. It’s the crypto equivalent of seeing a bank teller wearing a ski mask and hoping it’s just a new uniform policy.

Blockchain detective ZachXBT echoed the concern, pointing out that the page is a gift-wrapped social engineering tool for any scammer with a clipboard. It's a masterclass in how to make phishing look official, no sketchy Discord DMs required.

For the uninitiated, social-engineering scams are the art of convincing someone to willingly hand over the keys to the kingdom, using trust, fear, or fake urgency instead of complex code. Think of it as a con artist, not a hacker, and this page is their perfect prop.

This all unfolds as Coinbase is herding Commerce users toward its Business platform, setting a "use-it-or-lose-it" deadline of March 31, 2026, for moving funds. They’ve generously provided two exit strategies, because nothing says "migration" like multiple confusing paths.

Option one is their recommended commerce withdrawal tool, which consolidates funds and scans your old Commerce addresses. It’s the designated driver method—potentially boring, but statistically less likely to end in disaster.

The other option, the source of the current facepalming, invites users to directly import their seed phrase on the Coinbase page itself. The accompanying blog blithely suggests you can then pop that phrase into a compatible wallet like Coinbase Wallet or MetaMask, a bit like suggesting you carry your life savings in a transparent bag because you have a good wallet at home.

For merchants, especially those dealing in Bitcoin or other UTXO-based assets, Coinbase is strongly pushing the first, non-seed-sharing tool before the 2026 cutoff. It’s the closest thing to sensible advice in this whole saga, like a bartender cutting you off before you make a truly legendary mistake.

When asked for comment by BeInCrypto, Coinbase maintained a silence so profound it could be heard across the entirety of Crypto Twitter. The crickets are currently drafting their own security audit.