Coinbase launches Transfer Protections for enhanced account security

Coinbase just rolled out a security feature that essentially lets users build their own speed bumps. Transfer Protections, launched June 16 as part of a broader system update, gives users configurable safeguards for crypto transfers and cash withdrawals, including time delays, daily transfer caps, and multi-party verification through trusted contacts.

The timing is not accidental. The crypto industry has been dealing with a rising tide of physical threats, sometimes called “wrench attacks,” where bad actors coerce victims into making transfers at gunpoint or under duress. Coinbase’s answer: make it so that even if someone forces you to initiate a transaction, the system itself pumps the brakes.

How Transfer Protections actually work

The feature is built around three core pillars: time delays, daily thresholds, and trusted contacts.

Time delays let users impose a mandatory review window on outgoing transfers, configurable from 6 to 48 hours. During that window, users can cancel the transaction before it completes.

Daily transfer thresholds work exactly how they sound. Users set a maximum daily transfer amount in their local currency. Any transaction that would push them over that limit triggers the additional protections. Setting the threshold to $0 applies protections to every single transaction, regardless of size.

Then there’s the trusted contacts system, which introduces multi-party verification. Users designate people they trust, friends, family, a business partner, whoever qualifies as someone who won’t be standing next to the attacker. When a transfer exceeds the daily threshold, those contacts receive an email with a generated approval code. Without that code, the transaction doesn’t go through.

Changing your trusted contacts isn’t a casual affair either. Modifications require 2-step verification and consensus among existing contacts.

Verification methods extend beyond trusted contacts to include passkeys, security keys, and authenticator apps.

The wrench attack problem

Transfer Protections address this by creating what amounts to a self-imposed institutional layer. By requiring time delays and third-party approvals, the feature makes it functionally impossible to drain an account under duress in real time. An attacker sitting across from you can’t wait 48 hours while your cousin in another state gets an email to approve the transfer.

Coinbase also built in comprehensive notification infrastructure. Users receive alerts via email, SMS, and push notifications for each transaction initiation and status update.

The feature is rolling out gradually and is not yet universally accessible to all Coinbase users. The broader system update that houses Transfer Protections also highlights products involving USDC.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.