Binance APK Download: The Official File Is 321 MB and Version 3.22.4. Check This Signature Before You Install

What is inside the official file

We requested only the parts of the file that identify it, so we did not download all 321 MB.

Binance keeps a second APK on another of its hosts, ftp.binance.com/pack/Binance.apk. That one is 314,523,016 bytes, about 6.6 MB smaller, and it was last changed at 15:01 SGT the same day. It carries the same version name and the same certificate. So file size tells you very little. Two genuine files differ in size, and a fake can be padded to any size it likes.

Our reading shows who signed the file. It does not prove every byte is intact, which is the job of the check further down. We also could not open a Binance page that publishes this fingerprint, because www.binance.com/en/download returns an empty HTTP 202 to scripts. Treat the value as what we read on November 9, and not as a statement from Binance.

Google Play, App Store or APK

The Google Play listing shows more than 100 million downloads. The App Store row comes from Apple's public lookup for the Turkish storefront, since the US lookup returned no result for this app.

The direct file has not changed since October 26, while the Play listing moved on October 30. That gap is the practical reason to prefer the store: an APK sits still until you replace it. Version numbers may not line up across iPhone and Android, so 3.23.1 against 3.22.4 alone does not prove the Android file is one release behind.

An APK is an Android package, so it is no use on an iPhone. iPhone users go through the App Store listing and check the seller name. Our earlier guide to finding the official Binance app covers the store routes and the separate authenticator download.

How to check the signature on a computer

Android's apksigner tool ships with the Android SDK Build Tools, and Google's documentation describes its verify command. Copy the APK to a computer and run:

apksigner verify --print-certs Binance.apk

Then check three things:

1. The output reports no verification error.
2. The SHA-256 digest of the signer's certificate matches the fingerprint in the table. The tool may print it without colons, so 64d9e9657ce3 is how it starts.
3. The certificate holder reads CN=Binance Tech, O=Binance.

If the digest differs, delete the file and do not open it. A file with Binance in its name and the right logo proves nothing, and neither does a link forwarded in a Telegram group.

Without a computer you cannot run this check in the normal way. That is one more reason to use the store if you can.

What a fake app can do on your phone

Kaspersky's BeatBanker research, published March 10, 2026, shows why this matters. The campaign started with a counterfeit site that looked like Google Play and offered a fake app posing as the portal of Brazil's social security institute, INSS. All the variants Kaspersky found were on victims' phones in Brazil.

Once it had accessibility permission, the banking module watched for the official Binance app by its package name, com.binance.dev. When the user tried to withdraw USDT, it drew a realistic page over the confirmation screen, replaced the destination with the attacker's address and showed the victim the address they had copied.

So the Binance app in this attack was genuine. The thief was a different app, and checking the Binance file alone would not have caught it. Three checks follow from that:

• Review which apps hold accessibility permission and remove any you cannot explain, especially anything installed from a link.
• Keep Google Play Protect on. Google says it is on by default, checks apps from other sources, and can warn about or remove harmful ones.
• After a withdrawal, compare the address in your history with the one you meant to use, and start with a small test amount when the destination is new.

Google is also tightening this route. Its developer verification timeline says protections began on September 30, 2026 for people installing from participating stores in Brazil, Indonesia, Singapore and Thailand on certified devices running Android 7 or later, with a global rollout planned for 2027. We did not test how this affects the Binance APK on a device in those countries.

Checking links and messages

Scam messages often push an APK as the fix for a problem: a compensation claim, a "required security update" or a locked account. Binance runs a checker for these. Binance Verify tests a URL, email address, phone number or social handle, and needs no account.

It has limits. Binance's own phishing guide warns that scammers spoof sender addresses to look like binance.com, and says to stay careful even when a source shows as verified. Its stronger suggestion is an anti-phishing code: once set, genuine Binance emails carry it.

Installing over an existing copy

Android compares certificates when it installs an update, and an update signed differently needs a different package name. If the phone refuses to install the APK over a store copy, read that as a possible signature mismatch. We did not check the certificate on the Play-delivered build, so we cannot tell you the two match. Before removing a working copy to get around the error, make sure you still have your 2FA and login recovery in hand.

A newer app does not reopen a closed withdrawal network, either. On November 8 we counted 218 of 531 coins on Binance with no open withdrawal route. Check the coin and network on screen before you move funds.

If you are opening a new account

Create the account first and then log in on the app. Code 11350287 returns 25% of your Binance trading fees, settled hourly, according to our partner registry. At the 0.1% spot fee, a $1,000 trade costs $1, and 25% of that is $0.25 back. The rebate applies to the fee and never to the trade amount. Store buttons, the APK button and the code are all on our Binance app page, and fees and products are on our Binance profile.

Quick answers

Where do I download the official Binance APK?

Our Binance app page has a button that leads to the file on download.binance.com. Google Play and the App Store are the better first choice when your device has them.

What is the current Binance APK version?

The file we read on November 9 is version 3.22.4, last changed on October 26. Run the signature check again on any later file, because the version will change.

Is the size a good way to spot a fake?

No. We found two files on Binance hosts with the same certificate, 321.1 MB and 314.5 MB. Use the fingerprint.

Which package name should I look for?

com.binance.dev on both the Play listing and the APK. Binance TR, the separate Turkish app, is com.cloud.tr on Google Play.

Can I install the APK on an iPhone?

No. It is an Android package. Use the App Store listing from Binance Switzerland AG.

What we could not confirm

• Whether Binance publishes this fingerprint on a page we could open.
• Whether the build delivered by Google Play uses the same certificate.
• Whether Binance's two APK hosts will keep serving the same version.
• How Google's developer verification treats this file on a phone in Brazil or Indonesia.