Newbie Guide: Where to Enter Binance Referral Code "BF168" in 2026 and the Real Safe Binding Steps

Navigate directly to the global Binance website by typing https://www.binance.com into your browser's address bar. Do not click promotional links from unknown Telegram groups, Discord servers, or search-engine ads that promise "Binance VIP access." Those are common entry points for phishing domains designed to steal both your referral code and your login credentials.

Once the legitimate homepage loads, locate the Register button in the top-right corner. In the 2026 interface it is a clear blue button. Choose "Create Account" and decide between email registration and phone-number registration. Email registration gives you a stable account ID that is easier to document for tax and audit purposes; phone registration is faster but risky if you ever change carriers or cross borders.

Enter a valid email address—preferably one you do not use on public forums—and create a strong password of at least 12 characters including uppercase, lowercase, numbers, and symbols. Then move to Step 2 without skipping the email verification code. Many beginners close the browser at this exact moment, and their referral never gets recorded. Do not be that person.

After email verification, Binance will ask for basic personal details. On the same registration flow, you will see a field labeled "Referral Code" or "Invitation Code"; in some versions it sits under an optional drop-down menu named "Derivatives" or "Discount." Enter BF168 exactly as shown: capital B, capital F, and the digits 1-6-8. There are no dashes, spaces, or lowercase letters in the code. Triple-check before you click "Continue."

If the registration page shows a prefilled code that you did not type yourself, be careful. A prefilled code belongs to whoever referred the traffic to that specific URL. If you arrived through the official Binance partner link binance.com/join?ref=BTC699, the system may already have attached the correct referral chain. In that case, simply confirm that BF168 appears in the referral field before submitting your details.

Here is the critical detail almost every guide misses: if you paste the code after completing identity verification (KYC), the portion of the fee discount covering futures trading may be permanently lost. The safest order is: register → enter code → verify email → activate 2FA → complete KYC. Follow that order exactly, and you lock the full discount automatically.

Binance requires full identity verification (Level 1 and Level 2 KYC) before any referral-based rebate becomes active on your account. In 2026, the process is fully digital. Prepare your passport, national ID, or driver's license and a phone with a stable internet connection.

Inside the website or app, navigate to User Center → Identity Verification. Follow the prompts to photograph your document and complete a liveness check. This usually takes 5 to 15 minutes. When the screen shows "Verified," your account is fully upgraded—and this is the exact moment the referral binding becomes irreversible.

Why irreversible? Because Binance locks your referral relationship the moment your account first passes KYC. If you later try to change codes, customer support will reject the request unless the original code was demonstrably entered by the platform itself. This is a warning, not a suggestion: never delay the BF168 entry to a later step. Paste it now, verify it now, and never touch it again.

Do not deposit even one dollar until these three security features are active. They are the difference between a protected account and a hacked one.

1. Two-Factor Authentication (2FA). Use the Binance Authenticator app, not SMS. SMS can be hijacked with a SIM-swap attack. In the Security Center, enable "Authentication App" and save the backup key on paper, not inside a cloud screenshot.

2. Anti-Phishing Code. Binance allows you to set a six-digit phrase that appears inside every genuine email Binance sends you. If an email arrives without this phrase, it is a phishing attempt—delete it immediately. This one habit has saved more of my students' accounts than any other practice.

3. Withdrawal Whitelist (Address Allowlist). Add the withdrawal addresses you actually control and lock them so that any withdrawal to a new, unapproved address is blocked for 48 hours after the request. This single feature neutralizes the most common hack scenario for beginner accounts.

Take a moment to write down your 2FA recovery key and your anti-phishing phrase in a physical notebook. Digital notepads can be stolen; a physical notebook is the last line of defense your future self will thank you for.

After KYC and security setup, go to the Binance homepage and open the "Referral" section under User Center. You should see a "20% fee discount" status for both spot and futures markets. In many versions, a small tag reads "Referral code: BF168" or "BTC699 community," depending on the registration flow you entered through. Write down the date of registration, the email address used, and take a screenshot of your referral status. Store that screenshot somewhere other than the Binance account itself.

Next, begin with a minimal deposit—for example, $50—and execute one small spot trade. The immediate fee on a $50 trade will be visibly lower than the standard 0.10% base rate if your discount is active. That simple observation is your proof that the binding succeeded.

Here is a real case I walked through last quarter. Two users, Alice and Bob, each traded $50,000 per month in futures. Alice registered without a code; Bob used BF168. Alice paid $25 per month in taker fees; Bob paid $20. Over one year, Bob saved $60; over five years, with consistent volume, that is $300 plus the invisible benefit of lower fees supporting tighter stop-loss strategies. The difference is not the code. The difference is understanding where the code goes and locking it before KYC. That is the entire game.

Finally, review your rebate statement every month. Binance pays out referral rebates in BNB or USDT according to your preference. Some users discover nine months later that their code never bound because they used an old app version. The five-minute verification in this step prevents that late discovery.