Venues / Coinbase

Is Coinbase legit and safe?

The checklist

Custody: who holds your money

Exchange balances are held by Coinbase. Assets bought with DEX trading sit in the user's self-custody wallet inside the Coinbase app, not with Coinbase.

Who backs Coinbase

• IVP (lead), with Spark Capital, Greylock, Battery Ventures, Section 32, Draper Associates — $100,000,000 (2017-08) source
• Tiger Global (lead), with Y Combinator Continuity and Wellington Management — $300,000,000 (2018-10) source

Incidents

• 2023-01-04: NYDFS settlement over compliance failures. New York's financial regulator found Coinbase failed to track and report suspicious activity (a backlog of 100,000+ unreviewed monitoring alerts by late 2021). Coinbase agreed to a $50M penalty and to invest a further $50M in its compliance program over two years. source
• 2023-06: SEC lawsuit (later dismissed). The SEC sued Coinbase in June 2023, alleging it operated as an unregistered securities exchange, broker and clearing agency. On 2025-02-27 the SEC filed a stipulation to dismiss the case with prejudice; it said the dismissal did not reflect a position on the merits. source
• 2025-05-14: Customer data breach via bribed support agents. Coinbase disclosed in an SEC 8-K that criminals bribed overseas support staff to copy customer data from support tools (activity began 2024-12-26). The data covered 69,461 customers: names, addresses, emails, phones, masked SSN/bank data, ID images and balances. No passwords, private keys or funds were exposed. Coinbase refused a $20M ransom and estimated $180M-$400M in remediation costs. source

Real downsides

• Simple trades combine a variable spread with a variable Coinbase fee, and no fixed % is published.
• Simple limit orders carry an extra 1% execution fee, which Coinbase One does not waive.
• DEX trades can add a separate service fee, which Coinbase One does not cover.
• In May 2025, bribed support agents leaked data of 69,461 customers.

Can you use it where you live?

DEX trading launched to US users excluding New York State (Aug-Oct 2025), then expanded to more markets, such as Brazil from Nov 2025. Coinbase runs separate EEA terms and a UK site; product availability varies by region. Referral links are not valid for UK or Turkey residents. (source)

We report what the venue's own terms say. Don't use a VPN to get around restrictions; venues can freeze accounts that do.

How to use Coinbase without getting scammed

• Only open www.coinbase.com — fake lookalike sites and "support" DMs are the most common way people lose funds on any trading venue.
• Never share a seed phrase or private key. No real support agent will ask for one.
• A referral code only changes your fee and who gets a share of it. It never needs your keys.
• Treat every new memecoin as able to go to zero. A legit venue does not make the coins on it safe.

Comparing options? See the full Coinbase sheet or Binance, Bybit, OKX.