Is Coinbase Safe?
Independent assessment — custody, insurance, regulatory history, 2023-2025 SEC litigation.
Short answer
Coinbase is the safest regulated US crypto exchange by most measurable criteria: public company (NASDAQ: COIN), FinCEN MSB registration, NY BitLicense, 40+ state money-transmitter licences, segregated customer crypto custody at Coinbase Custody Trust (NY-chartered trust), FDIC pass-through on USD. Crypto itself is not FDIC insured. The 2023 SEC lawsuit was largely resolved by late 2025. For large long-term holdings, self-custody (hardware wallet) remains more sovereign than any exchange.
Regulatory status
Coinbase Global Inc. is a US public company listed on NASDAQ under ticker COIN. It operates:
- FinCEN Money Services Business (MSB) registration for the US.
- New York BitLicense issued by NYDFS — the strictest US state regulator for crypto.
- Money-transmitter licences in 40+ US states.
- Coinbase Custody Trust Company, LLC — a New York State-chartered limited-purpose trust company. This is the entity that holds customer crypto.
- International subsidiaries in Ireland (EU), Germany (BaFin), UK, Singapore, Canada.
This is the most extensive regulatory footprint of any US crypto platform.
Custody model
Customer crypto is held at Coinbase Custody Trust, which is a qualified custodian under NY banking law. A qualified custodian structure means customer assets are segregated from Coinbase's corporate balance sheet — they are not loaned out, not used to collateralise Coinbase's own obligations, and in a bankruptcy scenario are not property of the bankrupt estate. This is materially stronger than Celsius-era "commingled pool" structures that collapsed in 2022.
That said: (a) approximately 1-2% of customer crypto is held in hot wallets for operational liquidity, covered by Coinbase's private insurance policy; (b) even "qualified custodian" protection depends on bankruptcy-court application of securities-law principles to crypto, which is not fully tested in US courts.
Insurance
- USD cash balances: held at partner banks with FDIC pass-through insurance up to $250,000 per customer.
- Crypto: NOT covered by FDIC or SIPC. Coinbase holds a private insurance policy that covers certain losses from theft or breach of hot wallets. Policy terms are not fully public.
The 2023 SEC lawsuit
In June 2023 the SEC filed suit against Coinbase alleging that several tokens listed on the exchange were unregistered securities under the Howey test. Coinbase contested vigorously, arguing that the SEC lacked clear rules and had not provided a workable registration path for crypto exchanges.
Over 2024-2025, US crypto legislation (the FIT21 Act and subsequent rules) clarified parts of the token-classification question, and court rulings in parallel cases (Ripple, Binance) narrowed what counts as a security in secondary-market trading. By late 2025, most of the SEC's claims against Coinbase had been dismissed, settled, or become moot under the new legislative framework. Coinbase continues to operate.
Users evaluating Coinbase in 2026 should view this as a resolved regulatory overhang, not an active solvency risk.
User-level security
Most losses at Coinbase happen at the individual-account level, not the platform level: SIM-swap attacks where an attacker takes over a user's phone number, SMS 2FA intercepted, or phishing captures the credential. Coinbase offers hardware-key 2FA (YubiKey, FIDO2) and a Vault feature (multi-signature, delayed-withdrawal). Use both.
Who Coinbase is safe enough for
Fine for: US users who need a regulated on-ramp/off-ramp, small-to-medium holdings, users who prefer a familiar UX, those who want integration with Coinbase Card or Coinbase One.
Not sufficient for: users holding large long-term positions they treat as savings. For those, move to a hardware wallet (Ledger, Trezor) — see best crypto wallets.
Compare to alternatives
See our full Coinbase exchange review, Coinbase vs Kraken, Binance vs Coinbase, Coinbase vs Revolut. For FDIC-insured crypto-friendly US banking, see FDIC-insured crypto banks.