Exchanges / Crypto.com
30-second risk check: Crypto.com
Crypto.com Risk Rating, Licences and Safety Review
crypto.com · Official site verified ↗Likely contracting entity: Foris DAX Asia Pte. Ltd.Major Payment Institution
Product and service-entity split · Elevated Risk
Is Crypto.com safe? Cexvia rates it Elevated Risk at 65/100.
For Singapore users, the mapped entity is Foris DAX Asia Pte. Ltd. under Major Payment Institution. Its strongest area is Regulatory & legal standing; the main observed concern is Asset & solvency transparency.
Evidence for this conclusion ↓Run the 15-point safety checklist ↗Cexvia Exchange Safety RatingA higher score means lower observed risk
Crypto.com65Elevated Risk
Asset & 46Security58Corporat68Regulatory & legal standing74Corporate transparency68Asset & solvency transparency46Security & incident history58Operations & user protection74
Crypto.com performs best in Regulatory & legal standing at 74/100. Its main risk is Asset & solvency transparency at 46/100.
- 01
Crypto.com uses different Foris DAX entities in Singapore, Malta and Dubai. The licence type and permitted activity differ by region. Evidence ↓
Selected: SG / Foris DAX Asia Pte. Ltd. · Verified 2026-07-27
Overall safety score65Elevated Risk
Checks completed5 / 5
Crypto.com Licences and Legal Entities
Which company operates Crypto.com in your region, and what licence does it hold?
Foris DAX entities cover digital-asset trading, while card and e-money products may be provided by other companies. The service entity must be checked product by product.
RegionContracting entityRegulatory recordScopeStatusChecked
What does the licence record actually verify?
- Named legal entity and jurisdiction
- Permitted or registered activities
- Current public-record status at the verification date
Does a licence guarantee that customer funds are safe?
- Protection against all asset loss
- Global coverage for every user or product
- Complete solvency or future regulatory status
Regulatory & legal standingComplete
74score / 100Weight 25% · Confidence 90%
Key entities in Singapore, Malta and Dubai are verifiable, but some products may be provided by other group companies.
- 3 key legal entities
- SG / MT / AE
- Product entity must be checked
Score contribution0.2 / 25
Why did this area receive this score?
Evidence supporting the score3 key legal entities · SG / MT / AE · Product entity must be checked
What users should watchKey entities in Singapore, Malta and Dubai are verifiable, but some products may be provided by other group companies.
What information is still missing?No material public-information gap currently affects this conclusion.
0 source records · Reviewed 2026-07-27Corporate transparencyPrimary evidence
68score / 100Weight 15% · Confidence 78%
Legal-entity and licence disclosures are relatively complete, but the private group does not publish one audited consolidated financial statement.
- Legal entities: disclosed
- Licence page: public
- Consolidated financials: unavailable
Score contribution0.1 / 15
Why did this area receive this score?
Evidence supporting the scoreLegal entities: disclosed · Licence page: public · Consolidated financials: unavailable
What users should watchLegal-entity and licence disclosures are relatively complete, but the private group does not publish one audited consolidated financial statement.
What information is still missing?Primary evidence
0 source records · Reviewed 2026-07-27Asset & solvency transparencyPrimary evidence
46score / 100Weight 20% · Confidence 88%
A Mazars reserve snapshot dated 7 December 2022 and user Merkle inclusion can be verified, but recent continuous coverage is unavailable.
- Snapshot: 2022-12-07
- Coverage: 9 tokens
- Recency: low
Score contribution0.1 / 20
Why did this area receive this score?
Evidence supporting the scoreSnapshot: 2022-12-07 · Coverage: 9 tokens · Recency: low
What users should watchA Mazars reserve snapshot dated 7 December 2022 and user Merkle inclusion can be verified, but recent continuous coverage is unavailable.
What information is still missing?Primary evidence
1 source records · Reviewed 2026-07-27Security & incident historyComplete
58score / 100Weight 15% · Confidence 90%
In 2022, 483 users experienced unauthorised withdrawals. Crypto.com said users were fully reimbursed and added a 24-hour delay for new withdrawal addresses.
- Affected users: 483
- BTC: 443.93
- ETH: 4,836.26
Score contribution0.1 / 15
Why did this area receive this score?
Evidence supporting the scoreAffected users: 483 · BTC: 443.93 · ETH: 4,836.26
What users should watchIn 2022, 483 users experienced unauthorised withdrawals. Crypto.com said users were fully reimbursed and added a 24-hour delay for new withdrawal addresses.
What information is still missing?No material public-information gap currently affects this conclusion.
1 source records · Reviewed 2026-07-27Operations & user protectionPrimary evidence
74score / 100Weight 25% · Confidence 69%
The withdrawal component was operational at the review point. The status page listed two unresolved incidents, while a recent EUR-channel delay had been resolved. Complaint evidence remains limited and is not treated as proof of safety.
- Withdrawals: operational
- Unresolved incidents: 2
- Support channel: connected
- Trust Score: 9 / 10
Score contribution0.2 / 25
Why did this area receive this score?
Evidence supporting the scoreWithdrawals: operational · Unresolved incidents: 2 · Support channel: connected · Trust Score: 9 / 10
What users should watchThe withdrawal component was operational at the review point. The status page listed two unresolved incidents, while a recent EUR-channel delay had been resolved. Complaint evidence remains limited and is not treated as proof of safety.
What information is still missing?Primary evidence
4 source records · Reviewed 2026-07-27Crypto.com Rating Explained
What raises or lowers the Crypto.com rating, and what remains unknown?
Missing information reduces confidence, but Cexvia does not treat an undisclosed fact as proof of wrongdoing.
Main factors in the Crypto.com rating
Regulatory & legal standing
740.2 weightedKey entities in Singapore, Malta and Dubai are verifiable, but some products may be provided by other group companies.
Operations & user protection
740.2 weightedThe withdrawal component was operational at the review point. The status page listed two unresolved incidents, while a recent EUR-channel delay had been resolved. Complaint evidence remains limited and is not treated as proof of safety.
Corporate transparency
680.1 weightedLegal-entity and licence disclosures are relatively complete, but the private group does not publish one audited consolidated financial statement.
Security & incident history
580.1 weightedIn 2022, 483 users experienced unauthorised withdrawals. Crypto.com said users were fully reimbursed and added a 24-hour delay for new withdrawal addresses.
Asset & solvency transparency
460.1 weightedA Mazars reserve snapshot dated 7 December 2022 and user Merkle inclusion can be verified, but recent continuous coverage is unavailable.
What should users verify before deciding?
Corporate transparency
Public evidence for Corporate transparency remains primary evidence, so this conclusion is less certain.
Asset & solvency transparency
Public evidence for Asset & solvency transparency remains primary evidence, so this conclusion is less certain.
Operations & user protection
Public evidence for Operations & user protection remains primary evidence, so this conclusion is less certain.
Scope limitation
Card and e-money services may be provided by other Foris entities outside these three exchange-service records.
Scope limitation
MiCA, MPI and VARA VASP licences are not interchangeable.
On-chain transparency
What can be observed on Crypto.com's public wallets?
Observed assets, stablecoin flows and wallet coverage for publicly identified Crypto.com addresses.
Verified wallet data has not been connected for this exchange yet.
View full on-chain data ↗Crypto.com Security Monitoring
Is Crypto.com affected by outages, hacks, phishing or complaint clusters?
9 risk-signal families tracked · 5 automated or configured · 4 require analyst review
Official service status
Statuspage components, maintenance and unresolved incidents can be fetched without credentials.
- Check frequency
- Every 5 minutes
- Rating impact
- Eligible after validation
Independent probes
Public API, homepage, DNS and TLS probes are configured.
- Check frequency
- Every 5 minutes
- Rating impact
- Context only
Security incidents
Status incidents and official security reports are retained as separate historical records.
- Check frequency
- Daily
- Rating impact
- Eligible after validation
Reserves and wallets
Published proof-of-reserves and user-verification methods are reviewed.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Account controls
Passkeys, MFA, FIDO2, anti-phishing codes and withdrawal allowlisting are documented.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Legal and regulatory
Regulator registers are reconciled against the Foris entity named in each product agreement.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Domain and phishing
Official-domain and certificate baselines are configured.
- Check frequency
- Daily
- Rating impact
- Context only
Vulnerability signals
Named-product and dependency matches are collected for analyst review.
- Check frequency
- Daily
- Rating impact
- Never scored directly
Verified complaints
Official support escalation and structured Cexvia complaint evidence are mapped.
- Check frequency
- On change + weekly review
- Rating impact
- Context only
Crypto.com Safety and Regulatory News
Has Crypto.com reported hacks, withdrawal problems or regulatory action?
Exchange Safety, Reserves and Withdrawals
Is Crypto.com safe? Check its reserves, security incidents and withdrawal risk.
Are reserves transparent and is solvency verifiable?
46/100A Mazars reserve snapshot dated 7 December 2022 and user Merkle inclusion can be verified, but recent continuous coverage is unavailable.
- Snapshot: 2022-12-07
- Coverage: 9 tokens
- Recency: low
Has the exchange suffered hacks or major security incidents?
58/100In 2022, 483 users experienced unauthorised withdrawals. Crypto.com said users were fully reimbursed and added a 24-hour delay for new withdrawal addresses.
- Affected users: 483
- BTC: 443.93
- ETH: 4,836.26
Are withdrawals working and are users protected?
74/100The withdrawal component was operational at the review point. The status page listed two unresolved incidents, while a recent EUR-channel delay had been resolved.
- Withdrawals: operational
- Unresolved incidents: 2
- EUR delay: resolved
- Support channel: connected
- Comparable sample: insufficient
Fund-storage guidance
Transaction-only exposure
- How to use it
- Use primarily for transactions and withdraw unnecessary balances.
- Higher-risk use
- Avoid using the exchange as a single long-term custody location.
- Why
- Regulatory & legal standing is the strongest observed area, while Asset & solvency transparency limits a stronger conclusion.
Account, Deposit and Withdrawal Checklist
Opening an account, holding funds or unable to withdraw? Start here.
- 01Verify the official domain and app publisher
- 02Confirm the legal entity named in the account agreement
- 03Check whether the selected product is covered in your region
- 04Start with the minimum deposit
- 05Test one withdrawal
- 06Enable strong account security
- 07Avoid keeping unnecessary long-term balances
Compare Exchange Safety
How does Crypto.com compare with other exchanges on risk and security?
ExchangeRiskScoreRegulatorySecurityConfidence
Before you deposit
Run the safety checklist for Crypto.com
Check the official domain, legal entity, licence, reserves, incident history and your exit route in one interactive worksheet.
FAQ
Questions about Crypto.com
Is Crypto.com safe?
Crypto.com is currently rated Elevated Risk at 65/100. This reflects observed public evidence and is not a guarantee of safety.
Is Crypto.com regulated?
3 legal-entity records are mapped in this Passport. Each record has a jurisdiction-specific status and scope.
Which entity serves the selected region?
Singapore: Foris DAX Asia Pte. Ltd. — Major Payment Institution.
Does Crypto.com publish reserve or solvency evidence?
A Mazars reserve snapshot dated 7 December 2022 and user Merkle inclusion can be verified, but recent continuous coverage is unavailable.
Should funds be stored on Crypto.com long term?
Transaction-only exposure. Use primarily for transactions and withdraw unnecessary balances. Avoid using the exchange as a single long-term custody location.
Crypto.com · Official Records and Verifiable Evidence
Crypto.com licence, reserve, security and operating sources
Open the original records used to check the exchange, including the verification date and the conclusion each source supports.
Regulator · Monetary Authority of Singapore
Tier A↗MAS Directory — Foris DAX Asia Pte. Ltd.
Legal entity, MPI status, permitted DPT activity and registered address.
Platform terms · Crypto.com
Tier B↗Crypto.com Regulatory Licenses
Malta entity, company number, MiCA status and authorised activities.
Regulator · Virtual Assets Regulatory Authority
Tier A↗VARA Public Register — Crypto.com
Dubai VASP entity, licence number, status and activity scope.
Platform terms · Crypto.com
Tier B↗Crypto.com App and Web Terms — Singapore
Relationship between the brand, Singapore entity and contractual scope.
Platform terms · Crypto.com
Tier B↗Crypto.com Licenses — UAE
Dubai entity and published licence information.
Reserve disclosure · Crypto.com
Tier B↗Crypto.com Proof of Reserves
Published reserve or asset-disclosure evidence used in the solvency assessment.
Security notice · Crypto.com
Tier B↗Crypto.com security report and next steps
Published security or incident evidence used in the security assessment.
System status · Crypto.com
Tier B↗Crypto.com status
Official service-status evidence used in the operational assessment.
Evidence coverage · Cexvia methodology
Method↗Cexvia complaint evidence standard
Complaint comparisons use verifiable primary evidence. The current cross-platform sample remains limited.
Market data · CoinGecko
Tier B↗Crypto.com Exchange market data
Third-party market-quality data used as a supporting signal.
Market data · CoinGecko
Tier B↗Trust Score methodology
CoinGecko methodology covering liquidity, cybersecurity, API coverage, team and incident signals.
Cexvia ratings reflect observed risk under available public evidence. A higher score means lower observed risk, not guaranteed safety. Coverage, confidence, redlines and score direction are published separately. This page is not investment, legal or custody advice. Commercial relationships do not change scores or suppress verified evidence.