Exchanges / Kraken

30-second risk check: Kraken

KrakenRisk Rating and Review

kraken.com · Official site verified ↗

Likely contracting entity: Payward Europe Solutions LimitedMiCA Crypto-Asset Service Provider

Entity and licence perimeter · Moderate Risk

Cexvia rates Kraken Moderate Risk at 77/100.

For Ireland / European Economic Area users, the mapped entity is Payward Europe Solutions Limited under MiCA Crypto-Asset Service Provider. Its strongest area is Regulatory & legal standing; the main observed concern is Asset & solvency transparency.

Cexvia Exchange Risk Rating0 critical · 100 stronger evidence
Kraken77Moderate Risk
Asset & 62Security66Corporat80
Regulatory & legal standing86Corporate transparency80Asset & solvency transparency62Security & incident history66Operations & user protection83
Entity and licence perimeterFor IE usersLast verified · 2026-07-27

Across five rated dimensions, Regulatory & legal standing scores highest at 86/100, while Asset & solvency transparency scores lowest at 62/100.

  1. 01

    Kraken is represented by 3 published legal or operator records. Each record is assessed separately because regulatory scope, products and customer protections vary by entity and region.

Selected: IE / Payward Europe Solutions Limited · Verified 2026-07-27

Overall score77Moderate Risk
Dimensions covered5 / 5
Risk trendUnknown2026-07-27
Strongest areaRegulatory & legal standing86 / 100
Primary concernAsset & solvency transparency62 / 100
Exposure guidanceLimited long-term custodyData confidence: High · Data coverage: 70%

Regional Legal Entity Map

The brand does not define the regulatory perimeter.

Kraken is represented by 3 published legal or operator records. Company registration, an active authorisation, a pending application and an operator-disclosure gap are not treated as equivalent evidence.

RegionContracting entityRegulatory recordScopeStatusChecked
Cyprus / European Economic AreaPayward Europe Digital Solutions (CY) LimitedMiFID Investment FirmRegulated investment and derivatives servicesActive

What these records can establish

  • Named legal entity and jurisdiction
  • Permitted or registered activities
  • Current public-record status at the verification date

What these records do not prove

  • Protection against all asset loss
  • Global coverage for every user or product
  • Complete solvency or future regulatory status
Regulatory & legal standingComplete
86score / 100Weight 25% · Confidence 96%

Published entities and regional permissions are assessed separately; unverified scope is not presented as one global licence.

  • Entities checked individually
  • Scope kept separate
  • Registration is not a full licence
Score contribution0.2 / 25
Why this score

Evidence highlightsEntities checked individually · Scope kept separate · Registration is not a full licence

Observed limitationPublished entities and regional permissions are assessed separately; unverified scope is not presented as one global licence.

Missing or limited evidenceNo material publication gap recorded for this dimension.

1 source records · Reviewed 2026-07-27
View connected evidence
Corporate transparencyComplete
80score / 100Weight 15% · Confidence 94%

Entity, product and operator disclosure quality is assessed directly; private consolidated financial information is often limited.

  • Entity disclosure scored
  • Product scope checked
  • Private financials often limited
Score contribution0.1 / 15
Why this score

Evidence highlightsEntity disclosure scored · Product scope checked · Private financials often limited

Observed limitationEntity, product and operator disclosure quality is assessed directly; private consolidated financial information is often limited.

Missing or limited evidenceNo material publication gap recorded for this dimension.

1 source records · Reviewed 2026-07-27
View connected evidence
Asset & solvency transparencyLimited coverage
62score / 100Weight 20% · Confidence 70%

Reserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.

  • Reserve source connected
  • Liabilities need review
  • Solvency not inferred
Score contribution0.1 / 20
Why this score

Evidence highlightsReserve source connected · Liabilities need review · Solvency not inferred

Observed limitationReserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.

Missing or limited evidenceLimited coverage

1 source records · Reviewed 2026-07-27
View connected evidence
Security & incident historyComplete
66score / 100Weight 15% · Confidence 88%

Verified historical incidents remain in the record alongside remediation and current account-security controls.

  • History retained
  • Remediation recorded separately
  • Current controls do not erase incidents
Score contribution0.1 / 15
Why this score

Evidence highlightsHistory retained · Remediation recorded separately · Current controls do not erase incidents

Observed limitationVerified historical incidents remain in the record alongside remediation and current account-security controls.

Missing or limited evidenceNo material publication gap recorded for this dimension.

1 source records · Reviewed 2026-07-27
View connected evidence
Operations & user protectionPrimary evidence
83score / 100Weight 25% · Confidence 71%

Official status or notice channels are connected. Missing real-time coverage is reflected in confidence and is not treated as normal operation. Complaint evidence remains limited and is not treated as proof of safety.

  • Official channel connected
  • Asset status is time-sensitive
  • Anonymous reviews excluded
  • Market data connected
Score contribution0.2 / 25
Why this score

Evidence highlightsOfficial channel connected · Asset status is time-sensitive · Anonymous reviews excluded · Market data connected

Observed limitationOfficial status or notice channels are connected. Missing real-time coverage is reflected in confidence and is not treated as normal operation. Complaint evidence remains limited and is not treated as proof of safety.

Missing or limited evidencePrimary evidence

3 source records · Reviewed 2026-07-27
View connected evidence

Risk Drivers and Data Gaps

What moves the rating—and what remains uncertain.

Missing evidence is reported separately. It lowers coverage or confidence and is not automatically scored as a negative fact.

Key rating drivers

Strength
Regulatory & legal standing

Published entities and regional permissions are assessed separately; unverified scope is not presented as one global licence.

860.2 weighted
Strength
Operations & user protection

Official status or notice channels are connected. Missing real-time coverage is reflected in confidence and is not treated as normal operation. Complaint evidence remains limited and is not treated as proof of safety.

830.2 weighted
Constraint
Corporate transparency

Entity, product and operator disclosure quality is assessed directly; private consolidated financial information is often limited.

800.1 weighted
Constraint
Security & incident history

Verified historical incidents remain in the record alongside remediation and current account-security controls.

660.1 weighted
Constraint
Asset & solvency transparency

Reserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.

620.1 weighted

Missing or limited evidence

01
Asset & solvency transparency

Evidence status: Limited coverage. This limits confidence in the dimension conclusion.

02
Operations & user protection

Evidence status: Primary evidence. This limits confidence in the dimension conclusion.

03
Scope limitation

This profile prioritises entities most relevant to exchange users and is not a complete corporate tree.

04
Scope limitation

Product availability and contracting entities can vary by residence and account type.

05
Scope limitation

A regulatory record does not guarantee solvency, token value or recovery of customer funds.

Security Intelligence Coverage

9 signal families, with collection boundaries shown.

4 automated or configured · 5 require analyst review

01Live source

Official service status

Official incidents and maintenance are monitored at the published venue.

Cadence
Every 5 minutes
Rating use
Eligible after validation
An official channel may publish after an incident begins and may not expose every regional component.Kraken · Kraken official status
02Probe configured

Independent probes

Public API and domain reachability are checked independently.

Cadence
Every 5 minutes
Rating use
Eligible after validation
Reachability does not prove that login, trading or withdrawals work for every user or region.Kraken · Kraken public API probe
03Review workflow

Security incidents

Security incidents, outages, remediation and compensation are reviewed as separate facts.

Cadence
On change + weekly review
Rating use
Eligible after validation
Absence from an official archive is not proof that no incident occurred.Kraken · Kraken incident archive
04Review workflow

Reserves and wallets

Published reserve reports and wallet evidence are captured with their date and scope.

Cadence
Daily
Rating use
Eligible after validation
Public wallets or proof-of-reserves do not establish complete liabilities, encumbrances or solvency.Kraken · Kraken reserve disclosure
05Review workflow

Account controls

MFA, allowlists, anti-phishing and withdrawal protections are checked from official guidance.

Cadence
On change + weekly review
Rating use
Eligible after validation
Published controls do not prove correct enforcement for every account or incident.Kraken · Kraken account security
06Review workflow

Legal and regulatory

Entity, licence, registration, application and enforcement states are kept distinct.

Cadence
On change + weekly review
Rating use
Eligible after validation
A licence or registration applies only to the named entity, activity and jurisdiction.Kraken · Kraken legal record
07Probe configured

Domain and phishing

RDAP, DNS, TLS and certificate changes are compared with the verified official domain.

Cadence
Daily
Rating use
Context only
Domain signals can reveal infrastructure change but do not prove malicious intent.Cexvia · Kraken official-domain baseline
08Discovery only

Vulnerability signals

Potential product and dependency matches are queued for validation.

Cadence
Daily
Rating use
Never scored directly
Keyword matches are discovery signals only; they are never attributed to an exchange without product and exposure validation.NIST / CISA · NVD and CISA KEV discovery
09Probe configured

Verified complaints

Official case references and structured evidence are mapped by venue and entity.

Cadence
On change + weekly review
Rating use
Context only
Unverified posts, review-site ratings and anonymous screenshots are excluded from scoring.Kraken · Kraken support

Latest Risk Events

Verified changes connected to Kraken.

Open Risk Radar

No material verified events are published for this exchange in the current monitoring window. This does not mean no risk exists.

Asset, Security and Operations

The evidence behind the dimensions users care about most.

01

Asset and solvency transparency

62/100

Reserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.

  • Reserve source connected
  • Liabilities need review
  • Solvency not inferred
Reserve disclosure alone does not establish complete solvency. Reliable liabilities and encumbrance information are also required.
02

Security and incident history

66/100

Verified historical incidents remain in the record alongside remediation and current account-security controls.

  • History retained
  • Remediation recorded separately
  • Current controls do not erase incidents
1 connected source records
03

Operations and user protection

83/100

Official status or notice channels are connected. Missing real-time coverage is reflected in confidence and is not treated as normal operation.

  • Official channel connected
  • Asset status is time-sensitive
  • Missing is not normal
  • Anonymous reviews excluded
  • Comparable sample limited
Insufficient verified complaint volume

Exposure guidance

Limited long-term custody

Use case
Suitable for normal trading with controlled exchange balances.
Avoid
Avoid using the exchange as a single long-term custody location.
Reason
Regulatory & legal standing is the strongest observed area, while Asset & solvency transparency limits a stronger conclusion.
Exposure guidance is a risk-use framework, not personalised investment, legal or custody advice.

Action checklist

Choose your next step based on your current situation.

  1. 01Verify the official domain and app publisher
  2. 02Confirm the legal entity named in the account agreement
  3. 03Check whether the selected product is covered in your region
  4. 04Start with the minimum deposit
  5. 05Test one withdrawal
  6. 06Enable strong account security
  7. 07Avoid keeping unnecessary long-term balances

Rating History

Current published snapshot and audit status.

Historical snapshots are shown only when a dated prior V1 calculation is available; Cexvia does not fabricate a trend series.

DateScoreRisk levelTrendMethodReason
77Moderate RiskUnknownv1.0.0

Current published evidence snapshot

Compare Alternatives

Compare Kraken with other published Passports.

Choose another pair
ExchangeRiskScoreRegulatorySecurityConfidence

FAQ

Questions about Kraken

Is Kraken safe?

Kraken is currently rated Moderate Risk at 77/100. This reflects observed public evidence and is not a guarantee of safety.

Is Kraken regulated?

3 legal-entity records are mapped in this Passport. Each record has a jurisdiction-specific status and scope.

Which entity serves the selected region?

Ireland / European Economic Area: Payward Europe Solutions Limited — MiCA Crypto-Asset Service Provider.

Does Kraken publish reserve or solvency evidence?

Reserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.

Should funds be stored on Kraken long term?

Limited long-term custody. Suitable for normal trading with controlled exchange balances. Avoid using the exchange as a single long-term custody location.

Verified sources

Every conclusion links back to primary evidence.

Each source shows its verification date and the specific statement it supports.

01
Platform terms · Kraken

Kraken EEA Terms of Service

Official terms used to verify the contracting entity and service scope.

Tier B
02
Platform terms · Kraken

Kraken legal disclosures

Official terms used to verify the contracting entity and service scope.

Tier B
03
Company disclosure · Kraken

How Kraken is regulated

Company disclosure used to assess governance, financial or incident transparency.

Tier B
04
Market data · CoinMarketCap

Kraken — CoinMarketCap exchange profile

Third-party market-quality data used as a supporting signal.

Tier B
05
Reserve disclosure · Kraken

Kraken reserve disclosure

Published reserve or asset-disclosure evidence used in the solvency assessment.

Tier B
06
Security notice · Kraken

Kraken security record

Published security or incident evidence used in the security assessment.

Tier B
07
System status · Kraken

Kraken service status

Official service-status evidence used in the operational assessment.

Tier B
08
Evidence coverage · Cexvia methodology

Cexvia complaint evidence standard

Complaint comparisons use verifiable primary evidence. The current cross-platform sample remains limited.

Method
Cexvia ratings reflect observed risk under available public evidence. A higher score means lower observed risk, not guaranteed safety. Coverage, confidence, redlines and score direction are published separately. This page is not investment, legal or custody advice. Commercial relationships do not change scores or suppress verified evidence.