Coinbase is a legit, publicly listed US crypto exchange that's been running since 2012 and holds a New York BitLicense. The biggest risk to most users isn't the company vanishing but scams: in 2025 it disclosed that criminals bribed support agents to steal customer data, which fuels fake Coinbase calls. Crypto itself can also fall sharply in value.
Coinbase is often the first crypto app people download, so it's natural to ask whether your money's safe there. I'm not going to tell you whether to buy crypto: that's your call and nothing here is financial advice. What I can do is lay out who Coinbase is, how it's regulated, what's gone wrong and how to keep your own account locked down.
Who runs Coinbase
According to Wikipedia, Coinbase was founded in 2012 in San Francisco by Brian Armstrong and Fred Ehrsam. It went public on Nasdaq under the ticker COIN through a direct listing in 2021, and it was added to the S&P 500 in 2025.
Being a listed company matters for trust. It has to publish audited results and disclose big incidents to investors, which is how a lot of what follows became public. That's a very different position from an anonymous offshore exchange.
How Coinbase is regulated
Coinbase operates under several regulators rather than one. Wikipedia says it got a BitLicense from the New York Department of Financial Services in 2017, one of the stricter crypto licences in the US. It also has registrations and licences in other countries.
Regulators have also fined it. In 2023, according to Wikipedia, Coinbase agreed with the New York regulator to a 50 million US dollar penalty over anti-money laundering failures and a further 50 million investment in its compliance program, after the regulator cited a backlog of over 100,000 alerts. The UK's Financial Conduct Authority fined its UK branch in 2024, and the Dutch Central Bank fined it in 2023 over registration in the Netherlands.
Coinbase and the SEC case
In 2023 the SEC sued Coinbase, alleging it acted as an unregistered broker, exchange and clearing agency. Wikipedia says the SEC dismissed the suit in 2025. The case was about how crypto platforms should be registered, not an allegation that Coinbase had taken customers' coins, but it shows how unsettled US crypto rules have been.
| What I checked | What the record shows |
|---|---|
| How long has Coinbase run? | Since 2012 |
| Is it a public company? | Yes, listed on Nasdaq as COIN since 2021 |
| Is it licensed? | Holds a New York BitLicense from 2017, plus other registrations |
| Has it been fined? | Yes, by the New York regulator, the FCA and the Dutch Central Bank |
| Has it been breached? | Customer data was stolen via bribed support agents in 2025 |
The Coinbase data breach and why it matters to you
This is the part every user should know. In 2025, Wikipedia says, Coinbase disclosed that cybercriminals bribed overseas support agents to steal customer data, which they then used for social engineering attacks. No passwords, private keys or funds were taken in the breach itself, and Coinbase refused to pay a 20 million US dollar ransom. It estimated the attack could cost it up to 400 million.
Why does it matter if no funds were stolen directly? Because stolen names, contact details and account information make scam calls far more convincing. A caller who knows your details and sounds like Coinbase support can talk people into moving their own crypto. That's how most people lose money around big exchanges.
Spotting fake Coinbase support
Treat any unexpected contact claiming to be Coinbase with suspicion, however much the caller knows about you.
- Never move crypto to a new wallet because someone on the phone says your account is at risk.
- Never share your password, two-step codes or recovery phrase with anyone.
- Hang up and contact Coinbase through the official app or website yourself.
- Ignore links in texts and emails about locked accounts; open the app directly instead.
- Be wary of anyone offering to help recover lost crypto for a fee.
How to protect your Coinbase account
The company's own security is only half of it. You control the other half:
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
- Use a strong, unique password that you don't use anywhere else.
- Turn on two-step verification, ideally with an authenticator app or security key rather than text messages.
- Use a separate email address for crypto accounts if you can.
- Check your devices and active sessions in the app regularly.
- Only download the app from the official app stores.
If you hold crypto for the long term, it's also worth understanding the difference between leaving it on an exchange and holding it yourself. My explainer on hot wallets versus cold wallets covers the trade-offs in plain English.
Is Coinbase safe for your money overall?
Coinbase is a real, regulated, publicly listed exchange, and it's not going to disappear overnight the way some offshore platforms have. But safe isn't the same as risk-free. Crypto prices can drop fast, which my piece on why crypto crashes explains, and a stolen login or a convincing scam call can empty an account no matter how big the exchange is.
Check the terms and protections for your country in the app, keep your security settings tight and never let a caller rush you. That's where most of the real danger sits.
Frequently asked questions
Is Coinbase a legit company?
Yes. Coinbase was founded in 2012, is listed on Nasdaq as COIN and holds a New York BitLicense, according to Wikipedia.
Has Coinbase been hacked?
In 2025 Coinbase disclosed that criminals bribed overseas support agents to steal customer data. Wikipedia says no passwords, private keys or funds were stolen in that breach.
Did the SEC sue Coinbase?
Yes, in 2023, alleging it acted as an unregistered broker, exchange and clearing agency. The SEC dismissed the case in 2025.
Will Coinbase ever call me?
Treat any unexpected call claiming to be Coinbase as a likely scam. Hang up and contact support through the official app or website yourself.
Can I lose money on Coinbase?
Yes. Crypto prices can fall sharply, and scams or stolen logins can drain an account. Nothing about the platform removes that risk.
