- Who runs Crypto.com and where it started
- Crypto.com's licences and registrations
- What Crypto.com says about security
- Crypto.com and FDIC insurance: the part to read carefully
- The 2022 Crypto.com hack
- Regulators and Crypto.com
- Using Crypto.com sensibly if you decide to
- Fake Crypto.com apps, emails and support
- My verdict on Crypto.com
- Frequently asked questions
Yes, Crypto.com is a real company with named co-founders, a Singapore headquarters according to Wikipedia, and registrations in several countries. The catch is that its own security page says FDIC insurance covers US dollar balances only if the FDIC member fails, not if Crypto.com does or if funds are stolen. Crypto can lose value too.
You've probably seen the Crypto.com name on a famous arena or in a big advert, which is exactly why people ask me if it's legit. Big marketing doesn't prove anything either way, so I've read the company's own About and security pages and Wikipedia's record of its licences and its 2022 hack. This isn't investment advice, and I won't comment on prices.
Who runs Crypto.com and where it started
According to Wikipedia, Crypto.com was founded in 2016 in Hong Kong under the name Monaco, and was renamed Crypto.com in 2018. Wikipedia lists its headquarters in Singapore. The company's About page names its leadership: Kris Marszalek as Co-Founder and CEO, Rafael Melo as Co-Founder and CFO, Bobby Bao as Co-Founder, and Eric Anziani as President and COO.
The same page claims 150M users across 90 countries. That's the company's own figure, so treat it as marketing rather than an audited count. What matters for a legit check is that real, named people run it.
Crypto.com's licences and registrations
Crypto.com's About page says availability is subject to jurisdictional limitations, which means what you can do depends on where you live. Wikipedia sets out a long list of registrations, including these:
- In the US, registered with FinCEN and holding money transmitter licences in various states.
- In the UK, registered with the FCA as a crypto asset service provider in 2022.
- In Australia, an Australian Financial Services Licence from ASIC.
- In the EU, an electronic money institution licence with passporting rights, plus a MiCA licence in 2025.
The sheer length of that list is a good sign for legitimacy, because a fly-by-night operator wouldn't bother with this much paperwork. A registration isn't an endorsement, and it doesn't mean every product is covered by the same rules. Treat it as proof the company has dealt with regulators, then check which entity serves your country when you sign up.
What Crypto.com says about security
Crypto.com's security page claims ISO 22301:2019, ISO/IEC 27701:2019, ISO/IEC 27001:2022 and PCI DSS v4.0 Level 1 Service Provider compliance, plus SOC 2 Type II compliance. It also lists multi-factor methods such as passwords, biometrics and authenticator codes, and says whitelisting external addresses through email verification is mandatory for withdrawals.
You'll also notice the page talks about wallets. It says the company has strict controls on access rights to funds in both cold and hot wallets, which is a description of its internal process rather than something you can check yourself. These are the company's own claims, and a certification covers a company's processes, not a promise that your money can't be lost. I'd treat them as good signs, not a safety guarantee. For your own account, switch on every protection offered and use an authenticator app rather than text messages where you can.
Crypto.com and FDIC insurance: the part to read carefully
This is the point people most often get wrong. Crypto.com's security page says FDIC insurance covers US dollar balances up to 250,000 dollars in the aggregate, but only if the respective FDIC member fails. It then states plainly that FDIC insurance doesn't protect your funds in the event of Crypto.com's failure or from the risk of theft or fraud.
So "insured" doesn't mean what many people assume. The page doesn't describe any insurance on crypto assets, and I won't claim there is any. If you hold coins on the platform, you're trusting the company, and market losses are always yours.
The 2022 Crypto.com hack
Wikipedia says that in 2022 a hack took 15 million dollars of Ether. Crypto.com paused withdrawals, later restored them, and stated that no customer funds were lost. That's the company's statement as reported on Wikipedia, and I haven't seen anything to contradict it.
Incidents like this don't make a platform a scam, but they show why account protection matters. If you plan to keep coins for years, it's worth reading my guide to hot and cold wallets before deciding how much stays on any exchange.
Regulators and Crypto.com
Wikipedia says Crypto.com sued the SEC in 2024 after receiving a Wells notice, and that the SEC closed an investigation into the company in 2025. A Wells notice is a warning that the SEC staff may recommend action; it isn't a finding. The page lists no other enforcement actions, and its FCA entry is a registration, not a penalty.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
| What I checked | What the sources say |
|---|---|
| Who runs it | Named co-founders, with a Singapore headquarters per Wikipedia |
| Licences | FinCEN registration in the US, FCA registration in the UK and others |
| Security claims | ISO standards, PCI DSS and SOC 2 Type II, as the company states |
| Insurance wording | FDIC cover limited to the FDIC member failing |
| Past incident | 2022 hack of Ether; company said no customer funds lost |
Using Crypto.com sensibly if you decide to
If you do open an account, start small and learn how deposits, withdrawals and fees work before moving anything significant. Read the fee schedule inside the app for your country, because charges can vary and aren't something I can quote here. Write down your own limit in advance, and don't let a flashy advert or a friend's excitement change it.
It also helps to keep a record of your transactions from day one, since tax rules for crypto differ by country and an accountant can tell you what applies to you.
Fake Crypto.com apps, emails and support
A famous name means plenty of impersonators. Here's what to watch for:
- Fake apps and lookalike websites. Use the official app store listing and type the web address yourself.
- Messages claiming your account is locked and asking you to click a link.
- Anyone asking for your recovery phrase, password or two-factor codes. Real support never needs them.
- Social media giveaways promising doubled deposits.
If you're weighing up different kinds of platforms, my comparison of the main crypto apps shows how they differ.
My verdict on Crypto.com
Crypto.com is legit in the sense that matters first: a real company, named leaders, and a trail of registrations and regulator interactions. But legit isn't the same as risk-free. Read the FDIC wording, protect your login and only put in what you can afford to lose.
Frequently asked questions
Is Crypto.com a real company?
Yes. Its About page names its co-founders and leadership, and Wikipedia says it was founded in 2016 and lists a Singapore headquarters.
Is my money insured on Crypto.com?
Its security page says FDIC insurance applies to US dollar balances only if the FDIC member fails, and doesn't protect funds if Crypto.com fails or from theft or fraud.
Was Crypto.com hacked?
Wikipedia says a 2022 hack took 15 million dollars of Ether. The company paused withdrawals, restored them later and stated no customer funds were lost.
Is Crypto.com licensed?
Wikipedia lists registrations including FinCEN in the US and the FCA in the UK. Its About page says availability is subject to jurisdictional limitations.
Can I lose money on Crypto.com?
Yes. Crypto prices can fall, and the company's pages don't promise protection from market losses.
