For Netherlands-based users in 2026, the exchanges that combine a confirmed EU MiCA CASP authorisation with iDEAL deposit support are the only defensible starting point. Coinbase holds CASP authorisations via Luxembourg (CSSF) and Ireland (CBI), accepts iDEAL, and as a Nasdaq-listed company (COIN) publishes quarterly financials that provide reserve transparency no crypto-native attestation can match. Kraken holds CASP authorisations via Ireland (CBI) and Luxembourg (CSSF) and has operated credible Armanino-audited Proof of Reserves since 2014. Bitstamp, the oldest continuously operating CEX (founded 2011), is Luxembourg-CSSF authorised with a long-standing audited reserve history. Before depositing with any exchange, verify its name in the live ESMA MiCA register — a marketing page claiming compliance is not a substitute for a register entry. Note also that USDT is restricted on EU MiCA-compliant platforms; USDC (Circle, MiCA-compliant EMT) is the functioning stablecoin for Dutch users on licensed exchanges. This guide is information only and does not constitute financial or investment advice.
Why MiCA changes the exchange choice for Dutch users
MiCA — the EU Markets in Crypto-Assets Regulation — reached full applicability for Crypto-Asset Service Providers (CASPs) on 30 December 2024. It is not a voluntary standard. Any exchange serving EU retail customers, including those in the Netherlands, must either hold a CASP authorisation issued by a National Competent Authority (NCA) in an EU27 or EEA member state, or be operating under a transitional arrangement that national regulators are progressively closing. A CASP authorisation from a single member state passports across all 27 EU states plus Norway, Iceland, and Liechtenstein — meaning a Luxembourg or Malta authorisation covers Dutch users without a separate Dutch licence.
The practical consequence for Dutch users is stark: exchanges without a confirmed CASP entry in the ESMA register are operating outside the MiCA framework for EU retail. Operating under 'transitional arrangements' is not the same as holding an authorisation — it is a grace period, not a compliance confirmation. The ESMA register is the only primary source that settles this question. Checking it takes under two minutes: search for the exchange name at esma.europa.eu. If the name is not there, the exchange is not MiCA-authorised, regardless of what its website states. Dutch users should make this check before any deposit — it is the single highest-value consumer protection step available.
The Autoriteit Financiële Markten (AFM) is the Dutch financial markets supervisor and has stated publicly that it will not tolerate MiCA circumvention via offshore structures targeting Dutch residents. The AFM maintains a public warning register (Consumentenwijzer) of unlicensed entities. Dutch traders who grew up using the AFM register as a trust-verification tool for traditional financial products are well-positioned to apply the same discipline to crypto exchanges. The overlap between AFM scrutiny and MiCA authorisation is additive: MiCA provides the EU-level framework; the AFM enforces it domestically and acts on warnings.
The MiCA-licensed exchanges for Netherlands users: what the register confirms
Based on Exchange Atlas research conducted in June 2026 against the ESMA MiCA register and issuing national authority records, the following exchanges have confirmed CASP authorisations relevant to Dutch users. Coinbase holds authorisations via Luxembourg (CSSF) and Ireland (Central Bank of Ireland). Kraken holds authorisations via Ireland (CBI) and Luxembourg (CSSF). Bitstamp holds its authorisation via Luxembourg (CSSF) — the country where it has been based since its founding in 2011. OKX was the first major exchange to obtain a CASP authorisation, issued by the Malta Financial Services Authority (MFSA). Crypto.com, Gemini, and Bitpanda have also received CASP authorisations via the MFSA (Malta).
Material fact — Gemini: In November 2022, Gemini suspended withdrawals on its Gemini Earn programme following the collapse of Genesis Capital, the lending counterparty to which Gemini had lent customer funds. Approximately $900 million in customer Earn deposits were frozen for over a year while Genesis went through Chapter 11 bankruptcy proceedings. The Earn programme itself has since been wound down and the underlying funds resolved through the Genesis restructuring, but the episode demonstrated that regulated exchange status does not eliminate counterparty risk in yield-bearing products. Dutch users considering Gemini should restrict use to the core spot exchange and avoid any yield or lending products, regardless of how they are marketed. Verify Gemini's current MFSA CASP status in the ESMA register before depositing.
Update, checked against the ESMA register on 09/07/2026: Bybit's EU entity, Bybit EU GmbH, now holds a confirmed full MiCA CASP authorisation via Austria's FMA, granted 28/05/2025. KuCoin's EU entity, KuCoin EU Exchange GmbH, also holds a confirmed Austrian FMA CASP authorisation, granted 27/11/2025 — but the FMA separately barred KuCoin EU from new business between 19/02/2026 and 18/05/2026 over anti-money-laundering staffing gaps, and per the FMA's own release, commencement of business operations remained prohibited at last check. Treat KuCoin as licensed but restricted, not a clean green light, and re-verify current status before depositing. Binance did not have a confirmed full CASP authorisation in Exchange Atlas research as of this update. 'Pending' or 'in-process' is not the same as 'authorised.' Binance is the world's largest exchange by trading volume and holds a $4.3 billion DOJ settlement from 2023 as part of its regulatory history — it is not small or obscure, but its MiCA status remains unconfirmed. Material fact — Bybit: In February 2025, Bybit suffered a hack in which approximately $1.5 billion in customer funds were stolen from its Ethereum cold wallet — the largest exchange hack in crypto history by value. Bybit stated it covered the losses from its own reserves and continued operating; the scale of the breach raises material questions about cold storage security architecture that Dutch users should weigh when evaluating Bybit, independent of its now-confirmed MiCA status. Dutch users who want to use Binance should verify its ESMA register status themselves before depositing and treat the absence of a confirmed entry as a relevant risk factor, not a neutral fact. Always confirm the live register entry because authorisation statuses change and this guide cannot update in real time.
The authorisation hierarchy matters. Luxembourg's CSSF and Ireland's CBI are among the most rigorous NCAs in the EU — both are well-resourced financial supervisors with long track records in banking and investment firm regulation. Malta's MFSA is the NCA that authorised OKX, Gemini, and others; it is a legitimate EU competent authority, though its track record with crypto is newer. What the MiCA framework guarantees regardless of which NCA issues the authorisation: minimum own funds of €150,000, segregated client assets, fit-and-proper management governance, and a cyber-incident response framework. These are floors, not ceilings — but they are meaningful floors that did not exist under the pre-MiCA patchwork.
- Coinbase: CASP via Luxembourg (CSSF) + Ireland (CBI). Nasdaq-listed (COIN). iDEAL supported.
- Kraken: CASP via Ireland (CBI) + Luxembourg (CSSF). Armanino Proof of Reserves since 2014.
- Bitstamp: CASP via Luxembourg (CSSF). Founded 2011 — oldest continuously operating CEX.
- OKX: CASP via Malta (MFSA). First major exchange to obtain EU MiCA authorisation.
- Gemini: CASP via Malta (MFSA). Note: Gemini Earn froze ~$900M in customer funds Nov 2022 following Genesis Capital collapse — avoid yield products.
- Binance: CASP not confirmed as of 09/07/2026. $4.3B DOJ settlement (2023). Verify ESMA register before depositing.
- Bybit: CASP confirmed via Austria (FMA), granted 28/05/2025 — verified on ESMA register. ~$1.5B hack February 2025 — largest exchange hack by value in crypto history — remains a material risk factor independent of licensing.
- KuCoin: CASP confirmed via Austria (FMA), granted 27/11/2025 — but FMA separately barred new business Feb–May 2026 over AML-staffing gaps, and per FMA's own release, commencement of operations remained prohibited at last check. Licensed but restricted — verify current status before use.
iDEAL deposits: which exchanges support the Dutch payment standard
iDEAL is the dominant Dutch online payment method — a bank-initiated instant transfer used in roughly 70% of Dutch online transactions. It integrates directly with ABN AMRO, ING, Rabobank, Bunq, Revolut NL, and every other major Dutch bank. For crypto exchange onboarding, iDEAL matters because it eliminates the friction that card deposits create: some Dutch banks, particularly ING and ABN AMRO, have intermittently blocked card transfers to payment processor MCC codes associated with financial trading platforms. iDEAL bypasses that card-level block entirely, producing higher deposit success rates and faster fund availability.
Coinbase explicitly supports iDEAL for EUR deposits, making it the most direct fiat on-ramp for Dutch users among the MiCA-licensed exchanges. This matters particularly for first-time buyers and users making regular purchases — the EUR goes from their Dutch bank account to Coinbase instantly, with no intermediary currency conversion. Kraken accepts SEPA bank transfers which are operationally available to Dutch users and are the standard for larger deposits above EUR 5,000, though iDEAL is not explicitly listed as a Kraken deposit method in the same way. Bitstamp also accepts SEPA. For Dutch users making smaller, regular crypto purchases, the combination of MiCA authorisation and native iDEAL support makes Coinbase the most frictionless entry point, with the caveat that Coinbase's fee structure is not the lowest available — its Advanced Trade interface reduces maker fees to 0.00%–0.40% versus the simpler interface's higher spreads.
Any exchange without iDEAL support that accepts card deposits should be used with awareness of potential card-level blocking. If a transfer fails, the resolution path typically involves contacting the Dutch bank (not the exchange) to whitelist the payment processor — some banks have a straightforward toggle in their banking app; others require a phone call. SEPA transfers avoid this entirely but take 1–2 business days. Dutch users should factor payment method compatibility into their exchange selection decision alongside regulatory standing — a MiCA-licensed exchange you cannot fund easily is less useful than it appears on paper.
TIKR and Dutch tax treatment of crypto: Box 3 mechanics
Dutch crypto taxation operates under a framework that is fundamentally different from capital gains tax (CGT) countries like the UK or Australia, and this difference has practical implications for which exchange features matter most. The Netherlands taxes crypto assets under Box 3 of the income tax system — the wealth tax box — via a notional return system called TIKR (Toelichting Inkomen uit Kapitaal en Rendement, or more broadly the Box 3 framework as reformed). Under Box 3, the taxable event is not the sale of crypto — it is the value of your crypto holdings on 1 January of the tax year. The Belastingdienst (Dutch Tax Authority) calculates a notional return on that value and taxes it accordingly, regardless of whether you actually realised any gains.
The practical implications for Dutch crypto users are significant. First, your total crypto portfolio value on 1 January each year is what triggers your Box 3 liability — not trades made during the year. This means that an exchange that makes it easy to export your holdings balance as at 1 January (ideally via a CSV download or tax API integration) saves meaningful administrative work at filing time. Second, because you are taxed on value held rather than gains realised, there is no incentive under Dutch tax law to time sales in ways that are common in CGT jurisdictions. Third, crypto held on a foreign exchange is still reportable — the Belastingdienst expects Dutch residents to declare all assets including those on offshore or foreign platforms.
For 2026, Dutch users should note that Box 3 has been subject to ongoing reform following Supreme Court rulings against the prior flat-rate system. The reform introduces a more granular tracking of actual return versus notional return in some asset categories. Crypto assets are classified as 'other assets' in Box 3. The exact applicable rate and exempt threshold for 2026 should be confirmed directly with the Belastingdienst or a qualified Dutch tax adviser — this guide does not constitute tax advice, and Box 3 rules have changed multiple times in recent years. What does not change: the 1 January snapshot date, and the requirement to report all crypto holdings regardless of which exchange holds them.
USDT restriction and the MiCA stablecoin divide for Dutch users
One of the most practically important — and frequently misunderstood — consequences of MiCA for Dutch crypto users is the restriction on USDT (Tether). MiCA Article 58 requires stablecoin issuers to obtain authorisation from an EU National Competent Authority. Tether Limited has not obtained this authorisation. As a result, USDT is an unlicensed Electronic Money Token (EMT) under MiCA for EU issuance purposes, and EU-licensed exchanges are required to delist or restrict USDT trading for EU retail customers. Coinbase EU and OKX EU began delisting USDT pairs for EU retail in late 2024. Binance stopped offering USDT pairs to EU users in December 2024. This is not a minor technical footnote — USDT was the dominant stablecoin by trading volume and is widely used as a settlement asset in crypto trading. Dutch users who relied on USDT as a stable store of value between trades now need to use an alternative.
The MiCA-compliant replacement is USDC. Circle, the issuer of USDC, obtained an Electronic Money Institution (EMI) licence in France, making USDC a compliant EMT under MiCA. EU exchanges — including Coinbase and Bitstamp — can continue listing USDC without restriction. Circle's euro-denominated stablecoin EURC is also MiCA-compliant, though its liquidity remains smaller than USDC. For Dutch users operating in EUR, EURC is a natural denomination for stable balances between trades. DAI (MakerDAO) occupies a regulatory grey zone — over-collateralised and algorithmically managed with no single issuer entity — and EU regulators have not issued definitive guidance. Treat DAI as uncertain for compliance purposes until a clear ruling exists.
The stablecoin shift has a structural consequence: on MiCA-compliant exchanges, EUR-denominated trading pairs and USDC pairs are replacing USDT pairs. For Dutch users this is largely a neutral exchange — EUR is the home currency, USDC is sufficiently liquid for most use cases, and Coinbase in particular has deep USDC liquidity given Circle's relationship with Coinbase (they co-founded the Centre Consortium that created USDC). The practical advice: if you open an account on a MiCA-licensed exchange and notice USDT is unavailable or restricted, this is not a platform error — it is regulatory compliance in action.
Proof of Reserves, cold storage, and the FTX lesson for Dutch users
The FTX collapse in November 2022 is the reference event for evaluating exchange custody risk. FTX showed $16 billion in stated customer assets against $9 billion in liabilities — but the 'assets' were primarily FTT (FTX's own token) and Serum, both illiquid and circular in valuation. The balance sheet was technically positive while the exchange was fundamentally insolvent. The signals were visible in public reporting before the collapse: the Alameda balance sheet leak, the lack of corporate separation between FTX and Alameda Research (both controlled by Sam Bankman-Fried), and the absence of any credible third-party Proof of Reserves. Within 72 hours of Binance announcing its BUSD liquidation of FTT on 6 November 2022, FTX had halted withdrawals and filed for Chapter 11. $8 billion in customer funds vaporised.
Proper Proof of Reserves (PoR) requires more than publishing a Merkle tree of liabilities. A credible PoR requires a third-party auditor to verify that exchange wallet addresses hold assets equal to or greater than the total customer liability in the Merkle tree — and that those assets are unencumbered, not pledged as collateral elsewhere. Kraken has run Armanino-audited PoR since 2014 and remains one of the strongest examples of credible reserve verification in the industry. Coinbase's position is different but arguably stronger for EU retail: as a Nasdaq-listed public company (ticker: COIN), it files quarterly 10-Q reports with the SEC, which disclose customer custody assets and liabilities under GAAP accounting standards. That is more rigorous than any crypto-native attestation. Bitstamp has long-standing audited reserves and is part of the same Luxembourg regulatory orbit as traditional financial institutions.
Cold storage ratios are a useful indicator but not a verifiable real-time metric. Cold storage means private keys held in offline, air-gapped hardware — inaccessible to remote attackers. A well-run exchange holds 90%+ of customer assets in cold storage. Kraken publicly states 95%+ cold storage. Coinbase Custody (its institutional arm) approaches 100% for assets under that product. But these are point-in-time figures, and exchanges do not publish real-time cold storage ratios. The Bybit hack of February 2025 — approximately $1.5 billion stolen from what Bybit had characterised as a cold wallet — underscores that 'cold storage' is only as secure as the signing infrastructure protecting it; a compromised multi-signature signing process can drain a cold wallet without the keys ever being connected to the internet in the conventional sense. The existence of a PoR programme with on-chain wallet verification is a better proxy for current custodial safety than any stated cold storage percentage. Dutch users should weight PoR credibility alongside MiCA authorisation when selecting an exchange — the two together are a meaningful, if imperfect, consumer protection stack.
- Coinbase: Nasdaq-listed (COIN), SEC quarterly filings — strongest reserve transparency of any major CEX.
- Kraken: Armanino-audited PoR since 2014. Publicly states 95%+ cold storage.
- Bitstamp: Long-standing audited reserves. Luxembourg-based, CSSF-supervised.
- OKX: Merkle tree PoR launched post-FTX. Verify the auditor and whether liabilities are included.
- Binance: Mazars withdrew from its audit engagement December 2022. Later auditors engaged — verify recency and scope.
- Bybit: ~$1.5B hack February 2025 — cold wallet signing infrastructure compromised. Verify current PoR programme scope and auditor before considering.
- Red flag to avoid: any exchange that counts its own native token at full market cap toward stated reserves (the FTT/FTX pattern).
Fee comparison and practical costs for Dutch crypto users
Fee comparisons between exchanges are only useful if you specify the tier and use case. The cheapest headline rate is typically the VIP tier that requires tens of millions in monthly trading volume — quoting it to a retail user is misleading. For the Dutch retail user making spot purchases in the EUR 500–10,000 range, the relevant fee comparison is the standard retail tier. Coinbase Advanced Trade (the fee-efficient interface, distinct from the simplified Coinbase app) runs 0.00%–0.40% maker and 0.05%–0.60% taker at standard tier. Kraken runs 0.00%–0.25% maker and 0.10%–0.40% taker. Bitstamp runs comparable retail rates to Kraken in the 0.30%–0.50% range for smaller volumes. OKX is typically 0.02%–0.08% maker and 0.05%–0.10% taker — competitive, though OKX's EU retail interface has been affected by MiCA compliance changes including USDT delisting.
Withdrawal fees require a separate analysis because they depend on both the asset and the network. Bitcoin withdrawn via mainchain versus the Lightning Network is a 10–100x fee difference. USDT via TRC-20 is approximately $1; via ERC-20 it is $5–15. Exchange withdrawal fees are set by the exchange, not the blockchain, and vary. Always check the withdrawal fee for the specific asset and network you intend to use before depositing — not the headline trading fee. For EUR withdrawals via SEPA, the standard across all MiCA-licensed exchanges is zero or near-zero fee, since SEPA transfers are a low-cost infrastructure the exchanges access at minimal marginal cost. iDEAL deposits on Coinbase are typically free; confirm current fee schedules on the exchange's fee page at time of use.
One practical note for Dutch users managing costs: the exchange-native fee reduction mechanisms (Coinbase's staking of COIN shares for institutional users, Kraken's Pro tier volume discounts, OKX's OKB token holding discount) are real but require commitment to a single platform. For users diversifying across two exchanges for risk management purposes — which is reasonable given custodial risk lessons from FTX — fee optimisation is secondary to regulatory standing and PoR credibility. Never let a fee differential drive you from a regulated exchange with credible PoR to an unregulated exchange with lower headline rates. The cheapest exchange that holds your funds insolvently is the most expensive exchange you will ever use.
How to verify an exchange before depositing: the Dutch user checklist
Dutch financial culture has a well-established verification habit for traditional financial products — the AFM Consumentenwijzer is genuinely used, not just referenced. Applying the same discipline to crypto exchanges in 2026 means a two-register check: the ESMA MiCA CASP register for EU authorisation, and the AFM warning list for active Dutch-market alerts. These are primary sources. A marketing page, a review site, or a news article claiming an exchange is 'regulated' or 'MiCA-compliant' is secondary and should never substitute for a direct register check.
The ESMA MiCA register search is at esma.europa.eu under 'Registers' — navigate to the MiCA crypto-asset service providers section and search by exchange name. If the name is not listed, the exchange does not have a confirmed CASP authorisation. The AFM's Consumentenwijzer is at afm.nl — search for the exchange name to check for active warnings. If there is an AFM warning against an entity, do not deposit. The third check is the exchange's own terms and conditions for Netherlands residents — some exchanges that hold CASP authorisations in other EU states have geo-restrictions that exclude Netherlands residents for specific products; read the terms, not just the homepage.
Beyond regulatory checks: confirm the exchange has iDEAL support if fiat deposits are your primary on-ramp. Confirm USDC (not USDT) availability if you intend to hold stable balances. Confirm the exchange provides a CSV or API export of holdings as at 1 January for Box 3 TIKR reporting — not all exchanges make this straightforward. And verify whether the exchange's PoR programme includes both assets and liabilities verified by a named third-party auditor, not just a self-published Merkle tree. These five checks — ESMA register, AFM warning list, terms for NL residents, iDEAL support, PoR credibility — constitute a defensible pre-deposit due diligence framework for Dutch crypto users in 2026.
- Check 1: Search the exchange name in the ESMA MiCA CASP register at esma.europa.eu.
- Check 2: Search the exchange name in the AFM Consumentenwijzer at afm.nl.
- Check 3: Read the exchange's terms and conditions specifically for Netherlands residents.
- Check 4: Confirm iDEAL deposit support (or SEPA as a fallback for larger amounts).
- Check 5: Confirm USDC availability as a MiCA-compliant stablecoin option.
- Check 6: Confirm the exchange can export a 1 January holdings snapshot for Box 3 TIKR reporting.
- Check 7: Verify the PoR programme includes liability-side verification by a named third-party auditor.
- Check 8: For any exchange not on the ESMA register, research its material incident history (hacks, fund freezes, regulatory actions) before depositing.
Not financial or investment advice
This guide is published for information and educational purposes only. Nothing in this guide constitutes financial advice, investment advice, tax advice, or a recommendation to buy, sell, or hold any cryptocurrency or to use any specific exchange. Cryptocurrency markets are highly volatile; the value of crypto assets can fall to zero. You may lose all money you invest in cryptocurrencies. Past performance of any asset or exchange is not indicative of future results.
Exchange Atlas is an independent information publisher. We do not accept payment from exchanges for placement, ratings, or assessment outcomes. All regulatory status information is sourced from public primary sources — the ESMA register, national competent authority registers, and exchange terms — and was accurate at the research date noted. Regulatory statuses change; always verify directly from primary sources before acting. For personalised financial or tax advice regarding your specific situation under Dutch law, consult a qualified financial adviser or belastingadviseur registered with the AFM or Belastingdienst.
Frequently asked questions
Does the Netherlands have its own crypto exchange licence, or does MiCA cover it?
The Netherlands does not issue its own crypto-specific exchange licences in the same way it issues investment firm licences. From December 2024, the MiCA CASP framework is the operative EU-level authorisation that covers Netherlands users. An exchange holding a CASP authorisation from any EU/EEA National Competent Authority — including Luxembourg's CSSF, Ireland's CBI, or Malta's MFSA — can passport its services to Dutch users without a separate Dutch-issued licence. The AFM's role is enforcement and consumer protection: it monitors compliance with MiCA obligations domestically, maintains the warning register for unlicensed entities, and cooperates with the European supervisory framework. Dutch users should verify ESMA register status for the exchange's CASP authorisation, and check the AFM warning register at afm.nl as a secondary check.
Which MiCA-licensed exchanges accept iDEAL deposits in the Netherlands?
Coinbase is the most clearly documented MiCA-licensed exchange that accepts iDEAL for EUR deposits from Dutch users. Coinbase holds CASP authorisations via Luxembourg (CSSF) and Ireland (CBI). iDEAL support allows Dutch users to fund their Coinbase account via a direct bank transfer from ABN AMRO, ING, Rabobank, Bunq, or other Dutch banks — instantly and without the card-blocking issues that some Dutch banks apply to certain payment processor codes. Other MiCA-licensed exchanges including Kraken and Bitstamp accept SEPA bank transfers, which are available to Dutch users but take 1–2 business days rather than being instant. Always confirm current iDEAL availability directly on the exchange's deposit page before opening an account, as payment method availability can change.
Why is USDT not available on MiCA-compliant exchanges for Dutch users?
Tether (USDT) is not MiCA-compliant because Tether Limited has not obtained an Electronic Money Token (EMT) authorisation from an EU National Competent Authority, as required under MiCA Article 58. MiCA-authorised exchanges are required to delist or restrict USDT for EU retail customers. Coinbase EU and OKX EU delisted USDT pairs for EU retail in late 2024; Binance removed USDT pairs for EU users in December 2024. The MiCA-compliant alternatives are USDC (issued by Circle, which holds an EU EMI licence) and EURC (Circle's euro stablecoin, also MiCA-compliant). For Dutch users, USDC is the most liquid stable alternative on major exchanges. EURC is a natural option for EUR-denominated stable balances. DAI occupies a regulatory grey zone and should be treated as uncertain for compliance purposes.
How do I report crypto holdings for Dutch Box 3 tax (TIKR)?
Under Dutch Box 3 (the wealth tax box), your crypto assets are taxed on their market value as of 1 January of the relevant tax year — not on realised gains from sales. The 1 January snapshot value is what you declare to the Belastingdienst, regardless of how much you traded during the year or whether you actually sold anything. To report correctly, you need the total value in EUR of all your crypto holdings across all exchanges as at midnight 1 January. Most major exchanges allow you to export a holdings report or transaction history CSV that can establish this figure. Box 3 rates and the exempt threshold (heffingvrij vermogen) apply across your total Box 3 assets — crypto is combined with other Box 3 assets like savings and investments. Because Box 3 rules have changed multiple times following Dutch Supreme Court rulings on the prior flat-rate system, confirm the exact rates and methodology applicable to 2026 with a qualified Dutch tax adviser or directly with the Belastingdienst. This guide does not constitute tax advice.
Is Binance safe to use for Dutch users in 2026?
Binance is the world's largest crypto exchange by trading volume, but its MiCA CASP authorisation was not confirmed in Exchange Atlas research as of June 2026. Operating under transitional arrangements is not equivalent to holding a confirmed CASP authorisation. Additionally, Binance entered a $4.3 billion settlement with the US Department of Justice in 2023 related to AML compliance failures, and its Mazars-audited Proof of Reserves programme was suspended when Mazars withdrew from crypto engagements in December 2022. Dutch users considering Binance should: (1) verify its current ESMA MiCA register status directly at esma.europa.eu before depositing; (2) check whether Binance has resolved the absence of a third-party PoR auditor with a credible, liability-inclusive audit; (3) note that USDT is no longer available on Binance for EU retail users under MiCA. None of this is a claim that Binance is unsafe — it is a description of material, verifiable facts that Dutch users should factor into their decision.
What is the AFM's role in regulating crypto exchanges for Dutch users?
The Autoriteit Financiële Markten (AFM) is the Dutch financial markets supervisor and acts as the domestic enforcement arm of the EU MiCA framework for Netherlands-based users. The AFM does not issue MiCA CASP authorisations — those are issued by EU National Competent Authorities in the home member state of the exchange (Luxembourg's CSSF, Ireland's CBI, Malta's MFSA, etc.). However, the AFM enforces MiCA compliance obligations domestically, investigates unlicensed entities targeting Dutch residents, and publishes a public warning register (Consumentenwijzer) that Dutch users should check before depositing. The AFM has stated it will not tolerate MiCA circumvention via offshore white-label structures targeting Dutch retail. The AFM's warning register is at afm.nl and should be used alongside the ESMA MiCA register as part of any pre-deposit due diligence check.
Is Bybit safe for Dutch users given the 2025 hack?
In February 2025, Bybit suffered a hack resulting in approximately $1.5 billion in customer funds being stolen from its Ethereum cold wallet — the largest exchange hack by value in crypto history. Bybit stated it covered the losses from its own reserves and continued operating without halting withdrawals. However, the breach raises material questions about cold storage signing infrastructure security that Dutch users should weigh. Additionally, Bybit did not hold a confirmed MiCA CASP authorisation in Exchange Atlas research as of June 2026. Dutch users considering Bybit should: (1) verify its current ESMA MiCA register status at esma.europa.eu; (2) review what security architecture changes Bybit has disclosed following the hack; (3) assess whether the exchange's PoR programme provides credible liability-inclusive assurance post-incident. Depositing on an exchange without confirmed MiCA authorisation and with a material recent security incident carries compounded risk.
What happened with Gemini Earn, and is Gemini safe to use now?
In November 2022, Gemini froze withdrawals on its Gemini Earn programme after Genesis Capital — the counterparty to which Gemini had lent customer Earn deposits — halted withdrawals following contagion from the FTX collapse. Approximately $900 million in customer funds were locked for over a year. Genesis Capital filed for Chapter 11 in January 2023 and the funds were ultimately resolved through the Genesis restructuring process, though many customers received less than full recovery. The Gemini Earn programme itself has been wound down. Gemini holds a CASP authorisation via the Malta MFSA and operates as a regulated EU exchange for core spot trading. The Earn episode illustrates that regulated exchange status does not eliminate counterparty risk in yield-bearing or lending products — risk can reside in the lending counterparty, not the exchange itself. Dutch users should treat Gemini's core spot exchange as distinct from any yield product, and confirm the current MFSA CASP status in the ESMA register before depositing.
Sources & further reading
An independent publisher mapping the regulation of cryptocurrency exchanges. Our editorial desk verifies every licence and availability claim against primary sources — the ESMA MiCA register, the FCA register, ASIC, MAS, VARA and each exchange's own terms — and never accepts payment for a better assessment or placement. We publish information only; nothing here is financial advice.