Coinbase is among the more heavily regulated crypto exchanges — NASDAQ-listed (COIN), NYDFS BitLicensed since January 2017, MiCA-authorised in the EU via Luxembourg's CSSF, FCA-registered in the UK, and holder of a conditional OCC national trust bank charter approved 2 April 2026. But 'safe' has layers: FDIC insurance only covers pooled US customer cash against the partner bank's failure, never crypto or Coinbase's own failure; its reported commercial crime cover (~$320M, unverified currency) excludes user-credential theft; and Coinbase publishes no user-verifiable proof-of-reserves for crypto, relying instead on audited public-company financials. It also settled with NYDFS for $100M in 2023 over AML controls. This is information, not financial advice.
Coinbase's regulatory footprint
Coinbase Global, Inc. is a NASDAQ-listed public company (ticker: COIN), which means it carries ongoing SEC reporting obligations — quarterly and annual filings that are independently audited, a disclosure layer most crypto-only exchanges don't have. In the US, its Coinbase Custody and exchange entities have held a New York State BitLicense from the NYDFS since January 2017, one of the earliest and strictest state-level crypto licences.
In the EU, Coinbase holds a MiCA Crypto-Asset Service Provider (CASP) authorisation issued in Luxembourg by the CSSF, granted in June 2025, which passports its services across the EU/EEA. In the UK, Coinbase is registered with the FCA under the UK's money-laundering regulations for crypto-asset businesses. Most recently, on 2 April 2026, the US Office of the Comptroller of the Currency (OCC) approved Coinbase for a conditional national trust bank charter — a federal banking-style charter that, once fully effective, would let Coinbase operate under a single national framework rather than a patchwork of state money-transmitter licences. As a conditional approval, it comes with conditions Coinbase must still satisfy — check the OCC's current decision status before treating the charter as finalised.
The FDIC insurance nuance most explainers get wrong
Coinbase is not FDIC-insured, and no crypto asset held on any exchange is ever FDIC-insured — the FDIC only insures US dollar deposits at member banks. What Coinbase offers is a pass-through arrangement: US customers' uninvested USD balances are pooled and held at FDIC-insured partner banks, and in the event one of those specific banks fails, each customer's proportional share is covered up to $250,000. That protects against a bank failure — it does nothing if Coinbase itself fails, is hacked, or if the loss is in crypto rather than cash. Framing this as 'your funds are FDIC-insured' without that distinction is the single most common inaccuracy in Coinbase safety write-ups.
Insurance: what's covered, what isn't
Coinbase has reported holding a commercial crime insurance policy, commonly cited around a $320 million limit through a Lloyd's of London syndicate — treat the exact figure as reported rather than officially guaranteed, since such policies renew annually and can change. Crucially, commercial crime cover of this type is designed to protect against theft from Coinbase's own systems (a breach of its hot-wallet infrastructure, for example) — it explicitly excludes losses caused by a compromise of the individual user's own credentials, such as a phished password or a SIM-swapped 2FA code. That gap is standard across the industry, not unique to Coinbase, but it means personal account security remains entirely the user's responsibility regardless of what Coinbase's institutional insurance covers.
The proof-of-reserves gap
Several major exchanges — Kraken, Binance, OKX, Bybit and KuCoin among them — publish a recurring, user-verifiable proof-of-reserves (PoR): a cryptographic Merkle-tree snapshot (sometimes third-party-audited) that lets any user check their own balance is counted in the exchange's on-chain holdings. Coinbase does not currently publish an equivalent live, crypto-native PoR page. Instead, it relies on the fact that as a NASDAQ-listed public company, its balance sheet — including its crypto holdings — is subject to independent financial audit and SEC reporting (10-K annual and 10-Q quarterly filings), a different and in some ways more heavily scrutinised disclosure regime, but not the same thing as a live, user-checkable PoR. Coinbase has reportedly discussed PoR tooling as a future addition — unconfirmed as of this writing, so don't treat it as current.
Historical context: the 2023 NYDFS settlement
In January 2023, Coinbase agreed to a $100 million settlement with the NYDFS over deficiencies in its Bank Secrecy Act and anti-money-laundering compliance programme, including its Know Your Customer processes. This is historical regulatory context, not an indication of an ongoing issue — settlements of this kind, which required Coinbase to invest further in its compliance programme, are common across the banking and fintech sector as regulators tighten AML expectations, and Coinbase has continued to add licences and authorisations since (MiCA in 2025, the OCC charter in 2026). It's worth knowing, but shouldn't be read as current-state risk without more recent evidence.
The bottom line
Coinbase is genuinely one of the most regulated venues in crypto by licence count and by the depth of financial-disclosure obligation that comes with being a public company — that's real and verifiable. But 'regulated' is not the same claim as 'your crypto is insured' or 'you can verify our reserves yourself': neither of those is currently true in the way it is for several PoR-publishing competitors. Anyone choosing Coinbase for its safety profile should weigh the licence and disclosure strength against the specific gaps — no crypto-native PoR, insurance that excludes credential compromise, and FDIC cover that applies only to cash and only against bank failure.
Frequently asked questions
Is Coinbase FDIC insured?
No, not directly, and no crypto is ever FDIC-insured. Coinbase pools uninvested US customer USD at FDIC-insured partner banks, so if one of those banks fails, customers' cash share is covered up to $250,000 — but this protects against bank failure only, not against Coinbase's own failure, a hack, or any loss denominated in crypto. This is information, not financial advice.
Is Coinbase regulated?
Yes, across multiple jurisdictions: it's NASDAQ-listed with SEC reporting obligations, has held a New York NYDFS BitLicense since 2017, holds an EU MiCA CASP authorisation via Luxembourg's CSSF (June 2025), is FCA-registered in the UK, and was approved for a conditional OCC national trust bank charter on 2 April 2026. Always confirm current status on the relevant register, as licences and conditions can change. This is information, not financial advice.
Does Coinbase publish proof of reserves?
Not in the live, user-verifiable Merkle-tree format that Kraken, Binance, OKX, Bybit and KuCoin publish. Coinbase instead relies on its independently audited public-company financial filings (10-K/10-Q) under SEC reporting rules. Coinbase has reportedly discussed adding PoR tooling, but this is unconfirmed. This is information, not financial advice.
Is my crypto insured if I hold it on Coinbase?
No — crypto assets are not FDIC-insured on any platform. Coinbase has reported holding commercial crime insurance (around a $320M limit, unverified currency) intended to cover theft from its own systems, but this type of policy typically excludes losses from a compromise of the individual user's own credentials, such as a phished password. This is information, not financial advice.
What is the OCC national trust charter Coinbase received in 2026?
On 2 April 2026 the US Office of the Comptroller of the Currency conditionally approved Coinbase for a national trust bank charter — a federal charter that, once fully in effect, would let it operate under one national framework instead of separate state money-transmitter licences. It is a conditional approval, so verify the OCC's current decision status rather than treating it as finalised. This is information, not financial advice.
Did Coinbase have regulatory problems in the past?
Yes — in January 2023 Coinbase settled with the NYDFS for $100 million over deficiencies in its anti-money-laundering and Know Your Customer compliance programme. This is historical context rather than a sign of an ongoing issue; Coinbase has added further licences, including MiCA authorisation and the 2026 OCC charter, since then. This is information, not financial advice.
Sources & further reading
An independent publisher mapping the regulation of cryptocurrency exchanges. Our editorial desk verifies every licence and availability claim against primary sources — the ESMA MiCA register, the FCA register, ASIC, MAS, VARA and each exchange's own terms — and never accepts payment for a better assessment or placement. We publish information only; nothing here is financial advice.