Coinbase — a review of the crypto exchange, its fees, safety and risks
How the Coinbase exchange works
On the Coinbase exchange you fund your account with money or crypto, buy and sell, and everything you buy stays in your account with the company. Coinbase holds the keys to the wallets where your crypto sits1, which is why such a service is called custodial, from the word custody. A key is the secret that gives the right to move crypto; the article what is a private key explains it in more detail.
You cannot use the exchange anonymously. Coinbase checks your identity against an ID document, a check known as KYC ("know your customer"), and the company stores the images of those documents. They were among the data stolen in 20252. The case itself is covered in the section on reliability.
How the Coinbase exchange differs from the Base network and the Base App wallet
Three different tools carry the Coinbase name, and they are easy to mix up when you send crypto. The Coinbase exchange is the account you open with the company, and this page is about it.
Base is a separate layer-2 network built at Coinbase. It runs on top of Ethereum, transfers on it are cheaper, and their results are written to Ethereum. Fees on Base are paid in ETH3. For you, Base is one of the networks you can choose when withdrawing, alongside Ethereum or Solana.
Base App is the former Coinbase Wallet, renamed in July 20254. In it, the user holds the keys, and by default Coinbase cannot help you get back in if you lose access5.
So the stablecoin USDC, a digital dollar on a blockchain, is held by Coinbase while it sits on the exchange. USDC on the Base network sits at an address, the number of an "account" on the network, and whoever holds the key to that address controls it.
Where Coinbase works, from Russia to Latin America
Coinbase does not operate in every country, and the services on offer differ from country to country ⚖️. Check your country before you sign up.
Coinbase's systems are designed to keep the exchange from being used in sanctioned countries and by sanctioned persons5.
Citizens and residents of Russia are covered by a European Union ban ⚖️. Since October 2022, companies working under EU rules may not provide them with crypto wallets or accounts or hold crypto for them, whatever the amount67. The European arm of Coinbase works under a license from Luxembourg, so the ban applies to it too ⚖️. Signing up through a VPN or with someone else's documents is risky. If your country or identity does not match the check, the money in such an account may become inaccessible.
In Argentina, Coinbase holds a registration as a virtual asset service provider (PSAV) ⚖️5. How to find an exchange in the register of the regulator, the government body that licenses financial companies, is explained on the pages cryptocurrency in Argentina, cryptocurrency in Brazil and cryptocurrency in Kazakhstan. In other countries, check the local regulator's register.
Which networks to use for USDT and USDC deposits and withdrawals on Coinbase
A network is the shared system where crypto transfers are recorded, and each network has its own addresses and its own fee. Coinbase receives and sends crypto only on the networks it supports, and the set is different for each token. If a cryptocurrency runs on several networks, their list appears right on the screen when you send or receive funds, with one of them selected by default8. The sender and the recipient must pick the same network. For example, USDC sent from a wallet on the Solana network to a Coinbase USDC address on the Ethereum network will be lost8.
Coinbase supports the USDC token on several networks, among them Ethereum, Polygon and Solana8. For USDT, the help page as of 30.10.2026 lists no networks. When Coinbase first added USDT, it accepted it only on the Ethereum network, under the ERC-20 standard9. The app shows the current networks for both tokens.
Can you deposit USDT to Coinbase on the Tron network (TRC-20)?
Only if the Tron network appears in the list on the USDT receive screen in your app. That step is where Coinbase shows the available networks8. If Tron is not on the list, ask the sender to choose one of the listed networks. A transfer on a network missing from the receive screen may never reach your account, and getting it back does not always work. How USDT on different networks differs is explained in the article token standards.
USDT in Coinbase accounts in the European Economic Area
In the EEA, meaning the EU countries plus Iceland, Liechtenstein and Norway, Coinbase works under the MiCA rules and does not support USDT there ⚖️. For retail customers in the EEA, Coinbase announced a one-time conversion of remaining balances of USDT and other stablecoins that do not meet these rules, scheduled for 30 October 2026, into USDC where possible ⚖️. Tokens from that list sent to a Coinbase account after that date are not credited, not converted and cannot be traded10.
How to withdraw USDT or USDC from Coinbase without a network mistake
- Ask the recipient for the address and the network on which they expect the tokens. The recipient names the network, since they are the one receiving the transfer, so do not switch it to a cheaper one yourself.
- Start a send on Coinbase and choose the token. The screen shows the default network; tap the network field and choose the one the recipient named8.
- Check the address by its first and last characters. You cannot tell the network from the address, because Ethereum and the networks built like it all use the same "0x…" address (what is EVM).
- If the recipient is an exchange that requires a memo or tag for this crypto, enter it. A memo is an extra recipient number the exchange uses to know whose payment it is. Without it the transfer may not be credited, and Coinbase can no longer get back what you sent; only the receiving exchange's support can help11.
- Send a small test amount first and wait for the recipient to see it. The guide how to send USDT walks through a test transfer.
What to do if a transfer went out on the wrong network
If you sent crypto to Coinbase on an unsupported network, or sent a token the exchange does not support, the recovery tool (asset recovery) sometimes helps. It works only for some cryptocurrencies and networks and only in a browser, and it sends whatever it recovers to your own wallet. On large amounts Coinbase charges a percentage for recovery, the network fee is charged separately, and the company takes no responsibility for the result12. Terms and the size of the charge.
If a transfer reached Coinbase without a memo or tag, write to support and include the transaction hash, meaning the transfer's number on the network. In this case the company can help11. A mistake made when withdrawing from Coinbase is something the exchange cannot fix; your only option is the support team of the wallet or exchange that received the funds13. Similar cases are collected in the article beginner mistakes.
What you pay for on Coinbase, fee by fee
There is no single fee on Coinbase. You pay at each step separately, and the total depends on the trading mode, the type of trade and the withdrawal network.
| Step | What you pay for |
|---|---|
| Buying in simple mode | spread and fee |
| Buying in Coinbase Advanced | fee by volume |
| Withdrawing crypto | network fee |
| Coinbase One subscription | monthly or yearly charge |
A spread is the gap between the buying and selling price built into the rate, as at a currency exchange office where buying a dollar costs more than selling one. The simple mode is meant for people who want things clear, Coinbase Advanced for people who trade often, and according to the company fees in the simple mode are usually higher. In Coinbase Advanced the charge depends on how much you trade, and Coinbase One is a subscription paid monthly or yearly5. The network fee is the payment for the network to record your transfer, and it depends on the network you pick; the article what is gas explains why. The rates for each step and payment method change.
What is known about Coinbase's reliability
Coinbase is a public company that reports openly
Shares of Coinbase Global, Inc. trade on a US stock exchange, so every year the company files a report with the US securities regulator (SEC) and reports serious incidents separately ⚖️5. For you, this means you can check what the company says about incidents against the original filing.
Being public does not guarantee that the money in any particular account is safe.
In 2023 the SEC sued Coinbase14, and in February 2025 the case was dropped for good ⚖️5.
Where Coinbase keeps customers' crypto
Coinbase says it holds customer assets one to one, separately from its own, and that they always belong to the customer and never become Coinbase's property1. Under US law, customer crypto that Coinbase holds in the US is not counted as the company's property. If Coinbase went bankrupt, the people it owes money to could not lay claim to that crypto ⚖️. Even so, crypto on the exchange is not insured by any government or government agency, and Coinbase's policy against theft from its storage protects the company itself from hacks and is not deposit insurance155. What happens to customer money in other countries depends on local law ⚖️, so an amount you care about keeping is safer in your own wallet (how to store crypto).
What licenses Coinbase has
Coinbase holds licenses and registrations in the US, the UK, the EEA countries, Argentina, Canada, Australia, Singapore and other countries ⚖️5. A license in one country does not cover another, so look Coinbase up in your own regulator's register.
The 2025 Coinbase customer data leak
In May 2025 Coinbase told the SEC that criminals had paid several contractors and support staff outside the US and used them to obtain data on some customers. The stolen data included names, addresses, phone numbers and email, ID document images, balances and transaction history, plus the last digits of bank account numbers and of Social Security numbers, the personal ID numbers of US residents. According to the company, passwords and private keys were not affected. The people involved had no access to customer funds. Coinbase refused the ransom demand and promised to voluntarily reimburse retail customers who, because of this incident, sent funds to scammers themselves2.
Scammers used the stolen data to pose as support5. A "Coinbase employee" who knows your name and balance may well be a scammer, then. Never give out your password or two-factor codes, and do not move crypto to a "safe" address because the caller asks you to. Hang up and open the app yourself. The article phishing and scams explains how such schemes work.
Who Coinbase suits and who it does not
Coinbase suits you if it is available where you live, you are buying crypto for the first time and like the simple mode, and the company's licenses and public reporting matter more to you than the difference in fees. It suits residents of Russia less, along with people in countries missing from Coinbase's list, people who need a USDT network that Coinbase lacks, and people who want to hold the keys to their crypto themselves. In that last case you need your own wallet, and the article how to choose a crypto wallet helps you pick one. The exchange selection hub shows how Coinbase compares with other exchanges on the same points.
More detail on the company, the Base network, licenses and EU rules
Coinbase Global, Inc. trades on the Nasdaq stock exchange under the ticker COIN5. The company went public on 14 April 2021 through a direct listing, without issuing new shares14. The annual report to the SEC is called a 10-K, and reports on serious incidents are 8-Ks ⚖️. The company has no headquarters and works remotely5.
The SEC case was dismissed on 28 February 2025 by agreement of the parties, with prejudice, so the same claim cannot be filed again ⚖️5.
For custody in the US, Coinbase relies on Article 8 of the US Uniform Commercial Code (UCC), which covers securities held in accounts ⚖️5.
The Base network is built on the OP Stack technology3.
Coinbase's licenses on 30.10.2026 ⚖️5:
- in the US, money transmitter licenses in the states that require them, and a BitLicense in New York State;
- in the UK, e-money firms authorized by the financial regulator (FCA) and a registration with the same regulator as a cryptoasset business;
- in the EEA, a MiCA license, issued in June 2025 by Luxembourg's regulator (CSSF)16.
Since 13 December 2024, Coinbase's European companies have restricted six stablecoins for retail customers, USDT among them. The one-time conversion was announced by Coinbase Luxembourg S.A., and it covers 14 such stablecoins ⚖️10.
In May 2022, after an earlier package of sanctions, Coinbase warned some users from Russia with balances above 10,000 euros that it would restrict access to their accounts, and asked them to withdraw their funds by 31 May 202217.
