Why do so many people think Crypto.com is a scam?

In 2026, “is Crypto.com a scam” ranks among the most-searched questions about the platform – despite Crypto.com being one of the largest and most regulated crypto exchanges in the world. The question does not come from nowhere. Several specific events have shaped public perception in ways that are worth understanding before you write the platform off or trust it uncritically.

The first driver is the Trustpilot score. Crypto.com carries a 2.0-star average on Trustpilot – a jarring number for a platform claiming 150 million users. Scam-radar instinct fires immediately when you see it. The second driver is the 2022 security breach, in which 34 million dollars was withdrawn from customer accounts without authorization.

That story spread rapidly across social media without the full context that followed: every affected user was made whole within days. The third driver is the SEC investigation that began in 2024, which generated alarming headlines. The context that the investigation was dropped entirely with no action in March 2025 received a fraction of the original coverage.

Add to that the fact that the crypto industry has produced genuine, large-scale scams – FTX, Celsius, OneCoin, BitConnect – and the suspicion becomes more understandable. When a sector has that kind of body count, every unfamiliar platform gets scrutinized through the same lens.

The question is whether that scrutiny, applied to Crypto.com, uncovers evidence of a scam – or evidence of a legitimately regulated platform with specific operational weaknesses.

Is the Trustpilot 2.0 rating proof of a scam?

The Trustpilot score is the single most-cited data point by people who call Crypto.com a scam online. It deserves a detailed look because it is genuinely low – but it does not mean what most people assume it means.

On Trustpilot, Crypto.com sits at 2.0 stars. On the iOS App Store, the same platform holds a 4.6-star average from over half a million ratings. On Android, it holds 4.5 stars from roughly 100,000 reviews. That is a gap of over 2.5 stars between platforms measuring the same product and the same user base. The explanation is not that one set of ratings is fake. It is that Trustpilot and app stores attract different reviewers in different mental states.

Trustpilot is a complaint-driven platform. The overwhelming majority of people who leave a Trustpilot review do so because something went wrong and they are frustrated. The overwhelming majority of people who use Crypto.com without incident – the app works, trades execute, withdrawals process – never think to open Trustpilot.

App store reviews are left in the context of regular use and capture a far wider, more representative sample. The pattern across Trustpilot’s Crypto.com reviews is highly specific: the complaints cluster around slow customer support response times, account verification holds that block withdrawals, and confusion about KYC requirements. These are real and legitimate operational complaints. They are not evidence of fraud.

The honest position is that Crypto.com has a genuine customer support problem. Tickets can take days or weeks to resolve. Account holds applied during enhanced KYC checks come with minimal communication.

For a platform of 150 million users, that gap in operational quality is a real failing – and it deserves to be called out as one. But a company with bad customer service and a scam are not the same thing, and conflating them leads to bad decisions in both directions.

What do the real incidents – the hack and the SEC investigation – actually tell us?

Two events in Crypto.com’s history are most commonly cited as evidence of a scam. Both deserve an accurate account, not the version that circulates without context.

The 2022 hack, in full. On January 17, 2022, attackers exploited a vulnerability in Crypto.com’s two-factor authentication flow – likely through compromised API keys or session tokens – and gained access to 483 user accounts. They withdrew approximately 34 million dollars across Ethereum and Bitcoin before Crypto.com’s automated monitoring flagged the abnormal activity.

The platform paused all withdrawals globally for approximately 14 hours while it investigated, revoked all customer 2FA tokens, and fully reimbursed every affected account from operational funds. No user permanently lost money.

Crypto.com then introduced a mandatory 24-hour delay for new withdrawal address whitelisting and launched an Account Protection Program. For additional context: Binance experienced a 40 million dollar hack in 2019 and covered it with its emergency fund; KuCoin lost 280 million dollars in 2020 and also reimbursed users. Getting hacked and covering user losses is not the behavior of a scam operation.

The SEC investigation, in full. In August 2024, the SEC issued a Wells notice to Crypto.com – a formal signal of intent to bring an enforcement action. This was part of a broad regulatory campaign by then-chair Gary Gensler against crypto exchanges. Crypto.com contested it aggressively, filing its own lawsuit against the SEC in October 2024.

After a change in administration, the company withdrew that lawsuit in December 2024. In March 2025, the SEC closed its investigation with no enforcement action, no settlement, and no fines. The same SEC leadership simultaneously closed or dropped investigations into Coinbase, Binance, Gemini, Robinhood, and others. Crypto.com was never charged with anything, paid nothing, and admitted nothing.

How does Crypto.com compare to actual crypto scams?

The clearest way to answer the scam question is to compare Crypto.com against the defining characteristics of platforms that have actually defrauded users at scale. The differences are not marginal.

What do users who have actually been through a bad experience say?

Separating legitimate complaints from scam accusations requires listening carefully to what frustrated users are actually describing. The two stories below represent the most common patterns in real Crypto.com user accounts – one from someone who initially thought the platform was a scam, and one from someone whose experience genuinely tested that assumption.

Is Crypto.com worth it? Our honest verdict

Crypto.com is not a scam – by any definition that word reasonably carries. Its funds have not disappeared. Its users have not been defrauded at scale. It holds genuine multi-jurisdiction regulatory licenses, publishes auditable Proof of Reserves with ratios above 100%, carries over 870 million dollars in insurance, and holds ISO 27001, SOC 2 Type II, and PCI DSS Level 1 security certifications.

The SEC investigation that alarmed so many observers was closed with zero enforcement action in March 2025.

What Crypto.com has earned – legitimately – is a bad reputation for customer support. Account verification holds that apply without warning, tickets that can take days or weeks to reach a human, and a chatbot that cannot handle anything above the most basic requests are real operational failures for a platform of this scale.

These failures cause genuine user stress and generate the pattern of negative reviews that drives the scam suspicion. Calling that poor operational quality “fraud” is inaccurate. Calling it a significant weakness is fair and correct.

Which type of user is Crypto.com actually right for?

Given the honest picture above, the most useful framework is matching your own situation and priorities to what Crypto.com does well versus where its gaps will cost you.