Account security and custody
Coinbase offers account security tools and holds supported crypto on your behalf. Your protection depends on what you hold, how you secure access and what causes a loss. Here’s what to check before you fund an account or leave a balance there.
By Crypto Dispensers · Reviewed November 2, 2026
Coinbase operates a real crypto exchange, and its parent company publishes financial statements and risk disclosures with the SEC. Scammers also impersonate Coinbase. If you’re asking because of a message or a missing transfer, start by checking what happened in the account you opened directly.
Coinbase annual report filed with the SEC · FBI warning about exchange impersonation · Coinbase account lock instructions
Coinbase is an identifiable company with public filings, published customer terms and a U.S. licensing directory. Those records give you ways to verify who provides the service and what obligations it takes on. Whether to rely on Coinbase for a particular balance depends on the product, your need for access and the losses you could absorb.
SEC company filings · Coinbase 2025 annual report · Coinbase U.S. licenses and disclosures
Start with the product and the event you’re worried about. A dollar balance, a Bitcoin balance and a self-custody wallet have different protections and recovery paths.
| If you’re worried about | What to check |
|---|---|
| A bank holding your dollars fails | Find out where the cash is held and whether pass-through deposit insurance conditions apply. |
| Someone signs in as you | Secure your email and sign-in method. Check your account lock and recovery options. |
| Someone convinces you to send crypto | Pause and verify the request through the official app or Help Center before you authorize anything. |
| Coinbase delays a withdrawal | Check your funding status and any account review before counting on the balance for a deadline. |
| Bitcoin falls in price | Decide whether you can afford the loss. Account controls and insurance cannot protect the market value. |
Crypto Dispensers provides crypto services and has a commercial interest in how readers choose a provider. This guide focuses on the U.S. individual Coinbase account.
Coinbase’s U.S. agreement says it can hold customer dollars in pooled accounts at insured banks or credit unions, or place funds in permitted liquid investments. Eligible deposits may qualify for pass-through FDIC or NCUSIF coverage if the institution fails. Where the funds are held, recordkeeping, applicable limits and the regulator’s determination all matter. At an insured bank, deposits in the same ownership category count together toward the applicable limit.
Bitcoin and stablecoins are crypto assets. FDIC deposit insurance does not cover them. A USD price or a token’s target value of one dollar does not establish deposit coverage.
Coinbase U.S. Individual User Agreement · Coinbase U.S. cash guidance · FDIC deposit insurance
Coinbase controls the keys for crypto in its hosted exchange wallet. Its U.S. agreement says it holds supported assets for your benefit. You still depend on Coinbase to process withdrawals and maintain access to the account. In self-custody, you control the keys and take responsibility for securing and recovering them.
Coinbase says its crime insurance covers a portion of digital assets held across its storage systems against certain theft events. The policy excludes losses from unauthorized access to a personal Coinbase account when credentials are compromised. A covered event may result in losses beyond the available insurance proceeds. Review the applicable terms before counting on reimbursement.
Eligible Coinbase One members can check the separate account protection warranty for qualifying unauthorized outbound transfers. Enrollment, authentication, timing and other conditions apply. Transfers you approve after being deceived are excluded from that program.
Coinbase U.S. Individual User Agreement · Coinbase insurance disclosure · Coinbase One limited warranty
Coinbase Wallet and wallets in the Base app are user-controlled. Whether one suits you depends on how you’ll protect and recover access. A hosted Coinbase exchange balance depends on Coinbase’s account recovery and withdrawal process. A self-custody wallet depends on the recovery method you set up.
For example, if you’re moving to a new phone, confirm the expected wallet address appears on the replacement device before wiping the old one. Coinbase support can explain the recovery steps for your wallet type. It cannot move funds for you or supply a lost recovery phrase.
Coinbase wallet security guidance · Wallet recovery options · Compare Coinbase and Coinbase Wallet
Coinbase can be a practical place to keep crypto you plan to trade soon if you’re comfortable relying on the exchange for account access and withdrawals. For savings you expect to hold for years, compare that dependence with your ability to secure and recover a wallet yourself. The decision depends on how you’ll use the balance and what would happen if you temporarily lost access.
| Your situation | What to weigh |
|---|---|
| You trade regularly | Keeping a working balance on Coinbase reduces the need for repeated transfers. Check the available-to-send balance before counting on a withdrawal. |
| You’re holding for years | Compare exchange access risk with the work of protecting your own wallet backup. Check how you would recover after losing your device before moving a large balance. |
| You need the funds on a deadline | Allow for account checks, funding settlement and transfer confirmations. Verify access early. |
Coinbase’s U.S. agreement says title to supported assets in its hosted wallet generally remains with the customer, subject to specified exceptions such as secured USDC under applicable card terms. Coinbase controls the keys for the hosted wallet. The ownership terms don’t establish when a withdrawal will complete. Check the terms separately for staking, collateral or other features you use.
Coinbase U.S. agreement, section 2.7
For Coinbase, check whether you can recover your email and sign in from a replacement device. For self-custody, check whether your backup method can restore access without the original device. If you decide to transfer, confirm the network, address, fees and minimums. A small test transfer can help confirm the destination when the costs and minimums allow it.
Coinbase disclosed that people in support roles improperly collected customer information. The filing describes exposed information such as contact details, identity documents and account records. Coinbase reported that the incident did not compromise passwords or private keys and that the people involved could not directly access customer funds. The data could still help someone impersonate support and make a scam sound convincing.
If someone calls and asks you to move funds to a safe wallet, end the call and open Coinbase independently. Keep passwords, verification codes and wallet recovery secrets private.
Coinbase account security guidance · Coinbase account lock instructions
That depends on how you want to manage custody and recovery. With a hosted wallet, account access and withdrawals depend on the provider. With self-custody, losing your recovery access can mean losing the Bitcoin. Compare both responsibilities before choosing.
A passkey makes certain sign-in attacks harder. You can still authorize a transfer after someone deceives you, so verify unexpected requests independently.
A hold can arise from funding settlement or account review. Check the notice and contact official support if you also see unfamiliar activity.
We checked Coinbase’s U.S. agreement, security instructions, coverage disclosures and incident filing, alongside FDIC guidance. The risk table and funding checklist are our editorial synthesis. We used AI assistance for drafting and artwork. Our review used public documents and did not include account testing or an independent security audit.
Your Crypto Dispensers account
Create an account to see the services available to you. You can buy Bitcoin by wire, debit, credit or ACH, sell supported crypto for a USD bank payout, or exchange supported assets. Contact our team if you need help choosing a service.
Creating an account does not authorize a payment. Availability depends on your location, account and required checks.
Helping people access Bitcoin since 2017.
Privacy controls
Necessary cookies are always on so the site works. You can also allow analytics to help us improve the experience, and advertising cookies to measure campaigns and show more relevant ads. You can change this anytime.
Read our privacy policy