Primary category
Custodial platform
Hosted-account keys are controlled by Coinbase; self-custody wallet products are separate.
C
Exchange · Evidence assessment
Coinbase
Custodial crypto platform with separate self-custody products
Coinbase combines a mainstream custodial account, an advanced order-book interface and institutional services. Its separate wallet products must not be treated as the same custody model.
Evidence state
Public sources reviewed
Assessment reflects the cited public record and product documents.
Decision focus
Entity, custody and total cost
The applicable contract and fee path depend on product and location.
Editorial assessment
The decision in plain language.
Coinbase presents one of the clearest public-document trails in this group, but the practical answer depends on the exact product and legal entity. It is a credible shortlist candidate for buyers who value a recognisable interface and documented controls; it is not a substitute for checking regional protections, current fees and withdrawal conditions.
Best suited to
Users who prioritise a familiar fiat-to-crypto path and a comparatively strong public disclosure trail.
Primary trade-off
Convenience comes with platform custody, product-dependent pricing and legal protections that vary by region.
Evidence-backed strengths
- Public user agreements and regulatory records make the service relationship easier to trace than many smaller platforms.
- Simple and advanced trading surfaces serve different levels of experience.
- Custody and security disclosures give researchers identifiable claims to test.
"Limitations to resolve"
- Simple transactions may combine disclosed fees with a spread, so the previewed total matters more than a headline rate.
- Crypto held on platform is not ordinary bank-deposit or brokerage protection by default.
- A 2025 support-related data theft remains relevant even though Coinbase said passwords and private keys were not compromised.
Evidence review
What the public record currently supports.
Each conclusion is bounded by its product, jurisdiction and source type.
01Evidence reviewed
Custody is product-specific
Coinbase.com is a custodial service: its agreement and custody explainer describe hosted assets and platform-controlled keys. A Coinbase self-custody wallet follows a different model, so this assessment does not merge the two into one safety conclusion.
02Evidence reviewed
Legal entity and protection
The United States agreement names Coinbase, Inc. for covered services and states that crypto is not FDIC- or SIPC-protected. Cash treatment is conditional, while UK and EEA users may encounter different entities and permissions; a registration record is evidence of oversight, not a guarantee against loss.
03Evidence reviewed
Total cost depends on the route
Coinbase says simple transactions can include both a fee and spread, while Advanced uses maker/taker pricing without an embedded spread. A fair comparison must capture the displayed quote, payment method, order type and withdrawal cost for the same scenario.
04Evidence reviewed
Security record is not incident-free
Public filings describe a 2025 incident involving data taken through support-channel access. Coinbase said passwords, private keys and customer funds were not compromised, but the event still matters for social-engineering, reimbursement and governance review.
Decision dossier
From evidence to an accountable decision.
Ten separate modules prevent product scope, legal status, cost, control and remedy from collapsing into one brand impression. Sources were retrieved on .
Answer first
Shortlist Coinbase when a traceable US custodial contract, a familiar retail route and a separate advanced order book matter more than self-custody. Choose the exact Coinbase product and country first; the brand alone does not determine custody, cost or protection.
Source register · retrieved 17 Aug 2026Who should not choose it
It is a poor fit for anyone who requires direct key control, wants one globally uniform legal relationship, or will buy frequently without comparing the simple quote against Advanced and the eventual withdrawal cost.
Source register · retrieved 17 Aug 2026Product and legal-entity scope
This dossier centres on Coinbase.com hosted accounts and Advanced Trading under the current US individual agreement, which identifies Coinbase, Inc. Coinbase Wallet and non-US contracts are separate objects and cannot inherit this conclusion.
Source register · retrieved 17 Aug 2026Custody and security controls
The US agreement says Coinbase retains control of private keys for hosted-wallet blockchain addresses while title to supported assets remains with the customer. Account controls reduce access risk, but the 2025 support-chain data theft shows that identity and social-engineering exposure remain material even without a private-key breach.
Source register · retrieved 17 Aug 2026Regulation and customer protection
State and federal records can establish a named permission or enforcement event, not a blanket guarantee. The reviewed agreement distinguishes conditional pass-through protection for qualifying cash from crypto, which is not FDIC- or SIPC-protected merely because it is held at Coinbase.
Source register · retrieved 17 Aug 2026Fees and total-cost recipe
For a GBP or USD 1,000 BTC purchase, capture the simple-buy preview, its spread and fee, then place an economically equivalent Advanced order and record maker/taker treatment, fill price and the network withdrawal charge. No route winner is asserted until both receipts are collected at the same time and market.
Source register · retrieved 17 Aug 2026Funding, withdrawal and exit
Bank, card and crypto rails can have different eligibility, limits, holds and charges. The decisive test is not whether deposit is easy but whether the same account can complete a documented withdrawal to a verified self-custody address without an unexplained restriction.
Source register · retrieved 17 Aug 2026Execution, API or wallet permissions
Advanced exposes order books and APIs, but documentation proves availability rather than fill quality. Depth, slippage, partial fills, cancellation behaviour and API permission boundaries remain controlled-scenario questions.
Source register · retrieved 17 Aug 2026Privacy and telemetry
A hosted account necessarily links identity, account and transaction records. The live test must inventory consent surfaces, device/security data, marketing controls and any additional data shared by payment or identity providers rather than treating a self-service privacy menu as anonymity.
Source register · retrieved 17 Aug 2026Support and dispute route
The applicable agreement, support path and dispute provisions must be saved with the account country. Recovery and fraud cases should record channel, identity checks, escalation owner, resolution time and whether a final written response identifies the next external route.
Source register · retrieved 17 Aug 2026Fit boundary
Four situations, before a brand preference.
A named US custodial contract and listed-company disclosure trail matter.
The reviewed agreement and SEC filings create a traceable starting chain.
You want both a simple retail quote and a separate order-book route.
Coinbase and Advanced support a matched route comparison.
You require direct control of private keys.
Coinbase controls hosted-wallet keys under the reviewed service.
You will not compare quote, fill and withdrawal cost.
A headline fee cannot establish total route cost.
Reproducible scenarios
The next evidence, already specified.
These are protocols, not claimed results. Inputs remain fixed so later observations can be repeated or challenged.
Simple versus Advanced total cost
Fixed inputs: Same verified US account, USD 1,000, BTC/USD, five-minute observation window.
Capture: Preview, spread reference, order type, fee, fill, destination amount and timestamped withdrawal quote.
Hosted-asset exit
Fixed inputs: Predeclared asset, supported network, clean destination address and account-security state.
Capture: Hold notice, address checks, platform fee, network transaction, confirmations and usable arrival time.
Account recovery and dispute path
Fixed inputs: Disposable test account with no material assets and a documented lost-device condition.
Capture: Identity steps, channel hand-offs, warnings, written outcome and escalation route.
Privacy and data-control inventory
Fixed inputs: Same verified account, default settings captured before any optional consent changes.
Capture: Required and optional data, device/security telemetry, marketing controls, export/deletion route and participating providers.
Incident and change timeline
What changed the risk picture.
- Coinbase disclosed a support-chain data theft in an SEC filing.
Treat impersonation and account-recovery resilience as core controls, even though Coinbase said passwords and private keys were not compromised.
- The 2025 Form 10-K quantified cash costs linked to the incident.
The event is a continuing governance and reimbursement signal, not a closed technical footnote.
- The US individual agreement was updated.
Entity, custody, pricing ceilings and dispute language must be re-read against the user’s actual product before funding.
Alternatives
Choose by responsibility, not fame.
Kraken
Granular account controls and a professional trading workflow matter more than a mainstream retail presentation.
MetaMask with a hardware wallet
The objective is direct onchain control rather than leaving assets in a hosted account; this changes the responsibility model rather than simply replacing an exchange.
Evidence confidence
Medium confidence, with a visible stop gate.
- Supported
- The US contract, custody language, public-company filings and provider fee documentation create a traceable documentary chain.
- Unresolved
- Matched live costs, regional variants, withdrawal performance, privacy settings and support outcomes are the variables most likely to change the conclusion.
- What would change the conclusion
- A materially different applicable contract, repeated controlled withdrawal failure, or independently evidenced improvement or deterioration in recovery and security controls would change the shortlist position.
Method applied
How this file is challenged.
- Fix product, residence, legal entity and account tier.
- Map every conclusion to a current contract, primary record or dated provider document.
- Run matched cost, withdrawal and recovery scenarios without exposing credentials or material assets.
- Publish the raw scenario inputs and limitations before any score.
Dossier change log
Material editorial changes.
Added an integrated decision chain spanning entity, custody, cost, exit, privacy, support and scenario design; primary web sources were retrieved again on this date.
FAQ
Questions that decide whether the product fits.
Is Coinbase the custodian of hosted crypto?
For the reviewed US hosted service, Coinbase controls the private keys while the agreement says title remains with the customer. Coinbase Wallet follows a different model.
Does FDIC protection cover my crypto?
No. Any pass-through insurance discussion concerns qualifying cash at participating institutions and is conditional; it does not turn crypto into an insured bank deposit.
Is Advanced always cheaper?
It has a different fee and execution model, but the answer requires a matched quote, fill and exit-cost comparison for the same account and market.
What would most change the Coinbase assessment?
A reproducible matched-cost, withdrawal and recovery set for the named market, followed by a documented evidence-gate review.
Applicable scorecard
Exchange scoring framework.
Weights are published in advance. An evidence gate can still block the final calculation.
Source register
Documents behind the assessment.
Primary records establish legal and regulatory facts. Product documents establish current contractual or functional claims; they do not prove solvency or future performance.
S01
Coinbase — United States user agreementContract / product document · checked 18 Aug 2026
S02Coinbase Help — treatment of customer digital assetsContract / product document · checked 18 Aug 2026
S03Coinbase Help — retail pricing and feesContract / product document · checked 18 Aug 2026
S04Coinbase Help — Advanced feesContract / product document · checked 18 Aug 2026
S05Coinbase 2025 Form 10-KPrimary record · checked 18 Aug 2026
S06Coinbase 14 May 2025 Form 8-KPrimary record · checked 18 Aug 2026
S07New York DFS — virtual currency businessesPrimary record · checked 18 Aug 2026
S08UK FCA — CB Payments enforcement noticePrimary record · checked 18 Aug 2026
Change control
Assessment history.
Material changes remain visible. A log entry records editorial work and the evidence behind each change.
C01
· Editorial assessment updated from cited primary records and product documentation.