Skip to content

Security Notice: Xcoins communicates only through our official website, verified email addresses, and our official social media channels. Our team will never contact you privately via WhatsApp, Messenger, or Telegram direct messages.

Sign up

Security, by design and by law.

Two things protect you here: how the platform is built, and who holds it accountable. This page covers both, in plain terms, including exactly which licences stand behind Xcoins.

Is Xcoins safe?

Xcoins is a regulated cryptocurrency platform, authorised under MiCA as a Crypto-Asset Service Provider (CASP) and supervised by the Malta Financial Services Authority, with US services provided through a FinCEN-registered entity. Identity verification is required, and every transaction shows its complete quote before you confirm. Crypto itself remains volatile; the platform's job is that the risk you take is only the market's.

Account protections

How your account is protected

  • Everyone is verified

    Identity verification is required by regulation before anyone can transact. It's what stops someone else opening an account in your name, and it's why every counterparty on the platform is a real, checked person.

  • Two-factor authentication

    Your sign-in is protected by two-factor authentication, so a stolen password alone doesn't open your account. Losing your device means a supervised identity check before access is restored, deliberately.

  • Sensitive changes are challenged

    Changing the email on your account or your verified details requires an identity check first. The inconvenience is the feature: it's what stops an intruder redirecting your account.

  • Monitoring, as regulation demands

    As a licensed platform, Xcoins is required to monitor for fraud, money laundering and account misuse, and to act on what it finds. Oversight isn't optional here; it's a licence condition.

Custody, honestly described

How your crypto is held

  • The Xcoins Wallet is custodial

    Crypto you buy is delivered to your Xcoins Wallet, where Xcoins holds the keys and secures the assets, operating under its licence conditions for custody and administration of crypto-assets. You access it with your account sign-in, not a seed phrase.

  • Your exit is always open

    Custody here is a convenience, not a lock-in. You can send your crypto to your own non-custodial wallet at any time, and the wallet pages explain both models honestly, including what we don't offer.

How to protect yourself

Most crypto losses don't come from platforms being hacked. They come from people being talked into things. Three rules cover almost everything:

  • Xcoins will never ask for your password or a two-factor code. Not by phone, not by email, not by chat. Anyone who does is not us, whatever their profile says.
  • Xcoins will never contact you privately on WhatsApp, Messenger or Telegram. We communicate only through the official website, verified email addresses and our official social media channels.
  • Check the address bar before you sign in. Lookalike sites exist. The real one is xcoins.com. Bookmark it and use the bookmark.

Think your account has been compromised? Change your password, then use the urgent option on the Support page. The faster you flag it, the more we can do.

The licences behind Xcoins

Every market Xcoins serves has a named regulator and a licence you can verify. Here is the complete record.

European Union: MiCA CASP authorisation

Xcoins is authorised by the Malta Financial Services Authority as a Crypto-Asset Service Provider (CASP) in accordance with Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA) and the Markets in Crypto-Assets Act (Chapter 647 of the Laws of Malta). The authorisation covers four crypto-asset services:
  • Exchange of crypto-assets for funds
  • Exchange of crypto-assets for other crypto-assets
  • Custody and administration of crypto-assets on behalf of clients
  • Transfer services for crypto-assets on behalf of clients

Financial Institution licence

Xcoins is also licensed as a Financial Institution by the MFSA under the Financial Institutions Act (Chapter 376, Laws of Malta), providing payment services in relation to electronic money tokens (EMTs).

United States

US services are provided through CF Technologies USA LLC, a FinCEN-registered Money Services Business, with crypto services powered by Zero Hash LLC.

Licensed since 2021

Xcoins received its Class 3 Virtual Financial Assets licence from the MFSA in 2021, one of the first cryptocurrency platforms to achieve it, and operated under it until Malta's transition to the MiCA framework.

Operating entity: CF Technologies Ltd, a private limited liability company incorporated under the laws of Malta, company registration number C 87860. Registered office: Centris Business Gateway, Level 4/W, Triq is-Salib tal-Imrieħel, Zone 3, Central Business District, Birkirkara CBD 3020, Malta

Questions

Questions people actually ask

Yes. Xcoins has operated since 2016 and is authorised by the Malta Financial Services Authority as a Crypto-Asset Service Provider under MiCA, with a separate Financial Institution licence and a FinCEN-registered US entity. Licences of this kind involve audits, capital requirements and ongoing supervision; the licences section above lists the complete record.
No, and you should know that before you buy. Crypto-asset transactions are not covered by the Financial Services Compensation Scheme. Regulation governs how Xcoins operates; it does not insure you against crypto's volatility, and the value of what you hold can go down as well as up.
In the Xcoins Wallet, Xcoins does, operating under its licensed custody service. That's what makes it simple: no seed phrase to lose. If you'd rather hold your own keys, send your crypto to a non-custodial wallet you control, at any time.
You verify your identity with the support team and access is restored. That process is deliberately thorough, because it's the same door an attacker would try to use. What you never face here is the non-custodial nightmare of a lost seed phrase meaning lost funds.
Search the Malta Financial Services Authority register for CF Technologies Ltd, company registration number C 87860. Registers are public, and a licence you cannot verify independently is not worth much.

MiCA Licensed in Europe. Trusted since 2016, used in 100+ countries.

Xcoins is authorised by the Malta Financial Services Authority as a Crypto-Asset Service Provider (CASP) under MiCA. Rates are for information only and are not an offer or investment advice. Crypto prices are volatile, and the value of what you hold can go down as well as up.

Crypto, condensed. The bits that matter.

Market notes, product updates, and the occasional take. One email a week. No hype, no spam.

By subscribing you agree to our Privacy Policy. Unsubscribe anytime.