01CEX.IO review in brief: a seasoned card on-ramp, not a local licensee
People type "is CEX.IO legit" into search boxes for good reason: the name has been around for over a decade, yet few Asian readers know who actually stands behind their account. Our short answer is that CEX.IO is a long-running international exchange with checkable US and UK registrations and a very smooth card purchase. It is also not licensed anywhere in Asia. Both things are true, so where you live decides how useful it is.
CEX.IO at a glance
- Founded
- 2013, London roots
- Entity for Asian customers
- CEX OVRS LLC (Nevis)
- Payment methods
- Visa, Mastercard, Apple Pay, Google Pay
- Card fee
- 0.49%–4.99% + service charge
- Spot fees
- from 0.15% maker / 0.25% taker
- Fiat
- USD · EUR · GBP
- Coins
- about 325
- App ratings
- iOS 4.4 · Google Play 4.1
- Not available in
- Japan, Singapore, India, Myanmar and others
Oleksandr Lutskevych founded CEX.IO in 2013 as a cloud-mining and exchange business. It also ran the GHash.IO mining pool, which briefly approached 51% of Bitcoin's hashrate in 2014 before being wound down after a community outcry. We mention it because it is part of the record: this is a company that lived through crypto's wild early years and changed course under pressure.
The milestones since then tell a consistent story. CEX.IO says it was the first exchange to sell Bitcoin by card (2014), launched Instant Buy in 2016, opened a US office in 2019, added Apple Pay and Google Pay in 2021, shipped its own app in 2022, and rebranded its order book from Exchange Plus to CEX.IO Spot Trading in 2024. The company claims more than 15 million registered users and $7.5 billion in customer deposits since 2019; those are its own figures, which we cannot audit.
Today's product line covers Instant Buy and Sell, spot trading, CEX.IO Prime for institutions, Earn (Savings and Staking), a custodial wallet that accepts 200+ coins across 40+ blockchains, and CEX.IO Pay for free transfers between users by ID. The CEX.IO debit card was only ever issued in the European Economic Area and has been suspended since 3 February 2026, after the issuing partner lost its licence, so it is irrelevant for Asia.
02CEX.IO licences: what it has and what it lacks
CEX.IO's legal page names four contracting entities: CEX.IO Markets UK Ltd (UK), CEX.IO Europe, S.L. (EEA), CEX.IO Corp. (USA) and CEX OVRS LLC for "other jurisdictions". If you live in Asia, that last one is yours.
- United States: CEX.IO Corp. is a money services business registered with FinCEN, NMLS ID 1804170, with money-transmitter licences in more than 30 states. New York is restricted.
- United Kingdom: CEX.IO Markets UK Ltd is registered with the Financial Conduct Authority as a cryptoasset business under the money-laundering regulations (FRN 1007192). That is an AML registration, not FCA authorisation; CEX.IO itself says it is not an FCA endorsement, and there is no Ombudsman or compensation-scheme cover.
- Gibraltar: a DLT provider licence from the Gibraltar Financial Services Commission, granted in 2019.
- Asia: none. We checked the JFSA, MAS, SFC, Taiwan's FSC, Korea's KoFIU, FIU-IND, Thailand's SEC, the Securities Commission Malaysia, Dubai's VARA and Kazakhstan's AFSA, among others, and found no CEX.IO licence or registration.
Two more points. CEX.IO does not hold an EU MiCA authorisation, and its "30+ licences and registrations" headline is mostly made up of individual US state licences. We spell this out because too many reviews turn "internationally licensed" into "licensed where you are". For a primer on checking registers yourself, see exchange safety and licences.
03Where in Asia CEX.IO works
CEX.IO's help centre lists 30 unsupported countries and territories. The Asian ones include Japan, Singapore, India, Myanmar and North Korea, plus Afghanistan, Iran, Iraq, Lebanon, Syria, Yemen and the Palestinian Territory. The same page notes that some coins are unavailable to users in the US, China and South Korea because of local rules. Here is how the markets we cover line up.
| Market | CEX.IO account | Local licence | Our note |
|---|---|---|---|
| Japan | Not supported | None | Use a JFSA-registered exchange: Japan guide |
| Singapore | Not supported | None | Use a MAS-licensed provider: Singapore guide |
| India | Not supported | None | Use an FIU-IND-registered platform: India guide |
| Myanmar | Not supported | — | The central bank bans crypto trading |
| Hong Kong | Supported | None (not SFC-licensed) | Offshore; for HKD deposits use a licensed VATP: Hong Kong guide |
| Taiwan | Supported | None (not FSC-registered) | Offshore, no local protection: Taiwan guide |
| South Korea | Supported, some coins restricted | None (not a KoFIU-reported VASP) | KRW deposits only via local registered exchanges |
| Indonesia | Supported | None (not OJK-licensed) | Indonesia blocks unlicensed platforms from time to time |
| Philippines | Supported | None (not BSP / SEC) | The SEC has blocked unregistered exchanges (not CEX.IO so far) |
| Thailand | Supported | None (not Thai SEC-licensed) | The Thai SEC has blocked several offshore exchanges |
| Malaysia | Supported | None (not SC-registered) | The SC treats unregistered exchanges as illegal operators |
| Pakistan | Supported | None (no PVARA licence) | Local licensing only began in 2026 |
| UAE | Supported | None (not VARA / ADGM / SCA) | Offshore |
| Kazakhstan | Supported | None (not AFSA) | Offshore |
| Mainland China | Not on the banned list; some coins restricted | None | Crypto trading services are illegal; we do not encourage sign-ups: China rules |
“Supported” only means the country is not on CEX.IO's exclusion list. It does not guarantee your local card will be accepted or that local-currency rails exist. Source: support.cex.io unsupported-countries article.
There is a practical catch too. CEX.IO has no Asian local-currency rails: no HKD, TWD, THB or MYR deposits, and no FPS, PromptPay, DuitNow or GCash. In practice you pay with an international card or Apple Pay / Google Pay, charged in USD, EUR or GBP, so your bank will usually add a foreign-transaction fee on top (check your card's terms). For large, regular purchases in your own currency, a local licensed platform is almost always cheaper.
04CEX.IO fees: where the card costs bite, where spot is cheap
CEX.IO runs two fee logics. Instant Buy charges by payment method: Visa, Mastercard, Apple Pay and Google Pay cost between 0.49% and 4.99% plus a service charge, depending on the card and region, and the quoted price includes a spread that CEX.IO does not publish as a number. Spot trading uses maker/taker fees on the order book, starting at 0.15% / 0.25%, which is far cheaper than Instant Buy.
The spot tiers are published and easy to follow: under $10,000 of 30-day volume you pay 0.15% / 0.25%; under $100,000 it is 0.13% / 0.23%; under $500,000, 0.09% / 0.19%, and so on down. CEX.IO's own page says taker fees "start at 0.25% and decrease to 0.10%". Against the roughly 0.10% base rate at Binance or OKX, CEX.IO is not the cheapest place to trade. Its edge is the card step.
A worked example: an engineer in Kuala Lumpur buys $300 of Bitcoin with a USD-billed Visa debit card. The cost stack is the CEX.IO card fee (say 2.99%), the Instant Buy spread, and whatever foreign-transaction fee the bank adds. Together that is clearly more than a bank transfer to a local licensed exchange, but the coins arrive in minutes and there is no order book to learn. That is the trade-off of card buying in one sentence: you pay for speed and simplicity. Our exchange fee comparison and credit-card buying guide go deeper.
Other costs worth knowing: a Bitcoin withdrawal is 0.0005 BTC, SEPA deposits in euros cost €2.99, and PayPal and ACH are available to US customers only.
Want to try a small card purchase first? If your country is supported, it takes a few minutes.Visa · Mastercard · Apple Pay · Google Pay
Buy your first coin05KYC and new-account limits
There is no "no-KYC" route at CEX.IO. Any deposit, purchase or withdrawal needs at least identity verification: an ID document, a selfie and a phone number. Further levels add address checks, enhanced verification and corporate accounts. We count that as a plus, because platforms that skip KYC also tend to skip accountability. Our KYC and limits guide explains why "buy crypto without verification" is a bad idea.
For the first three months after ID verification, new accounts can spend $1,000 a day and $3,000 a month through cards and CEX.IO Pay; standard limits apply afterwards. That is plenty for a first purchase. If you plan a large one-off buy, either open the account well in advance or use a local platform that accepts large bank transfers. CEX.IO also restricts payment methods by country of residence and verification level, so what works for a friend abroad may not appear for you.
06Buying crypto by card on CEX.IO: five steps

- Check your country is supported
Use the table above. Residents of Japan, Singapore, India and Myanmar cannot open accounts. Always give your real country of residence; misstating it gets accounts frozen.
- Register and verify your identity
Sign up with email or phone, upload an ID document and take a selfie. Deposits and purchases unlock once you pass.
- Add a card or choose Apple Pay / Google Pay
The card must be in your name and support 3-D Secure. Some banks treat crypto purchases as cash-like and charge a cash-advance fee or decline; debit cards usually go through more easily.
- Enter the amount and check the final coin amount
The confirmation screen lists the card fee and service charge. Compare the coins you will actually receive rather than the headline percentage, so the spread is counted too.
- Decide where the coins live
Small amounts can stay on the exchange. As the balance grows, move it to a wallet you control and switch on 2FA and withdrawal whitelisting.
Apple Pay and Google Pay give the nicest mobile flow, but they are still your underlying bank card with the same fee logic. See buying crypto with Apple Pay.
07Website and app UX
Following our rating methodology, we walked through sign-up, verification, a purchase and a withdrawal on desktop and mobile, watching for two things: where a beginner might get stuck, and whether any costs are tucked away.
Website (cex.io)
- Sign-up & KYC
- ●●●●○ clear, step-by-step document and selfie flow
- Instant Buy
- ●●●●● amount, payment, confirm — three screens
- Fee display
- ●●●●○ card fee shown separately; spread is not
- Spot trading
- ●●●○○ does the job; depth and charts trail the leaders
- Chinese-language support
- ●●○○○ mostly English
CEX.IO app (iOS / Android)
- Store ratings
- iOS 4.4 (~13k ratings) · Google Play 4.1 (~294k reviews)
- Buy flow
- ●●●●● one-tap Apple Pay / Google Pay
- Security settings
- ●●●●○ 2FA easy to find
- Balances & history
- ●●●●○ clean overview of holdings and orders
- Advanced tools
- ●●●○○ serious trading is better on the web
Our overall impression: CEX.IO is designed for buying, not for active trading. The Instant Buy path is short and the buttons are hard to mix up, so you are unlikely to hit "sell" by accident. Our one reservation is that the confirmation screen is honest about the card fee yet never isolates the spread. When you search the stores, look for "CEX.IO: Crypto Wallet/Exchange" and do not confuse it with CeX, the UK electronics retailer.
08Security record: what it proves and what it doesn't
CEX.IO's legal page links to its PCI DSS Level 1 compliance document, the top tier of card-data security and an important credential for a card-first platform. Accounts get two-factor authentication, and the KYC/AML and anti-fraud policies are public. From the public reporting we found, CEX.IO has had no major hack of customer funds between 2013 and 2026, though that is our reading of the record rather than an audited fact.
The gaps should be stated plainly. We found no proof-of-reserves report from CEX.IO, and no SOC 2 or ISO 27001 certification claimed by the company itself. Binance, OKX and Kraken publish Merkle-tree reserve reports. Those reports have limits — they show assets at one moment and say little about total liabilities — but some disclosure beats none.
09Who CEX.IO suits, and who should look elsewhere
Good fit: first-time buyers who want Bitcoin, Ether or USDT by card or Apple Pay with minimal fuss; expats and students holding USD-, EUR- or GBP-billed cards; anyone who wants a long-established international platform as a backup on-ramp.
Poor fit: residents of Japan, Singapore, India or Myanmar (they cannot sign up); residents of mainland China, where crypto trading services are illegal; people who need cheap, large deposits in local currency; active and derivatives traders, who get deeper books and lower fees at the largest exchanges; and anyone for whom local regulatory protection or proof of reserves is non-negotiable.
10Pros, cons and final verdict
Pros
- Operating since 2013 — one of the longest-running exchanges
- Short card checkout: Visa, Mastercard, Apple Pay, Google Pay
- US FinCEN MSB registration and 30+ state licences; UK FCA AML registration
- PCI DSS Level 1 for card data, plus 2FA
- Card fees, spot tiers and new-account limits are all published
Cons
- No licence from any Asian regulator; Asian customers sit with a Nevis entity
- Not available in Japan, Singapore, India or Myanmar; some coins blocked for Korea and China
- No Asian local-currency rails, so card buys often carry FX fees
- Card fees up to 4.99% plus a service charge; Instant Buy spread not shown separately
- No proof of reserves; limited Chinese-language support
Our verdict
CEX.IO is our editor's pick for card purchases in supported countries: long-established, simple and upfront about fees. It is not a local licensee and not the cheapest route for large local-currency deposits. Treat it as the fast way to buy your first coin, not as a vault, and it does that job very well.
11CEX.IO vs other exchanges
No single exchange suits everyone. These are the platforms that score highest in our exchange rankings and that Asian readers most often compare with CEX.IO. Note that Binance and OKX have locally licensed entities in some Asian markets, which CEX.IO does not.
- Editor's pick for card purchases
CEX.IOfounded 2013
One of the simplest card checkouts, with published fees. No Asian licence; does not serve residents of Japan, Singapore or India.
- Card 0.49%–4.99% + service
- Spot 0.15% / 0.25%
- PCI DSS Level 1
-
Binancelargest by volume
Deepest liquidity and a P2P market in many Asian currencies; local licensed entities in Japan, Thailand, Indonesia and Kazakhstan; blocked in the Philippines.
- Spot 0.10% / 0.10%
- Zero-fee P2P for takers
-
OKXexchange + Web3 wallet
Clean pro interface and a strong self-custody wallet; OKJ in Japan and licensed entities in Singapore and Dubai; unavailable in Hong Kong, Thailand and the Philippines.
- Spot about 0.08% / 0.10%
- Built-in Web3 wallet
-
BybitDubai HQ
Derivatives-focused and licensed in the UAE; covered the shortfall after the record 2025 hack. Closed to new Japanese sign-ups.
- Spot about 0.10% / 0.10%
- Unavailable in Japan, Thailand, Philippines
In markets with mature local licensing, such as Japan, South Korea, Taiwan or Thailand, start with the country page, for example our Thailand guide. If you plan to hold your own keys, see our wallet picks. You can also compare our Kraken and Coinbase reviews.
FAQ
Is CEX.IO legit?
Yes, in the sense that it is a long-running, registered business. Founded in 2013, CEX.IO is a FinCEN-registered money services business in the US (NMLS 1804170) with money-transmitter licences in 30+ states, is registered with the UK FCA for anti-money-laundering purposes only, and holds a Gibraltar DLT licence. It has no licence from any Asian regulator; customers in Asia are served by CEX OVRS LLC in Nevis.
What are CEX.IO fees?
Buying with a Visa or Mastercard, Apple Pay or Google Pay costs 0.49% to 4.99% plus a service charge, depending on the card and region, and Instant Buy prices also include a spread. Spot trading on the order book starts at 0.15% maker and 0.25% taker and falls with 30-day volume. A Bitcoin withdrawal costs 0.0005 BTC.
Can I use CEX.IO in Japan, Singapore or India?
No. CEX.IO does not accept residents of Japan, Singapore or India, and Myanmar is also on its unsupported list. Residents there should use a locally licensed platform: a JFSA-registered exchange in Japan, a MAS-licensed provider in Singapore, or an FIU-IND-registered platform in India.
What are the limits for a new CEX.IO account?
New accounts are limited to $1,000 a day and $3,000 a month for card purchases and CEX.IO Pay during the first three months after identity verification. Standard limits apply after that. Any deposit, purchase or withdrawal requires at least ID verification; higher levels add address and enhanced checks.
Does CEX.IO publish proof of reserves?
As of October 2026 we found no proof-of-reserves report from CEX.IO. What it can show is PCI DSS Level 1 compliance for card data and standard account protection such as two-factor authentication. If reserve reporting matters to you, compare Kraken, Binance or OKX, and remember that a reserve snapshot is not proof of solvency.
Sources
- CEX.IO — About (history and milestones) · checked Oct 2026
- CEX.IO — Legal & Security (entities, licences, PCI DSS) · checked Oct 2026
- CEX.IO Help Center — unsupported countries and territories · checked Oct 2026
- CEX.IO — Fee schedule · checked Oct 2026
- CEX.IO — Buy Bitcoin page (card and withdrawal fees) · checked Oct 2026
- FCA Financial Services Register (FRN 1007192) · checked Oct 2026
- NMLS Consumer Access (NMLS ID 1804170) · checked Oct 2026
- App Store — CEX.IO: Crypto Wallet/Exchange · checked Oct 2026
- Google Play — CEX.IO: Trade & Buy Crypto · checked Oct 2026
Buy your first coin by card, where it is supported
Sign up, verify your ID, then buy Bitcoin, Ether or USDT with Visa, Mastercard, Apple Pay or Google Pay. Check first that your country is served.
International licensed platform · operating since 2013 · Visa / Mastercard / Apple Pay