CoinSpot Review 2026: Fees, AFSL, Security and Bank Limits

About CoinSpot

CoinSpot launched in Melbourne in 2013 and is operated by Casey Block Services Pty Ltd, a private company founded by Russell Wilson. It reports more than 3 million customers and calls CoinSpot the largest and most established Australian exchange. The company is also an official partner of the Western Bulldogs AFL club.

Only Australian residents can open an account, using an email address, an Australian mobile number and valid ID. AUD is the only government currency accepted, which explains much of the product design, from PayID funding to tax statements built around the Australian financial year.

Earlier editions of this review counted 500+ listed assets, but CoinSpot's homepage and card page now state 460+, so some tokens have been delisted. Buyers of smaller tokens should confirm a coin is still listed before depositing.

The table below sets out the main strengths and weaknesses we found in CoinSpot:

CoinSpot Features

Nearly every CoinSpot product helps Australians buy, hold or spend crypto. A payment card, an NFT marketplace and portfolio tools support that core, but the exchange offers no leverage, lending or derivatives.

Trading Types

1. Instant Buy and Sell: Users enter an AUD amount and receive one locked price, which CoinSpot calculates by scanning global order books. Every listed coin is available, and each order costs 1% under the fee schedule.
2. Swap: Swap converts one coin directly into another without selling into AUD first, at the same 1% fee.
3. CoinSpot Markets: Markets is an order book, a live list of buy and sell offers from other customers, where users set their own price. The fee is 0.1%, but the Markets page lists only 16 pairs across 15 coins, including BTC, ETH, SOL, XRP and USDT.
4. Take-Profit, Stop and Limit Orders: These conditional orders set an automatic entry or exit price. The fee page lists them at 1%, the same rate as Instant Buy.
5. Recurring Buy: Scheduled purchases buy a fixed AUD amount at a set interval, a method called dollar-cost averaging. Each purchase costs 1%.
6. Bundles: A bundle buys a basket of coins in one order, from a 50/50 Bitcoin and Ethereum split to a 24-coin meme basket. Each coin then sits in its own wallet and can be sold separately.
7. OTC Desk: Orders of $20,000 or more can use the over-the-counter (OTC) desk, which handles large trades away from the order book, for a flat 0.1%. Instant quotes must be accepted within one minute, and CoinSpot processes Order Enquiry requests within minutes on working days.

Investing and Retirement Tools

CoinSpot offers a few tools for long-term and retirement investors:

• SMSF Accounts: A self-managed super fund (SMSF) can open an account by supplying its trust name, ABN, trust deed and beneficiary details. The trust must be set up first, for example through New Brighton Capital, and a local team handles onboarding.
• EOFY Tax Reports: End-of-financial-year statements give accountants and fund auditors the transaction history needed for capital gains calculations.
• Earn Program Status: CoinSpot suspended its Earn program on 1 September 2023, citing changing regulations, and returned all assets to users. It said it hoped to relaunch the program, but no staking product was live in November 2026.
• NFT Marketplace: Members can buy and sell NFTs inside their CoinSpot account without an external wallet.

Additional Services

CoinSpot also provides these services alongside its trading screens:

• CoinSpot Mastercard: A digital prepaid card that spends a CoinSpot balance in AUD, covered in detail below.
• Mobile Apps: The iOS and Android apps support buying, selling and portfolio tracking, and the Android app has 500,000+ downloads and was last updated in October 2026.
• 24/7 Support: Live chat and a help desk run at all hours, and CoinSpot's homepage states an average reply time under 30 seconds.
• API Access: A read-only API lets accountants, fund managers and portfolio tools view account data without permission to trade.

Instant Buy vs CoinSpot Markets

The 15 coins on Markets can be bought at two prices, depending on the screen a buyer opens. Instant Buy charges 1% on all 460+ coins, while Markets charges 0.1% on those 15 only.

For a Bitcoin purchase of $1,000, the fee is $10 through Instant Buy and $1 through Markets. CoinSpot's pricing FAQ describes the instant price as a single quote built from global order books, so it can also include a spread, the gap between buying and selling prices. On Markets, the buyer sees every open offer and chooses the price.

The fee gap matters most for regular buyers. A user investing $500 a month through Recurring Buy pays about $60 a year in fees, compared with about $6 for the same purchases placed manually on Markets, although manual orders take a few minutes each month and require a chosen price.

Coins outside the Markets list have no low-fee option, so buying and later selling one costs 2% before any spread. For large orders in these coins, we suggest comparing Swyftx, which lists a 0.6% standard fee, and reading our guide to CoinSpot fees.

Funding CoinSpot From an Australian Bank

PayID and direct bank deposits are free, and the fee page also lists card and PayPal deposits as free. Cash deposits cost 2.5%. In 2026, tighter funding limits come from banks capping or blocking payments to crypto exchanges to reduce scam losses.

The bank rules that affect CoinSpot deposits are:

• Commonwealth Bank: CommBank may limit payments to crypto exchanges to $10,000 per calendar month and can hold some for up to 24 hours. Since 30 September 2026, customers cannot set up new scheduled payments to exchanges. See our CommBank buying guide.
• Westpac: From 1 December 2026, Westpac may limit payments to identified crypto exchanges to $10,000 per calendar month and will stop branch payments to exchanges. Our Westpac guide has the details.
• ANZ: ANZ Plus blocks exchange payments by default through its Crypto Protect setting. Customers who switch it off can send up to $10,000 per calendar month, as our ANZ guide explains.
• NAB: Since July 2023, NAB has declined card, transfer and PayID payments to exchanges it considers high risk. It publishes no list, so a rejected payment is the first sign of a block. See our NAB guide for more information.

Buyers planning to deposit more than $10,000 in a month should spread transfers across months or check their bank’s rules first. At CommBank and ANZ, each joint account holder has a separate $10,000 limit. Withdrawals from CoinSpot to a bank account remain free.

What is the CoinSpot Card?

The CoinSpot Mastercard is a digital prepaid card that spends crypto wherever Mastercard is accepted. According to the card page, EML Payment Solutions issues it, and Casey Block Services Pty Ltd distributes it under AFSL 562554.

Users can link up to five coin wallets in ranked order, and each purchase converts crypto into AUD at the moment of payment, starting with the first wallet in the list. The card supports Apple Pay and Google Pay and has no sign-up or annual fee. Refunds are returned in AUD, and the original coins are not restored.

The card suits users who already hold a CoinSpot balance and want to spend it in AUD. It pays no cashback, so rewards seekers can compare our best crypto debit cards.

Is CoinSpot Regulated?

CoinSpot holds two government approvals and will need a broader licence once Australia's digital asset law takes full effect. The key regulatory points are:

1. AUSTRAC Registration: CoinSpot has been registered with AUSTRAC, Australia's financial intelligence agency, since 8 May 2018. It is classed as a virtual asset service provider (VASP), the category that replaced the older digital currency exchange label and also covers custody and brokerage.
2. Anti-Money Laundering Duties: Registration requires an anti-money laundering program, identity checks, suspicious matter reports and seven years of record-keeping. Reformed rules for VASPs started on 31 March 2026.
3. ASIC AFSL 562554: ASIC licenced CoinSpot's operating company to provide non-cash payment products, which currently means the CoinSpot Mastercard.
4. DECA Certification: CoinSpot's homepage states it has held certification from the Digital Economy Council of Australia (DECA), the national industry body, since February 2020.
5. Tax Reporting: The ATO collects data from crypto service providers under a data-matching program covering 2014-15 to 2025-26. Australia has also committed to the OECD Crypto-Asset Reporting Framework, and the ATO expects the first international data exchange in 2028, though the measure is not yet law.

A CoinSpot balance today has AUSTRAC oversight but not the custody standards, disclosure and complaint obligations an exchange AFSL will bring. Coinbase Australia received an AFSL for retail derivatives in April 2026. CoinSpot has said it supports the new framework, and an AFSL for its exchange and custody services is the next milestone to watch.

Is CoinSpot Safe?

CoinSpot has operated since 2013 with one known hot wallet loss, and we found no public reports of customers losing funds. Its protection relies on optional account controls, offline storage and outside security audits. It publishes no proof of reserves and does not insure customer balances.

Account Safety Measures

Several of the most useful controls are optional, so new users should enable them in the Security menu:

• App-Based 2FA: Two-factor authentication through an authenticator app adds a one-time code to sign-ins. CoinSpot states it never asks for 2FA codes by phone or email.
• Geo-Lock Logins: This setting blocks sign-ins from outside Australia once app-based 2FA is active. Travellers should switch it off before departure or recover access with an authorisation photo.
• Anti-Phishing Phrase: A custom phrase on the genuine 2FA page helps users spot fake login sites, and a separate Phone Verification Phrase confirms that a caller is from CoinSpot.
• Withdrawal Restrictions: Customisable withdrawal restrictions reduce what an attacker can move from a compromised account.
• Session Timeouts: An automatic logout after a chosen period of inactivity protects accounts on shared or lost devices.

Asset Protection

CoinSpot's security page states that most customer assets sit in cold storage, offline systems that keep private keys away from the internet. Online hot wallets, used to process withdrawals, hold the rest, and CoinSpot does not disclose the split.

CoinSpot first earned ISO 27001, the international standard for information security management, in 2020 and renewed it under the 2022 version in June 2023 after an audit by Sustainable Certifications. The certification covers digital asset storage and data about staff, clients and suppliers. A HackerOne bug bounty program also pays outside researchers who report flaws.

Customer balances have no insurance or government guarantee, and we found no proof-of-reserves report, a public check that an exchange holds the assets it owes. Large or long-term holdings are safer in a self-custody wallet, and our best crypto wallets guide and Ledger vs Trezor comparison cover hardware options.

Security History

CoinSpot's public security record includes one wallet loss and ongoing scams that target its users:

• November 2023 Hot Wallet Loss: On 8 November 2023, blockchain investigator ZachXBT reported that about 1,262 ETH, worth roughly US$2.4 million, left CoinSpot wallets within minutes. CertiK told Cointelegraph the likely cause was a private key compromise on at least one hot wallet.
• Movement of the Stolen Funds: The attacker converted the ETH into wrapped bitcoin and bitcoin through Uniswap, THORChain and Wan Bridge, then split the proceeds across new wallets.
• Company Disclosure: CoinSpot published no detailed incident report, so most public information comes from on-chain analysis.
• Impersonation Scams: In April 2025, the National Anti-Scam Centre warned about fake account alerts sent in the name of crypto platforms. Crypto phishing made up over 75% of the $11.1 million in phishing losses reported from 1 January to 23 March 2025. The centre advises users never to click links in such messages and to contact the platform through its official app.

CoinSpot User Reviews

CoinSpot scores highly on app stores, where users mostly rate the buying experience, and lower on Trustpilot, which attracts more users whose accounts or transfers were paused.

Current review data on the main platforms:

• Apple App Store: The iOS app holds a 4.8 rating from about 46,000 ratings.
• Google Play: The Android app holds a 4.7 rating from about 18,900 reviews and has 500,000+ downloads.
• Trustpilot: CoinSpot has a TrustScore of 4.3 from 2,837 reviews, with 69% five-star and 7% one-star. The company replies to about 90% of negative reviews, usually within a week.
• Industry Awards: CoinSpot's homepage lists WeMoney's Crypto Exchange of the Year and Most Trusted Cryptocurrency Exchange awards for 2025 and 2026.

Positive reviews praise clear AUD prices, fast identity checks and an easy interface. Negative reviews cite restricted accounts, blocked transfers, 2FA problems, slow support replies and the 1% fee. AUSTRAC rules require fraud and identity reviews, and CoinSpot's public replies direct each case to live chat.

CoinSpot Fee Schedule

CoinSpot's fee page uses flat percentages with no volume discounts, so the screen and payment method set the cost of a purchase.

Trading Fees

• Orders on CoinSpot Markets: 0.1% for buyers and sellers, limited to 15 coins. 
• OTC Orders: 0.1% on orders of $20,000 or more.
• Instant Buy, Sell and Swap: 1% on every listed coin, plus any spread in the quoted price.
• Take-Profit, Stop and Limit Orders: 1%.
• Recurring Buy: 1% per scheduled purchase.

Deposits and Withdrawals

• PayID and Direct Deposit: Free.
• Card and PayPal Deposits: Free on the current fee page, so older reviews listing charges are out of date.
• Cash Deposits: 2.5%.
• AUD Bank Withdrawals: Free.
• PayPal Withdrawals: 2%.
• Crypto Withdrawals: A flat network fee, shown on each coin's wallet page before confirmation.

The lowest-cost setup is a PayID deposit, a Markets order on one of the 15 supported coins, and a withdrawal to a personal wallet as the balance grows.

Who CoinSpot Suits

CoinSpot works well for Australians who buy major coins with AUD, hold them for years and want local support. SMSF trustees benefit from trust onboarding and EOFY reports, and occasional buyers of smaller tokens get a long coin list inside one AUD account.

Active traders get less value, since CoinSpot offers no futures, margin or staking, and frequent buyers of coins outside the Markets list pay 1% per order. They should read our CoinSpot vs Swyftx comparison and the best crypto exchanges in Australia ranking.

Final Thoughts

For Australians buying crypto for the first time, CoinSpot remains one of the easiest choices, backed by more than a decade of operation, free PayID deposits, 460+ coins, simple AUD pricing, support at all hours and ISO 27001 certification.

Cost is its main weakness, because the 1% Instant fee applies to every coin and the 0.1% order book covers only 15. Users should fund with PayID and use Markets wherever possible. The payments AFSL is a positive step, but the licence that matters most will cover its exchange and custody services under the 2027 framework.

Bank caps now affect larger buyers, as CommBank, Westpac and ANZ limit exchange payments to $10,000 a month. Planning deposits ahead and moving long-term holdings into a personal wallet reduce dependence on any single exchange.