Binance is the largest cryptocurrency exchange by spot and derivatives volume, and in 2026 it operates under a $4.3 billion settlement with the US Department of Justice, a new CEO, and quarterly Proof-of-Reserves attestations. By CoinGecko spot volume, Binance still clears more daily trades than the next two exchanges combined. Safety, however, depends on what you mean by safe: custody integrity, regulatory survival, and jurisdictional access are three different questions with three different answers. Updated May 2026.
​

Binance Holdings Ltd. is incorporated in the Cayman Islands, with operating entities licensed across Dubai (VARA), France (PSAN), Italy (OAM), Spain, Poland, El Salvador, and several other jurisdictions. Founder Changpeng Zhao (CZ) stepped down in November 2023, and Richard Teng, a former Singapore MAS and Abu Dhabi regulator, has run the exchange since.
​

Teng's appointment was part of the November 2023 DOJ resolution, which required CZ to resign and barred him from operational involvement for three years. CZ pleaded guilty to a single count of violating the Bank Secrecy Act, served four months in a federal facility in California, and was released in September 2024 according to the Federal Bureau of Prisons inmate locator. He remains a Binance shareholder but has no operational role.
​

The corporate structure matters because Binance.com (the global exchange) and Binance.US are legally separate. Binance.US operates as BAM Trading Services, registered with FinCEN as a money services business. The global entity blocks US persons; the US entity is geo-restricted to a narrower set of products and excludes residents of several states including New York, Texas, and Florida.
​

In November 2023, Binance agreed to a $4.3 billion settlement with the DOJ, FinCEN, OFAC, and CFTC for violations of the Bank Secrecy Act, US sanctions, and the Commodity Exchange Act. The settlement installed a five-year independent monitor with full access to Binance's books, compliance systems, and transaction data.
​

The components break down as roughly $1.81 billion in criminal fines, $2.51 billion in forfeitures, a separate $968 million CFTC penalty, and a $3.4 billion FinCEN penalty (with credit for amounts paid to other regulators). The FinCEN consent order and CFTC release document the specific violations: failing to file suspicious activity reports, processing transactions for users in sanctioned jurisdictions, and operating an unregistered derivatives platform for US persons.
​

The practical effect for users in 2026 is that Binance now runs the most heavily audited compliance program of any offshore exchange. The DOJ monitor reviews customer onboarding, sanctions screening, and transaction monitoring quarterly. Reuters reported in March 2025 that the monitor had cleared Binance's KYC remediation, though sanctions screening remains under active review. From a user-safety standpoint, the settlement is paradoxically a positive: a smaller exchange caught doing the same thing would likely have been shut down.
​

Binance publishes a Proof-of-Reserves report each quarter using a Merkle tree construction. Users can verify that their individual balance was included in the reserve snapshot by hashing their account ID and tracing the path to the published Merkle root. The current report covers 30+ assets including BTC, ETH, USDT, USDC, BNB, SOL, and XRP.
​

The Merkle tree method, originally proposed by Nic Carter and others after Mt. Gox, lets an exchange prove total liabilities to customers without exposing individual balances. Binance's Proof-of-Reserves page lists the report date, asset, total customer liability, exchange-controlled wallet balance, and the resulting reserve ratio (always reported above 100%). Independent verifiers can pull on-chain balances from the published wallet addresses on Etherscan, Tronscan, and similar block explorers.
​

The limitations of Proof-of-Reserves are well-documented. The proof shows assets on a specific date and does not address liabilities the exchange may owe outside the snapshot (loans, off-balance-sheet obligations, derivatives margin shortfalls). It also does not prove the wallets are not borrowed for the snapshot. Both Kraken and Coinbase use similar Merkle constructions; Coinbase additionally publishes audited financial statements as a public company, which Binance does not.
​

Separately, Binance maintains the SAFU fund, an insurance reserve created in 2018 by allocating 10% of trading fees. The fund's wallet address is public, and as of Q1 2026 the balance reported on the SAFU page exceeds $1 billion across BNB, BTC, USDT, and TUSD. SAFU has been drawn down twice publicly: once after the 2019 hack that lost 7,000 BTC, and once to compensate users affected by a 2022 BNB Chain bridge incident.
​

US persons cannot use Binance.com. The global exchange geo-blocks US IP addresses and requires non-US residency at KYC. Binance.US is the only legal entry point for US customers, and it offers a substantially reduced product set: spot trading only, no perpetual futures, no margin, no options, and a smaller list of supported tokens.
​

The split traces back to 2019, when Binance created BAM Trading Services to serve the US market under a separate operating license. The SEC sued Binance and Binance.US in June 2023 alleging unregistered securities offerings; the suit was paused in February 2025 pending resolution of broader rulemaking, and the SEC voluntarily dismissed the action against Binance.US in May 2025 per the SEC litigation releases. Binance.US is registered with FinCEN and holds money transmitter licenses in most states, but does not operate in New York (no BitLicense), Texas, Hawaii, or Vermont as of Q1 2026.
​

VPN-based access to Binance.com from the US violates Binance's terms of service and is one of the violations cited in the DOJ settlement. Accounts identified as US-person-via-VPN are frozen, and withdrawals require completing US-jurisdiction KYC, which the global entity does not support. The practical answer for US residents is Binance.US, Coinbase, Kraken, or Gemini.
​

The EU's Markets in Crypto-Assets Regulation (MiCA) took full effect in December 2024 for crypto-asset service providers. MiCA requires CASP licensing in an EU member state, capital reserves, and a stablecoin issuance regime that excludes most non-euro-denominated stablecoins from regulated retail trading. Binance has held a French PSAN registration since 2022 and applied for full CASP authorization across multiple member states.
​

Through 2025, Binance delisted non-MiCA-compliant stablecoins for EEA users in phased steps. USDT remained available to EEA users in custody and conversion services but was removed from EEA spot trading pairs in March 2025, replaced with USDC and EUR pairs for most major assets. The European Banking Authority's MiCA CASP register tracks active authorizations; full retail access in EEA jurisdictions is now tied to that license status.
​

Other offshore exchanges including OKX, Bybit, and KuCoin took similar steps. The MiCA transition demonstrated that Binance has the compliance infrastructure to comply with major-jurisdiction rules when forced to. It also reduced product breadth in the EU compared to pre-MiCA, which some users experienced as a downgrade.
​

The realistic risks fall into four categories: regulatory, custodial, token-correlation, and operational. Each has a different probability and a different mitigation. The exchange has not had a customer-loss hack since 2019, has not halted withdrawals since 2022's brief LUNA aftermath, and has paid every fine to date.

The four major exchanges differ across jurisdiction, public-company status, insurance, and Proof-of-Reserves cadence. Binance leads on volume and product breadth, Coinbase leads on US regulatory clarity, Kraken leads on disclosure depth, and OKX sits closest to Binance on offshore scope. The table below summarizes the dimensions most relevant to safety.

Each model trades different risks. Coinbase has the cleanest US regulatory posture and audited financials, at the cost of higher fees and fewer products. Kraken sits between Coinbase and Binance on transparency. OKX is the closest functional alternative to Binance.com for non-US users. The right choice depends on jurisdiction and product needs more than on a single safety score.
​

Binance requires tiered KYC: Basic verification (ID document and selfie) unlocks fiat deposits up to a daily limit, and Intermediate or Advanced verification (proof of address, source of funds) unlocks higher limits and certain products. Anti-money-laundering screening runs on every deposit and withdrawal against OFAC, EU, and UN sanctions lists.
​

Account-level safety controls available to every user include hardware-key 2FA via FIDO2, withdrawal address whitelisting, anti-phishing codes embedded in emails, and a 24-hour cooldown on new withdrawal addresses. The Binance safety hub documents these controls; enabling all of them moves an account from "exchange-default risk" to roughly the same posture as a self-custodial hardware wallet for most attack vectors.
​

Withdrawals to self-custody wallets remain the recommended endpoint for funds users do not actively trade. Exchange accounts concentrate counterparty risk in a single entity, and even a well-audited exchange is a target. For stablecoin storage and movement specifics, see our companion piece on whether USDT is safe for context on issuer reserves vs exchange reserves.
​

Most users who care about exchange safety also care about minimizing time on the exchange. Funds in self-custody face fewer counterparty risks than funds on any exchange, including a well-audited one. The friction has historically been moving stablecoins between chains for use elsewhere, which often required routing through a centralized exchange withdrawal.
​

Eco Routes provides cross-chain stablecoin transfers between supported networks without depositing back on a centralized exchange. After withdrawing USDC or USDT to a self-custodial wallet on one chain, Eco Routes can move the same stablecoin to another supported chain for use in payments or DeFi. This reduces the amount of time funds sit on any exchange's books and limits counterparty exposure to Binance, Coinbase, or any single venue.
​

Sources and methodology. DOJ settlement details from the November 2023 DOJ press release, FinCEN consent order, and CFTC release. Proof-of-Reserves and SAFU data from binance.com/proof-of-reserves and binance.com/safety. Volume data from CoinGecko. Figures refresh quarterly. Updated May 2026.
​