Bybit Spot Standard
A plan byBybit
Bybit is a large-scale exchange with around 80 million users and the Unified Trading Account, often cited as a case study for its fast recovery after the record February 2025 hack. Its Trustpilot rating sits in the 3.5-4.0/5 range and some jurisdictions remain restricted.
Spot Standard
- Cashback currency
- Nessuno
- Required staking
- Nessuno
- Net annual cost
- Free
- Maker fee
- 0.1%
- Taker fee
- 0.1%
Data & conditions
| Maker / Taker fee | 0.1% / 0.1% |
|---|---|
| Markets | Spot + Derivatives |
| Max leverage | 100× |
| Supported assets | 1500+ |
| Fiat on-ramp | Yes |
| Deposit methods | Carta di credito/debito, Bonifico bancario (SEPA / IBAN), P2P Trading (60+ metodi di pagamento), Pagamento tramite provider terzi (8+ partner), Deposito crypto on-chain |
| Geo restrictions | US, CA, SG, CN, HK, KP, CU, IR, SY, SD |
| Staking / Earn | Bybit Earn: flexible savings, Dual Investment, Snowball (opzioni), Launchpool e Shark Fin. |
| Fund custody | Custodial (platform holds funds) |
| KYC | Full |
| Supported countries | EEA, APAC, LATAM, MENA, AFRICA · 160+ countries |
| Regulator | VARA, SCA, FMA Austria, FIU-IND, AFSA, NBG |
| OAM Italy registration | Yes |
| Segment | B2C |
| MiCA / License status | VASP multi-paese + MiCA EU entity |
Strengths
- Recovery post-hack case study; 80M users; Unified Trading Account; Trustpilot 3,5-4,0/5.
- No notable sovereignty advantage documented.
Weaknesses
- Hack record feb 2025; alcune jurisdictions ancora limited.
- Custodial: the platform holds your funds and can freeze or lose them.
- Full KYC required: verified identity, zero pseudonymity.
- Geographic restrictions (US, CA, SG, CN, HK, KP, CU, IR, SY, SD).
Verdict
The good rating rewards scale and resilience: around 80 million users, the Unified Trading Account and 0.10% fees, with a post-hack recovery in February 2025 that became a case study. But that record hack and a Trustpilot stuck at 3.5-4.0/5 are exactly what keep it from climbing higher: the incident was handled well, the exposure that caused it remains a fact.
On this lens its heft does not help: custodial, full KYC, a privacy score of 3, with funds and identity fully intermediated. The 2025 record hack is also a reminder of the structural risk of the custodial model, where the safety of your assets depends on a third party's defenses, not on a key you control.
Promp's editorial rating based on real fees and net annual cost. Promp reviews third-party products independently.
"Sovereignty" rating: score computed on privacy/anonymity (30%), fund control (20%), censorship resistance (20%), trustless/auditability (20%) and costs (10%). Same data, different weights.
Reputation
What happened to people who used Bybit, and what users say. External signals: they do not feed the promp.it rating.
Incidents & regulatory actions
Notable incidentsDocumented events with consequences still open. Each entry carries a source and a date.
-
Hack / funds theft Critical $1B ✓ resolved
Record $1.46 billion theft from an Ethereum cold wallet
Attackers spoofed the Safe{Wallet} multisig interface during a routine cold-to-warm transfer, altering the smart contract logic and draining over 401,000 ETH and derivatives. Withdrawals were never halted: within ten hours 99.994% of more than 350,000 requests had been processed. The gap was closed within 72 hours via bridge loans, deposits and OTC purchases, and independent security firm Hacken published an updated proof-of-reserves showing collateral above 100%. No customer lost funds. Preliminary forensics by Sygnia and Verichains attributed the root cause to malicious code on the Safe{Wallet} platform, with no vulnerability in Bybit's own infrastructure. Main source: Bybit's official timeline, i.e. the interested party; withdrawal and reserve figures are attributed to third parties but the Hacken report was not read directly.
↗ source -
Delisting / service stop Moderate ● open
Exit from Japan starting 2026 after FSA warnings
Bybit announced a phased wind-down of services for Japanese residents from 2026, due to the lack of registration with Japan's Financial Services Agency. New sign-ups had already been paused in October 2025. The FSA had issued repeated public warnings for unregistered operation and in 2025 asked Apple and Google to remove the app. Restrictions still ongoing.
↗ source -
Fine Moderate ✓ resolved
India: ₹9.27 crore fine and website blocking over AML breaches
India's Financial Intelligence Unit penalised Bybit Fintech Limited for expanding services in India without the mandatory Virtual Digital Asset Service Provider registration. Because of persistent non-compliance the websites had been blocked through the relevant ministry. After payment Bybit secured its registration with the Indian FIU. The amount is not converted to dollars: the official source states only the rupee figure.
↗ source -
Regulatory action Moderate ✓ resolved
Blacklisted by France's AMF as an unauthorised operator
The French authority blacklisted Bybit for lacking digital-asset service provider registration, repeating the public warning in May 2024 and reserving the right to have the site blocked. Bybit was removed from the blacklist on 14 February 2025 after more than two years of remediation; Bybit EU GmbH now holds a MiCA authorisation from the Austrian regulator and appears on the French white list.
↗ source
verified on
Public reviews
-
Google Play ↗
4.4/5
~
1,420,000 reviews
Count rounded by Google Play (1.42 million).
-
App Store ↗
4.7/5
~
47,000 reviews
Count rounded by the US App Store (47K ratings).
-
Trustpilot ↗
2.7/5
7,446 reviews
A very wide gap with the app stores: 50% one-star and 38% five-star reviews, 1,600 in the last year. Such a polarised profile says more about the tails than about the average.
Weighted average across 3 public review platforms (1,474,446 reviews in total), weighted by volume. This is not our rating: it is those platforms’ average.
Community signal
not verified by usPublic opinions collected from third parties, not verified by us. Online reviews can be manipulated: read them as a hint, not as data. The promp.it verdict remains the one above, based solely on official documents.
What users praise
- Fast and reliable P2P, rated among the best for peer-to-peer trades
- Cases resolved after escalation, with funds released at the end of the review
- The company replies to nearly all negative reviews, typically within 24 hours
What users criticise
- Accounts frozen for weeks under “compliance review”, with no reason or timeline
- Withdrawals and deposits blocked, including for material amounts
- Support limited to template replies, with no real escalation path
- No concrete document requests during the freeze, leaving users unable to resolve it
- Poorly handled P2P disputes, including reports of counterparty fraud
The service’s own official accounts are excluded from the count. 18 public Trustpilot reviews read directly, nearly all from 2026, plus the profile's distribution. Reddit and X were not accessible in this session, so the band reflects Trustpilot only, a channel notoriously skewed towards complaints: app store ratings are markedly higher. Read it as a signal about a tail of problems, not as an average user verdict.
Voices from the community
-
My account has been restricted since 26 June 2026 — over three weeks with no resolution. I was attempting a routine withdrawal when the transaction was frozen. I have submitted multiple support tickets and received only template responses stating the case is “under compliance review”.
-
It's a good platform. My account was suspended, I provided all the requested evidence, and after a 40-day investigation they allowed me to withdraw my funds. My account was blocked because I had violated the terms of service myself. It's the best platform for P2P trading.
-
So far one of the best P2P apps I've used, very reliable and fast in payment. My last transaction was very fast, but I would advise trading with caution and with a good merchant.
Every quote links to its original source: check for yourself, don’t trust the summary.
FAQ
What are Bybit's fees?
On Bybit, spot fees are maker 0.1% / taker 0.1%. They drop with monthly volume and VIP tier.
Is Bybit regulated in Europe?
Yes: Bybit operates in the EU through Bybit EU GmbH, holding a MiCA CASP authorisation granted by the Austrian Financial Market Authority (FMA) on 28 May 2025, passported into Italy. Licence: VASP multi-country + MiCA EU entity.
Does Bybit publish Proof of Reserves?
Bybit publishes Proof of Reserves. No third-party reserve audit is documented. Reserve transparency is a critical factor after the FTX collapse.
Can I send transfers to third-party IBANs from Bybit?
No, Bybit is an exchange and does not allow transfers to third-party IBANs: fiat withdrawals return to a bank account in your own name.
Does Bybit support derivatives and futures?
Bybit offers derivatives trading, with up to 100x leverage.
Sources
- Official service page Maker/taker fees · Regulatory framework · Derivatives · Founders · +12 Data verified on Jun 15, 2026
- casptracker.eu Data verified on Jul 16, 2026
- learn.bybit.com Data verified on Jul 16, 2026
- crunchbase.com Company type · Corporate site · Stock ticker · Stock listing · +1 Data verified on Jun 15, 2026
Show 3 more sources
- datawallet.com Geo restrictions Data verified on Jun 15, 2026
- iosco.org Legal name Data verified on Jun 15, 2026
- tracxn.com Investors Data verified on Jun 15, 2026