Skip to content
Brand AI

Crypto.com

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile3 entries

  1. 2026

    Rapid7 discloses Operation Asterix crypto phishing campaign

    Issue disclosure

    Cybersecurity firm Rapid7 disclosed a cryptocurrency phishing campaign known as Operation Asterix that targeted roughly 885,000 phone numbers across several countries, including 316,002 German mobile numbers and directories covering Hong Kong, Bulgaria, the UK, the US and Canadian fintech companies. The campaign matched 5,576 accounts to Binance users and 43,066 accounts to crypto exchange users, and used fake emails impersonating Crypto.com and fake apps impersonating Ledger, Trezor and Exodus to steal seed phrases.

    Stated objective. to steal cryptocurrency investors' assets

    Source excerpt

    • The phishing campaign led to 5,576 accounts matched to users on crypto exchange Binance, which were queued for attack, while the recovered logs also showed fake emails impersonating Crypto.com, according to a Monday report by Rapid7.
    • Cybersecurity firm Rapid7 unveiled a new cryptocurrency phishing campaign known as Operation Asterix, targeting roughly 885,000 phone numbers from several countries to steal cryptocurrency investors’ assets.
    • As part of the Asterix phishing campaign detailed by Rapid7 analysts Anna Sirokova and Jan Recinsky, attackers drove victims to fake apps impersonating Ledger, Trezor, and Exodus, seeking to steal their seed phrases.
    Source

  2. 2024

    Regulatory dispute with the SEC

    Crypto.com sued the U.S. Securities and Exchange Commission after receiving a Wells notice. The dispute reflected broader industry disagreements over whether and how crypto-asset products should be regulated under U.S. securities law.

    Source

  3. 2022

    Unauthorized withdrawals and security incident

    Crypto.com suspended withdrawals after suspicious activity was reported and acknowledged unauthorized transactions involving cryptocurrency. The company said customer funds were not lost, but the event raised questions about exchange security and operational controls.

    Source