Is Nexo Safe? Audits, US Partner and Track Record

You might wonder: Is Nexo legit and safe? Here's what we can back up with facts you can check yourself.

Nexo has operated since 2018. As of Q2 2026, more than 10 million clients use Nexo worldwide, and the platform has paid them over $1.5 billion in interest.

In the United States, Nexo works with Bakkt, an NYSE-listed company whose US trading infrastructure is backed by a New York BitLicense and broad US money transmitter license coverage. Nexo's infrastructure is independently audited against SOC 2 Type 2, ISO 27001, and other internationally recognized frameworks, and its SOC 3 report is public.

This guide covers what Nexo is, who it works with, how it's audited, how your account is protected, and the risks to weigh.

The short answer

Track record: Nexo has operated since 2018 and, as of Q2 2026, serves more than 10 million clients worldwide. Galaxy Research ranks it the third-largest CeFi crypto lender it tracks.
Licensed US partner: Bakkt, an NYSE-listed company whose operating subsidiaries hold a New York BitLicense and state money transmitter licenses across the US, powers custody and trading services for Nexo clients in the United States.
Independently audited: SOC 2 Type 2 three years in a row, a public SOC 3 report, and ISO 27001, 27017, and 27018.
Protected by default: Every withdrawal passes through an anti-scam engine in real time, and data is protected with TLS and AES 256-bit encryption.

What is Nexo?

Nexo is a premier digital assets wealth platform built to help clients grow, manage, and preserve their crypto. Operating since 2018, it serves more than 10 million clients across 200+ jurisdictions, has processed over $465 billion, has paid more than $1.5 billion in interest to clients, and runs a loan book of over $1.7 billion.

Important note: All figures are global, as of Q2 2026, and are updated quarterly.

Nexo brings together:

Flexible Yield and Fixed-term Yield to generate yield of up to 16% per year on crypto assets, with or without a set term.
Crypto-backed loans to borrow against holdings without selling them, including Zero-interest Credit.
Trading tools to buy, sell, and swap digital assets.
Nexo Private, for portfolios of $100,000 or more, where clients get a dedicated relationship manager, priority assistance, and bespoke OTC services on custom terms. Explore Nexo Private.
The Nexo Card (available in the EEA and the UK): the first dual-mode crypto card, with no monthly, annual, or inactivity fees. Borrow against your crypto in Credit Mode or spend it directly in Debit Mode, switch with one tap, and pay at more than 100 million merchants worldwide.
24/7 client care from a dedicated team.

Important note: The Nexo Card is currently unavailable for US residents. Availability of Yield products and specific crypto asset support for US clients remains subject to state-level regulatory requirements and Bakkt partner integration terms.

How does Nexo rank among crypto lenders?

Galaxy Research ranks Nexo the third-largest CeFi crypto lender it tracks, measured by crypto-collateralized loan book. At the end of Q2 2026, Nexo held a 7.51% market share, up 49 basis points on the quarter.

Read the full analysis in Galaxy Research's The State of Crypto Leverage Q2 2026, published August 17, 2026.

Who holds Nexo clients' assets in the US?

Bakkt powers institutional-grade custody and trading infrastructure for Nexo clients in the United States.

Bakkt is an NYSE-listed company (NYSE: BKKT). Through regulated operating subsidiaries like Bakkt Crypto Solutions, LLC, and Bakkt Trust Company LLC, it holds a New York BitLicense alongside money transmitter licenses across multiple US jurisdictions. Bakkt positions its infrastructure as purpose-built for financial institutions, fintech platforms, and digital asset firms.

Bakkt announced the partnership on February 17, 2026, to support Nexo's US offering and enable compliant digital asset custody and trading services for Nexo clients.

You can read the announcement on Bakkt's investor relations website and check Nexo's partner overview on the Nexo Fundamentals page.

What do Nexo's certifications actually mean?

Nexo’s information security practices are assessed against internationally recognized frameworks. An independent audit firm reviews SOC 2 Type 2 every year. Accredited certification bodies issue the ISO 27001, 27017, and 27018 certificates and check them through periodic surveillance audits. CSA STAR Level 1 is a self-assessment that Nexo publishes openly. A certification only helps if you know what it tests, so here is each one in plain terms.

SOC 2 Type 2, audited by A-LIGN, three years in a row.

What it checks: An external audit firm examines how Nexo handles data and who can access it, then tests whether those controls continue to work over time, not just on a single day. The 2025 audit also covers privacy.
Why it matters: It's the difference between a company saying it has safeguards and an auditor confirming they operated.

SOC 3 Type 2, the public version.

What it is: the same evaluation, written for a general audience. The full SOC 2 report contains sensitive details, so it isn't published. SOC 3 is the open summary, based on the AICPA's criteria for security, availability, and confidentiality.
Why it matters: It makes the audit result public. Nexo can share the outcome openly instead of just saying it passed.

ISO 27001 - the international standard for managing information security.

What it checks: Whether a company runs security as a continuous, documented process: finding risks, setting controls, and reviewing them regularly.
Why it matters: It shows repeatable discipline, not one-off fixes.

ISO 27017, for cloud services (certified by RINA).

What it checks: The additional controls that services running in the cloud need.
Why it matters: Nexo's platform runs on cloud infrastructure, so this covers where client data actually lives.

ISO 27018, for personal data in the cloud (certified by RINA).

What it checks: How personal information, such as client identity details, is handled and kept private in cloud environments.
Why it matters: It puts the handling of your personal data under an audited international standard.

CSA STAR Level 1, a public cloud registry entry.

What it is: The Cloud Security Alliance is an industry group that sets best practices for cloud security. It asks providers 261 questions about how they manage and control their cloud systems. CSA STAR Level 1 is a self-assessment of Nexo’s cloud controls, published in CSA’s public registry.
Why it matters: The answers are open to everyone, so you can read them and compare them with other providers.

Taken together, they answer three questions: does Nexo follow recognized standards, has an outside party tested that it does, and can you read the results yourself? For background on the latest audit cycle, see Nexo completes third consecutive SOC 2 and SOC 3 audits.

Important note: Security audits and certifications assess information security controls.

What US licenses does Nexo hold directly?

Nexo Financial LLC holds a California Financing Law license (No. 60DBO-109416), issued by the California Department of Financial Protection and Innovation (DFPI), permitting state-regulated lending activities. Custody and digital asset trading services for US clients are facilitated through its licensed partner, Bakkt.

What do clients say about Nexo?

On Trustpilot, Nexo is rated 4.4 out of 5 from 18,751 reviews (as of October 20, 2026). Read client reviews on Trustpilot.

Nexo's client care team is available 24/7. Clients with a portfolio of $100,000 or more can join Nexo Private and get access to high-touch wealth solutions, priority assistance, exclusive OTC services, event passes, and more exclusive benefits.

How does Nexo protect your account?

Nexo runs protection on every account and every transaction by default, and gives clients tools to add more.

Built in

Anti-scam engine. Every withdrawal is analyzed in real time before funds leave the platform. If something looks off, the client sees a plain-language prompt explaining the concern, and in rare high-risk cases, a transaction may be briefly paused for review.
Encryption. Data in transit is secured using modern TLS encryption, while data at rest is safeguarded with AES-256 encryption—the same standard utilized by leading financial institutions and tier-one cloud providers worldwide.

Yours to switch on

Two-factor authentication (2FA). Once you turn it on, it’s required at login and for sensitive actions: withdrawals, Address Book edits, and changes to security settings. Even with your password, no one can move funds without the second factor. An authenticator app is stronger than SMS.
Anti-phishing code. A personal code that appears in the footer of every legitimate Nexo email. An email without it didn't come from Nexo.
Address whitelisting. Withdrawals are locked to saved addresses (up to 500), with a configurable Extra Security delay on newly added ones.
Channel validator. Any email address, social handle, or URL claiming to be Nexo can be checked at nexo.com/channel-validator.

For the full walkthrough, read How Nexo's security works, and how to strengthen your account.

What industry awards has Nexo won?

Independent industry awards include:

Consumer Lending Product of the Year (2026): FinTech Breakthrough Award for Zero-interest Credit, covered on FinTech Breakthrough.
Best PayTech for CX (2025): recognized at The Digital Banker Excellence in Digital CX Awards, covered on Crypto Times.
Best Loyalty Program (2025): recognized by The Digital Banker.
Best Crypto Wallet (2025): winner at the 9th Annual FinTech Breakthrough Awards, announced via GlobeNewswire.
Consumer Payments Innovation Award (2024): FinTech Breakthrough Award for the Nexo Card, covered on TradingView.

What other initiatives does Nexo have in the US?

Nexo is making history as the first-ever Title Partner of the Nexo Dallas Open—a premier ATP 500 event and the only indoor championship on the U.S. ATP Tour. Kicking off in 2026, this multi-year alliance goes far beyond sports sponsorship.

Nexo is driving its "Wealth Forward" vision directly into the local community by partnering in a major court resurfacing project at the Ford Center at The Star.

By modernizing playing surfaces and expanding access for youth and recreational players, Nexo is delivering both a next-generation fan experience and a tangible, positive impact across North Texas.

What should you know about Nexo before using it?

Nexo’s ongoing commitment to security is reflected in its audits, certifications, and carefully chosen industry partners. A few factors are still worth understanding before you start using any crypto platform:

Market movements. Crypto prices can move quickly, in either direction.
Borrowing against crypto. If the value of your collateral falls significantly, part of it may be sold to repay the loan.
Changing rates. Yields and borrowing rates can change over time, and past rates don't predict future ones.
Evolving rules. Crypto regulation continues to develop.

Frequently asked questions

1. What is Nexo?

Nexo is a premier digital assets wealth platform that helps clients grow, manage, and preserve their crypto. It has operated since 2018 and serves more than 10 million clients worldwide (Q2 2026), with yield products, crypto-backed loans, trading tools, Private Clients services for portfolios of $100,000 or more, and 24/7 client care. Not every service is available in every jurisdiction.

2. Is Nexo a credible platform?

Yes. Nexo is an operating company that has been active since 2018. It works with Bakkt, an NYSE-listed US partner; Galaxy Research ranks it third among the CeFi crypto lenders it tracks; and its information security controls have been independently audited, with SOC 2 Type 2 reports for three consecutive years.

3. Is Nexo safe?

Nexo’s information security controls are independently audited under SOC 2 Type 2 and certified to ISO 27001, and its US partner, Bakkt, is an NYSE-listed company whose subsidiaries hold a New York BitLicense and state-level money transmitter licenses. Withdrawals pass through a real-time anti-scam engine, and data is protected via modern TLS and AES-256 encryption. These audits cover information security, not financial solvency, and Nexo products aren’t insured by the FDIC or SIPC.

4. How does Nexo rank among crypto lenders?

Galaxy Research ranks Nexo the third-largest CeFi crypto lender it tracks, by crypto-collateralized loan book, with a 7.51% market share at the end of Q2 2026.

5. Who holds Nexo clients' assets in the US?

Bakkt powers custody and trading infrastructure for Nexo clients in the United States. Bakkt is an NYSE-listed company whose operating entities hold a New York BitLicense and money transmitter licenses across multiple US states.

6. What do Nexo's certifications mean?

SOC 2 Type 2, audited by A-LIGN, tests that Nexo's data controls keep working over time. SOC 3 is the public summary of that audit. ISO 27001, 27017, and 27018 are international standards for information security management, cloud controls, and personal data in the cloud. CSA STAR Level 1 is a self-assessment of Nexo’s cloud controls, published in CSA’s public registry.

These materials are accessible globally, and the availability of this information does not constitute access to the services described, which services may not be available in certain jurisdictions. These materials are for general information purposes only and not intended as financial, legal, tax, or investment advice, offer, solicitation, recommendation, or endorsement to use any of the Nexo Services and are not personalized, or in any way tailored to reflect particular investment objectives, financial situation or needs. Yield and interest rates are not guaranteed, are subject to change, and may vary by eligibility, selected term, and wealth tier. References to Yield are product names and do not represent rates of return or performance. Nexo products are not bank deposits and are not insured by the FDIC or SIPC. Digital assets are subject to a high degree of risk, including but not limited to volatile market price dynamics, regulatory changes, and technological advancements. The past performance of digital assets is not a reliable indicator of future results. Digital assets are not money or legal tender, are not backed by the government or by a central bank, and most do not have any underlying assets, revenue stream, or other source of value. Independent judgment based on personal circumstances should be exercised, and consultation with a qualified professional is recommended before making any decision.

Services are provided by Bakkt Crypto Solutions, LLC. Digital assets may be held or serviced by third-party custodians, exchanges, lenders, or other service providers. Your ability to access or recover assets depends on the provider’s operational resilience and financial condition. If a provider becomes insolvent or experiences an operational disruption, you may experience delays in access to assets and could lose some or all of your assets. For more information, visit Bakkt Disclosures.