Trust is built over time, earned through action, and protected every day.

2026 has been a defining year for the evolution of the digital assets space. With this progress comes greater responsibility.

This week’s events remind us that the strength of our industry is measured not only by how far we’ve come, but by how consistently we protect the people who place their trust in us.

For us, security has been the utmost priority from day one. Since our inception in 2018, Nexo has maintained a pristine security track record. This record is no coincidence. It reflects years of deliberate decisions, rigorous safeguards, and an unwavering commitment to protecting our clients.

Today, more than 10 million people have chosen Nexo to manage their digital wealth. Behind those numbers are real people, their hard work, their plans, and their ambitions. We don’t take that trust for granted. Here is how we put our commitment into practice.

Advanced real-time monitoring and controls

Our security expert teams monitor activity around the clock, identifying unusual patterns and addressing potential risks early. We proactively track, flag, and block suspicious wallet addresses, while working closely with law enforcement agencies worldwide.

Our Anti-Scam Engine runs by default on your account. As part of withdrawal screening, it analyses transaction patterns in real time and combines behavioural signals with blockchain intelligence. Depending on the risk it finds, it shows a warning or pauses the transfer for review. We update our detection methods regularly as scam tactics change.

Control at your fingertips

Two-factor authentication (2FA). A second factor is required on every login, using an authenticator app, SMS, or email verification. The same verification is required again for sensitive actions such as withdrawals, address book edits, and security setting changes. Authenticator apps are stronger than SMS, which is vulnerable to SIM swap attacks, and switching takes a minute in Security settings.
Biometric login with fingerprint or facial recognition on supported devices.
Withdrawal address whitelisting. Locks withdrawals to addresses saved in your address book with a configurable Extra Security delay before a newly added address can be used.
Real-time notifications. You are alerted to logins and withdrawals, so you can spot activity you don’t recognize.
Personal anti-phishing code. Once you’ve set it up, it will always appear in authentic Nexo emails. Visit this page to learn how to set it up.
The Channel Validator helps you confirm whether a website, account, or contact claiming to be Nexo is real.

Independently tested over time

Our multi-layered security framework integrates advanced measures, including extensive firewall infrastructure, AES 256-bit encryption, real-time alerts, biometric identification, and rigorous third-party audits.

We also adhere to the highest industry standards, holding certifications such as ISO/IEC 27001, 27017, and 27018, along with SOC 2 Type 2 and SOC 3 Type 2 attestations (completed for three years in a row) and Cryptocurrency Security Standard Level 3 compliance. These standards evaluate how controls operate over a period of time, not at a single moment.

Our ISO 27001 certification also covers documented risk assessment, defined controls, and regular internal audits. You can read more about our certifications on our security page.

Institutional-grade custody partners

Nexo combines a single, easy-to-use platform with institutional-grade custody partners.

Assets are spread across several custodians and held in a mix of hot and cold storage across multiple locations, protected by multi-party computation (MPC), hardware security modules (HSMs), and geographically distributed cold storage. Spreading assets across providers and storage types adds resilience while keeping them available when you need them.

Storing digital assets is a specialized discipline, and custodians exist to fulfill this exact need. Nexo works with top-tier institutions whose core business is holding digital assets. That is what makes this model beneficial for clients: their assets are held by specialists in custody.

Fireblocks (Global)

Fireblocks is an institutional digital asset infrastructure provider offering secure wallet, custody technology, and transfer capabilities.

Bakkt (United States)

Bakkt is a publicly listed U.S. digital asset platform, providing trading infrastructure and custody for Nexo’s U.S. clients. Our U.S. lineup includes Flexible and Fixed-term Yield, our exchange capabilities, Crypto-backed Credit Lines, and the Wealth Club.

Tangany (EEA)

Tangany is a Munich-based digital asset custodian, licensed under MiCAR and regulated by BaFin, Germany's Federal Financial Supervisory Authority. It provides institutional-grade custody to more than 60 institutional clients, with over €3 billion in assets under custody. For Nexo clients in the EEA, Tangany provides custody and administration of crypto-assets.

A moment to stay informed

Periods of heightened attention across the digital asset industry can also bring an increase in fraudulent communications and impersonation attempts. A message claiming to come from a trusted platform may appear convincing, particularly when it creates a sense of urgency.

Remember that Nexo will never ask for your password or 2FA code, request that you authorize a transaction through chat, email, or text, or send you a login link via SMS.

If you receive an unfamiliar message, take a moment to verify its source through our official channels. Our Client Care team is available 24/7 should you need assistance.

A continuous commitment

Over the past eight years, Nexo and the wider digital asset industry have made remarkable progress, navigating challenges that have tested and strengthened our resilience.

We continue to invest in our infrastructure, strengthening the systems, safeguards, and protocols that protect our clients as technology evolves.

The trust our clients place in us is our most valuable asset. We work to earn and protect it every second of every day.

This commitment has guided Nexo since 2018 and will continue to shape how we move forward.

We thank you for the trust and confidence you continue to place in us.