CoinSpot: keys, security, fees and reviews
In short
- Custodian
- Custodial: CoinSpot stores the private keys for coins held in user accounts.
- Fees
- Buy / sell: Instant buy, sell and swap: 1%; take-profit, stop, limit orders and recurring buys: 1%.
- Risks and caveats
- Custodial model: CoinSpot holds the private keys and may hold customer coins on other exchange platforms.
- Checked
- 28 October 2026
Visitor ratings: do you like CoinSpot?
Key facts
- Official site
- coinspot.com.au
Key facts checked on 28 October 2026 against official sources.
What is CoinSpot
CoinSpot is an Australian cryptocurrency exchange, established in 2013, whose accounts include custodial multi-coin wallets on the web and in a mobile app. Users buy, sell and swap 470+ cryptocurrencies with Australian dollars after signing up and verifying identity. CoinSpot, not the user, holds the private keys for coins kept on the platform.
Who holds the keys
| Parameter | Details |
|---|---|
| Custodian | Custodial: CoinSpot stores the private keys for coins held in user accounts. |
| Key control | Users do not hold keys; CoinSpot may keep customer funds and coins on other exchange platforms. |
| Account model | Exchange account with sign-up and identity verification; most assets are kept in offline storage. |
Features and supported networks
| Parameter | Details |
|---|---|
| Platforms | Website and mobile app. |
| Supported networks | 470+ cryptocurrencies, including Bitcoin, Ethereum, Tether, XRP and Solana. |
| Buy / sell | Instant buy, sell and swap, market and limit orders, recurring buys, bundles and an OTC desk; AUD deposits by PayID, bank, card, PayPal or cash. |
| NFTs | Buy NFTs; eligible NFTs are held in custodial storage. |
Security and audits
- ISO 27001 certified after an external audit by Sustainable Certification.
- Most customer assets are kept offline; accounts offer two-factor authentication, withdrawal restrictions and session time-outs.
- Runs a bug bounty programme on HackerOne.
Fees
| Parameter | Details |
|---|---|
| Buy / sell | Instant buy, sell and swap: 1%; take-profit, stop, limit orders and recurring buys: 1%. |
| Swaps | Market orders and OTC trades: 0.1%. |
| Deposits / withdrawals | AUD deposits by PayID, direct deposit, card and PayPal free; cash 2.5%; PayPal withdrawal 2%; bank withdrawal free. |
| Wallet | Sending coins outside CoinSpot costs a flat network (mining) fee shown on the wallet page. |
History
| Date | Event |
|---|---|
| 2013 | CoinSpot established in Australia. |
Risks and caveats
- Custodial model: CoinSpot holds the private keys and may hold customer coins on other exchange platforms.
- Crypto trading and holding losses can be substantial and are not insurable, according to the terms.
- Crypto transfers cannot be reversed once sent.
- The service is built for Australian dollar users.
About the developer
- Legal entity
- Casey Block Services Pty Ltd (ABN 19 619 574 186), trading as CoinSpot.
- Founded
- 2013
- Licence / registration
- Partner of the Digital Economy Council of Australia (DECA); ISO 27001 certified.
Official links
- Website: www.coinspot.com.au
- Security: www.coinspot.com.au/security
- Fees: www.coinspot.com.au/fees
- Terms: www.coinspot.com.au/terms
Questions and answers
Is CoinSpot self-custodial?
No. CoinSpot is a custodial exchange: it stores the private keys for coins held in user accounts.
Which coins does CoinSpot support?
More than 470 cryptocurrencies, including Bitcoin, Ethereum, Tether, XRP and Solana.
Does CoinSpot charge fees?
Market orders and OTC cost 0.1%, instant buy, sell and swap 1%; most AUD deposits are free, and sending coins out costs a flat network fee.
Is CoinSpot safe?
It is ISO 27001 certified, keeps most assets offline, offers two-factor authentication and runs a HackerOne bug bounty.
Who runs CoinSpot?
Casey Block Services Pty Ltd (ABN 19 619 574 186), trading as CoinSpot, in Australia since 2013.
Sources
More in this section
How voting works
Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.
Page updated: