The short version
Coinbase has enough public evidence for an indexable review even though it does not publish one universal Coinbase Advanced maker/taker tier to logged-out readers. That limitation is explicit rather than hidden: Advanced fees depend on order type and 30-day volume, the current tier is visible after sign-in, and transaction previews show the fee before an order is submitted.
For EEA residents, Coinbase Luxembourg S.A. is the MiCA-authorized crypto-asset service provider. Outside the EEA, the serving entity, onboarding and product set vary by residence, so EEA regulation is not generalized to every reader in LemonBitcoin's wider regional coverage.
Decision snapshot
| EEA crypto entity | Coinbase Luxembourg S.A. (CB Lux), CSSF CASP registration N00000004. |
|---|---|
| Regional availability | EEA service structure is documented; outside the EEA, serving entity and product availability must be checked by residence. |
| KYC | Required. EU and rest-of-world documentation describe identity verification; accepted documents and proof-of-address rules vary. |
| Coinbase Advanced fees | Maker/taker model based on 30-day USD volume. Coinbase says the complete current fee structure is available after sign-in and tiers update hourly. |
| BTC withdrawal | Coinbase.com shows an estimated network fee before an on-chain send. A separate Coinbase Exchange help page publishes a 0.0001 BTC minimum, which LemonBitcoin does not generalize to every retail Coinbase.com withdrawal path. |
| Lightning | Supported where available; Coinbase publishes a 0.2% processing fee for Lightning sends. |
| Custody / asset evidence | Custodial. Coinbase says customer digital assets are held 1:1. Its Q2 2026 SEC filing reported $245.9B of customer crypto assets and payment stablecoins for which Coinbase held full keys, with a corresponding obligation. |
| PoR boundary | No user-verifiable exchange-wide Merkle-tree PoR was used for this review; SEC financial reporting and 1:1 custody statements are different evidence. |
| Security history | Coinbase disclosed a May 2025 customer-data incident involving bribed/recruited overseas support agents. It also published a postmortem for a May 2026 outage that halted nearly all trading for several hours. |
Regional eligibility and regulatory context
Coinbase says Coinbase Luxembourg S.A. is authorized and regulated by Luxembourg's CSSF as a crypto-asset service provider under registration N00000004, allowing it to provide crypto-asset services across the EEA. Coinbase's EEA migration documentation shows the rollout of that service structure during 2025.
Outside the EEA, Coinbase uses other entities and country-specific terms. Rest-of-world identity-verification documentation covers many markets relevant to LemonBitcoin's regional audience, but identity-document support is only an onboarding signal. It is not treated as proof that every product, funding rail or trading pair is available in every country.
KYC and account access
Coinbase requires identity verification for legal, compliance and fraud-prevention purposes. Its EU guidance says account functionality is limited until verification is completed and describes ID plus live-selfie requirements. Coinbase also publishes a separate rest-of-world verification flow.
Before opening an account, check the exact residence-specific onboarding flow and serving entity rather than assuming one set of documents or services applies across the entire region.
Trading fees: account-gated does not mean unknowable
Coinbase Advanced uses maker/taker pricing and 30-day USD volume tiers. Coinbase says tiers update hourly and directs users to sign in for the complete current fee structure. Fees are also displayed in the order preview.
LemonBitcoin therefore does not copy a Coinbase Exchange API rate or an old public table and label it as a universal retail Coinbase Advanced fee. For comparison purposes, the correct publication-time evidence is the signed-in tier plus the order preview for the trade being considered.
A dynamic, account-specific fee can still be reviewed honestly. The important part is to state that it is dynamic, identify the official source, and avoid manufacturing a single headline percentage that Coinbase itself does not publish universally.
Bitcoin withdrawals and Lightning
For Coinbase.com on-chain sends, Coinbase says it charges a fee based on its estimate of prevailing network fees and discloses the fee before the transaction. A separate Coinbase Exchange help page publishes a BTC minimum withdrawal amount of 0.0001 BTC; because Coinbase Exchange and retail Coinbase.com are not identical products, this review does not treat that number as a universal retail minimum.
For Lightning sends, Coinbase publishes a processing fee of 0.2% of the BTC amount transferred. Lightning availability can still vary by product and jurisdiction, so the live send flow remains the final check.
Custody and reserve / financial evidence
Coinbase.com is custodial: Coinbase maintains the private keys for hosted wallets. Coinbase says customer digital assets remain customer-owned, are not repurposed without instruction, and are held 1:1.
Coinbase Global's Q2 2026 SEC filing adds a different kind of evidence. It reported $245.9 billion of crypto assets and payment stablecoins held or managed on behalf of customers for which Coinbase held full keys as of 30 June 2026, with a corresponding unrecognized obligation of the same amount.
This is public-company financial reporting plus a 1:1 custody statement, not a user-verifiable exchange-wide Proof of Reserves. LemonBitcoin keeps those evidence types separate instead of relabeling financial disclosure as PoR.
Security controls, the 2025 data incident and 2026 outage
Coinbase documents required identity/security checks and supports stronger account-protection methods such as passkeys/security keys and address-book controls. User configuration still matters: phishing-resistant authentication is stronger than relying on SMS alone.
On 15 May 2025, Coinbase disclosed that criminals bribed or recruited overseas support agents to steal customer data for social engineering. Coinbase said passwords, private keys and funds were not exposed by the incident itself, while some customers were tricked into sending funds.
Coinbase also published a postmortem for its 7 May 2026 outage. Nearly all trading halted, and retail users could not complete actions including buying, selling, sending, receiving, depositing and withdrawing during the incident. Operational availability belongs beside account-security controls when evaluating a custodial venue.
Pros and cons for a Bitcoin-focused regional user
What looks strong
- Clear EEA MiCA structure through Coinbase Luxembourg S.A.
- Documented KYC flows for EU and rest-of-world customers.
- Bitcoin on-chain sends plus Lightning support with a published Lightning processing fee.
- Coinbase says customer digital assets are held 1:1, and public SEC filings disclose large customer-asset custody obligations.
- Material security and operational incidents are publicly documented rather than omitted from the review.
What needs care
- The complete current Coinbase Advanced fee table is account- and tier-specific rather than fully visible to logged-out users.
- On-chain network fees are dynamic and must be checked in the live send preview.
- Financial disclosure is not the same thing as user-verifiable exchange-wide Proof of Reserves.
- Coinbase remains custodial until Bitcoin is withdrawn to a wallet you control.
- Country availability, payment rails and product access vary by residence.
Who is Coinbase a reasonable fit for?
Consider Coinbase if: it serves your country, you accept KYC, want a large custodial venue, and value Lightning plus a clearly documented EEA regulatory framework where applicable.
Look elsewhere if: you need a public fixed fee tier before signup, no-KYC access, or you plan to keep long-term Bitcoin on the exchange.
Primary sources checked
Product and regulatory claims below use Coinbase first-party documentation plus Coinbase Global's SEC filing. LemonBitcoin's fit assessment and evidence boundaries are editorial analysis.
- Coinbase MiCA authorization and EEA service migration.
- Coinbase European licenses and regulatory disclosures.
- EU identity verification / KYC.
- Rest-of-world identity verification.
- Coinbase Advanced fees.
- Coinbase.com pricing, network-fee and Lightning disclosures.
- Coinbase Exchange withdrawal minimums / network-fee documentation.
- Coinbase customer digital-asset custody / 1:1 statement.
- Coinbase Global Q2 2026 Form 10-Q.
- May 2025 customer-data incident disclosure.
- May 2026 outage postmortem.
Common Coinbase questions
Is Coinbase available everywhere in Europe and the CIS region?
No single statement covers every country or product. EEA crypto services are documented through Coinbase Luxembourg; outside the EEA, availability, serving entity and payment rails vary by residence.
Does Coinbase require KYC?
Yes. Identity verification is part of account onboarding and requirements vary by signup country.
Does Coinbase support Bitcoin Lightning?
Yes where the feature is available. Coinbase publishes a 0.2% processing fee for Lightning sends.
What is the Coinbase Advanced maker/taker fee?
It depends on your current account tier and order type. Coinbase says the complete current fee structure is available after sign-in and tiers update based on 30-day trading volume.
Does Coinbase publish Proof of Reserves?
This review does not treat Coinbase's public-company financial disclosures or 1:1 custody statement as a user-verifiable exchange-wide PoR. They are useful evidence, but they are a different evidence type.