Introduction

Coinbase, long marketed as the most trusted and user-friendly gateway to cryptocurrency for retail investors, has instead become a symbol of repeated regulatory defiance, operational incompetence, and disregard for customer welfare. Launched in 2012 with promises of transparency, security, and compliance, the company has spent much of its existence embroiled in high-profile legal battles, data breaches, customer service disasters, and accusations of misleading investors. The landmark U.S. Securities and Exchange Commission (SEC) enforcement action filed in June 2023 (SEC v. Coinbase, Inc. et al., Press Release 2023-102) laid bare serious allegations that Coinbase had deliberately operated as an unregistered securities exchange, broker, and clearing agency while offering unregistered securities through its staking program. Although political changes led to the case’s dismissal in early 2025 without penalties, the underlying conduct exposed in the complaint—and the company’s behavior before and after—continues to raise fundamental questions about Coinbase’s commitment to law, security, and its users. This article examines the major dimensions of Coinbase’s ongoing crisis, demonstrating how regulatory avoidance, repeated security lapses, abysmal customer support, misleading disclosures, aggressive lobbying tactics, and persistent financial volatility have collectively undermined the platform’s credibility and exposed millions of users to unnecessary risk.

The SEC Lawsuit: Deliberate Violation of Securities Laws

In June 2023 the SEC charged Coinbase with running an unregistered national securities exchange, broker, and clearing agency since at least 2019. The complaint asserted that Coinbase’s trading platform matched buyers and sellers of crypto assets the SEC classified as securities, performed broker functions by handling customer orders, and acted as a clearing agency by settling transactions—all without registering with the Commission or complying with the investor-protection rules that apply to traditional securities intermediaries.

The SEC further alleged that Coinbase’s staking-as-a-service program, through which the company pooled customer crypto assets, validated blockchain transactions, and distributed staking rewards, constituted an unregistered offer and sale of securities under the Howey test. The agency claimed Coinbase knowingly ignored or evaded registration requirements that exist to prevent fraud, ensure fair markets, and protect investors from conflicts of interest.

SEC Chair Gary Gensler publicly stated that Coinbase had chosen to operate outside the law despite being “fully aware” of the applicable securities statutes. Enforcement Division Director Gurbir Grewal accused the company of a calculated strategy to generate billions in revenue while depriving customers of basic protections such as accurate disclosure, anti-manipulation rules, and routine regulatory oversight.

Although the case was dismissed in February 2025 amid a shift in political leadership and without any admission of wrongdoing or payment of penalties, the dismissal did not erase the detailed factual allegations or the market impact they produced. Coinbase’s stock fell sharply on the day the complaint was filed, and the episode reinforced the perception that the company prefers to fight regulators rather than adapt to rules designed to protect the public.

Chronic Regulatory Resistance and a Trail of Enforcement Actions

Coinbase’s adversarial relationship with regulators predates and outlasts the 2023 lawsuit. The company received a Wells Notice from the SEC in March 2023, signaling imminent enforcement, yet responded with public criticism of the agency rather than substantive corrective measures. After the main case was dropped, the SEC continued investigating whether Coinbase had misstated monthly transacting user (MTU) figures and other key metrics in public filings—an inquiry that persisted well into 2025 and 2026.

Beyond the SEC, Coinbase has faced scrutiny from multiple agencies. In previous years the company settled charges with the New York Department of Financial Services over anti-money-laundering and cybersecurity deficiencies, paid fines to state regulators for operating without proper licenses, and attracted attention from the Commodity Futures Trading Commission and the Financial Crimes Enforcement Network for compliance gaps.

Coinbase has also been criticized for its lobbying approach. The company spent tens of millions of dollars on political contributions and advocacy, including sizable donations tied to the 2024–2025 election cycle. Critics argue that these expenditures were designed to influence incoming administrations and secure favorable regulatory outcomes rather than to promote thoughtful industry-wide standards. The pattern suggests a business model that treats compliance as an optional cost rather than a core obligation.

Repeated Security Breaches and Insider Vulnerabilities

Coinbase has suffered several high-profile security incidents that have directly harmed users. In late 2024 and early 2025 a sophisticated social-engineering scheme compromised the personal information of tens of thousands of customers after criminals bribed overseas customer-support contractors. Stolen data—including names, email addresses, phone numbers, partial Social Security numbers, and account transaction histories—enabled follow-on phishing, SIM-swapping, and account-takeover attempts that resulted in substantial cryptocurrency thefts for some victims.

Earlier breaches demonstrated similar weaknesses. In 2021 hackers exploited a two-factor authentication bypass vulnerability, draining funds from approximately 6,000 accounts. More recently, leaked internal screenshots circulated by hacking groups appeared to show Coinbase employees accessing high-value customer accounts without sufficient justification or audit trails.

Coinbase’s reliance on outsourced support agents, combined with inadequate vetting, training, and monitoring, has been cited by security researchers as a structural vulnerability. The company’s decision not to pay a reported multimillion-dollar ransom in one incident, while defensible from a policy standpoint, left affected users to bear the consequences without meaningful immediate assistance from Coinbase. Multiple class-action lawsuits followed, alleging negligence in safeguarding personally identifiable information and failing to implement industry-standard controls.

Abysmal Customer Service and Widespread Account Lockouts

Coinbase consistently ranks among the lowest-rated major cryptocurrency exchanges for customer support. The Better Business Bureau has recorded thousands of unresolved complaints in recent years, many involving frozen accounts, inaccessible funds, delayed withdrawals, and complete lack of response from support channels. The Consumer Financial Protection Bureau database contains thousands of similar reports dating back over a decade.

Users frequently describe being locked out of accounts for weeks or months without explanation, unable to sell assets during market downturns or retrieve tax documents. Support tickets often receive automated replies or are closed without resolution. High trading fees—among the highest in the industry—compound frustration when users finally regain access only to discover that fees have eroded gains.

The combination of an outdated user interface, frequent platform outages during periods of high volatility, and near-nonexistent live human support has driven many retail investors to competitors. Industry observers note that Coinbase’s rapid scaling of user numbers and asset volume has far outpaced investment in back-office operations and customer-experience infrastructure, creating a service model that appears to treat users as an afterthought.

Misleading Disclosures, Inflated Metrics, and Investor Skepticism

Persistent questions surround the accuracy of Coinbase’s public disclosures. Ongoing SEC inquiries into whether the company overstated monthly transacting users and other performance metrics in SEC filings have fueled doubts about management’s candor. If proven, such misstatements could constitute violations of federal securities laws and expose the company—and its investors—to significant liability.

Coinbase’s stock (COIN) has exhibited extreme volatility tied directly to regulatory headlines. Sharp declines followed the 2023 SEC complaint, continued probes into user metrics, major security incidents, and state-level lawsuits. Even periods of apparent regulatory relief have failed to produce sustained rallies, as investors remain wary of renewed enforcement risk and operational instability.

Analysts have repeatedly downgraded the stock or lowered price targets, citing elevated regulatory, litigation, and reputational risks. The market’s lack of confidence reflects a broader belief that Coinbase has not adequately addressed the structural issues that first attracted regulatory scrutiny.

Aggressive Lobbying and Conflicts of Interest

Coinbase has positioned itself as a leading advocate for crypto-friendly legislation, yet critics argue its lobbying efforts prioritize narrow corporate interests over balanced regulation. The company has opposed provisions in pending stablecoin and market-structure bills that would impose stricter disclosure or yield restrictions, drawing rebukes from lawmakers who view such opposition as self-serving.

High-profile political donations, including contributions linked to inaugural and campaign funds, have prompted accusations that Coinbase seeks to purchase regulatory forbearance rather than earn it through compliance. This perception has damaged the company’s standing among policymakers who favor robust oversight of digital-asset markets.

Conclusion

Coinbase’s trajectory over the past several years reveals a company that has repeatedly placed aggressive growth and profit maximization ahead of regulatory compliance, security fundamentals, and basic customer care. The 2023 SEC complaint exposed conduct that—if substantiated—represented a deliberate choice to evade laws designed to protect investors. Even after the lawsuit’s dismissal, ongoing investigations, major data breaches, chronic customer-service failures, questionable disclosures, and a confrontational lobbying posture continue to erode trust.

While Coinbase remains one of the largest and most visible players in the cryptocurrency ecosystem, its history suggests that size and brand recognition have not translated into operational maturity or accountability. Until the company demonstrates genuine, sustained reform—rather than relying on political shifts or legal technicalities to escape consequences—users, investors, and regulators are justified in approaching the platform with considerable caution. The pattern is clear: promises of trust and security have too often been undermined by actions that prioritize corporate advantage over user protection.