---
company: coinbase
title: Coinbase — how complaints actually go
last_verified: 2026-10-13
---

## In short

Open a support case through help.coinbase.com and keep the case number. If Support does not fix it, Coinbase's User Agreement requires its Formal Complaint Process before arbitration or small claims, and that process can take 45 business days. If that fails, file with the CFPB; Coinbase closed about 30% of CFPB complaints in the 12 months to June 2026 with monetary relief. Lock the account yourself at the first sign of takeover. Since the May 2025 insider data theft, scammers may know your name, address and balance, so treat every unexpected "Coinbase" call as a scam.

## How complaints actually go

- Coinbase's U.S. User Agreement says that if Coinbase Support does not resolve a dispute, you must use its Formal Complaint Process before filing any arbitration claim or small claims action. The process ends when Coinbase responds or 45 business days after it receives the complaint, whichever comes first. Seen in search-engine extracts; coinbase.com blocks automated fetches. [Coinbase U.S. User Agreement](https://www.coinbase.com/legal/user_agreement/united_states)
- An August 2021 law firm summary of the older agreement gave a 15-business-day answer time (35 at most) and the form at help.coinbase.com/en/contact-us/submit-a-complaint; the current agreement extracts give 45 business days, so plan for the longer time. [EPGD law firm, August 26, 2021](https://www.epgdlaw.com/how-do-i-file-a-complaint-with-coinbase/)
- Coinbase help pages say restriction reviews typically take up to 10 business days, and account recovery after losing 2-step verification usually takes up to 48 hours, with sends disabled until the security period ends. Seen in search-engine extracts. [Coinbase: resolve your account restriction](https://help.coinbase.com/en/coinbase/privacy-and-security/other/account-restriction) [Coinbase: account recovery](https://help.coinbase.com/en/coinbase/managing-my-account/get-back-into-my-account/account-recovery-lost-email-2step-verification)
- A CFPB complaint goes to Coinbase for a written response; a response after 15 days, or after 60 days if Coinbase asks for more time, is recorded as not timely. [CFPB 2025 Consumer Response Annual Report](https://files.consumerfinance.gov/f/documents/cfpb_2025-cr-annual-report_2026-03.pdf)

## What tends to work

- Escalate to the CFPB with transaction IDs, dates and Coinbase's earlier answers. In the 12 months to June 2026, 394 of 1,292 Coinbase complaints (30.5%) closed with monetary relief. [CFPB complaint database search](https://www.consumerfinance.gov/data-research/consumer-complaints/search/api/v1/?company=Coinbase%2C%20Inc.&date_received_min=2025-07-01&date_received_max=2026-06-30&size=0)
- If you lost money after the May 2025 data theft, say so: Coinbase said it intends to voluntarily reimburse eligible retail customers who sent funds to the threat actor as a direct result of the incident, after reviewing the facts. [Coinbase Form 8-K, May 14, 2025](https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm)
- Lock the account yourself if you suspect a takeover. A locked account can still sign in, view balances and contact support, but cannot trade, send crypto or change settings. Seen in search-engine extracts. [Coinbase: lock or unlock your compromised account](https://help.coinbase.com/en/coinbase/privacy-and-security/account-compromised/my-account-was-compromised)
- During a restriction review you may still be able to convert crypto to cash and withdraw cash to a verified bank account, depending on risk factors. Seen in search-engine extracts. [Coinbase: resolve your account restriction](https://help.coinbase.com/en/coinbase/privacy-and-security/other/account-restriction)

## Traps and fine print

- Appendix 5 of the User Agreement requires binding arbitration for nearly all disputes and has a class action and jury trial waiver. Seen in search-engine extracts. [Coinbase U.S. User Agreement](https://www.coinbase.com/legal/user_agreement/united_states)
- Crypto sent to a scammer usually cannot be reversed or recovered. [FTC: cryptocurrency and scams](https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-and-scams)
- SIPC does not protect digital assets that are not securities, even at a SIPC member firm. [SIPC: what SIPC protects](https://www.sipc.org/for-investors/what-sipc-protects)
- Coinbase does not accept emailed copies of ID for verification; upload documents only through coinbase.com or the app. Seen in search-engine extracts. [Coinbase: verify your identity](https://help.coinbase.com/en/coinbase/managing-my-account/update-my-account/identity-verification-faq)

## By the numbers

- CFPB complaints received July 1, 2025 to June 30, 2026 for "Coinbase, Inc.": 1,292. Products: money transfer or virtual currency 1,145 (virtual currency 1,003), credit card 73, checking or savings 56. Top issues: other transaction problem 340, fraud or scam 326, money not available when promised 226, other service problem 97. [CFPB complaint database search](https://www.consumerfinance.gov/data-research/consumer-complaints/search/api/v1/?company=Coinbase%2C%20Inc.&date_received_min=2025-07-01&date_received_max=2026-06-30&size=0)
- Of those, 895 (69.3%) closed with explanation, 394 (30.5%) with monetary relief and 3 with non-monetary relief. 1,269 responses were timely and 23 were not. Data retrieved 2026-10-13. [CFPB complaint database search](https://www.consumerfinance.gov/data-research/consumer-complaints/search/api/v1/?company=Coinbase%2C%20Inc.&date_received_min=2025-07-01&date_received_max=2026-06-30&size=0)
- For comparison, companies closed 2% of all CFPB money services and virtual currency complaints with monetary relief in 2025. [CFPB 2025 Consumer Response Annual Report](https://files.consumerfinance.gov/f/documents/cfpb_2025-cr-annual-report_2026-03.pdf)
- Coinbase estimated the May 2025 incident would cost about $180 million to $400 million for remediation and voluntary customer reimbursements. [Coinbase Form 8-K, May 14, 2025](https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm)

## Scams that target customers

- Insider data theft: on May 14, 2025 Coinbase disclosed that a threat actor paid support contractors or employees outside the United States for customer names, addresses, phone numbers, emails, masked SSNs, masked bank account numbers, government ID images and balances. Passwords and private keys were not taken. Expect scammers who know these details. [Coinbase Form 8-K, May 14, 2025](https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm)
- Fake support calls: Coinbase says its staff will never ask for your password or 2-step codes, or ask you to move assets to a new address, account, vault or wallet; caller ID can be faked. Hang up and contact Coinbase through help.coinbase.com. Seen in search-engine extracts. [Coinbase: tech support and impersonation scams](https://help.coinbase.com/en/coinbase/privacy-and-security/avoid-scams/tech-support-scams)
- Fake emails can show "Coinbase" as the display name with a different sender; Coinbase says its real addresses end with coinbase.com. Seen in search-engine extracts. [Coinbase: is this email really from Coinbase](https://help.coinbase.com/en/coinbase/privacy-and-security/other/is-this-email-really-from-coinbase)
- Crypto recovery scams target people who already lost crypto, promising to get it back for an upfront fee. [FTC: refund and recovery scams](https://consumer.ftc.gov/articles/refund-and-recovery-scams)