Crypto.com is a cryptocurrency exchange and app operated by a group of Delaware-incorporated Foris entities (Foris DAX, Inc.; Foris Services, Inc.; and affiliates), collectively branded "Crypto.com," with no ultimate parent or ownership chain disclosed in its own U.S. legal documents. Its U.S. privacy policy discloses broad KYC-driven collection including biometric face-geometry data for identity verification, and states that "authorized partners" may collect user data for their own purposes in a way that "may qualify as a sale" under the CCPA. The Crypto.com iOS App Store privacy label self-declares data (Purchases, Identifiers, Usage Data) used to track users across other companies' apps and websites, and links precise location, contacts, and photos to identity. In January 2022, Crypto.com disclosed on its official blog that unauthorized withdrawals affected 483 users; it stated no customer lost funds because withdrawals were either blocked or, where completed, fully reimbursed, and it added a 24-hour delay on new withdrawal addresses as a remediation. No regulatory enforcement action or additional breach was found in the sources checked.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
5 ON FILE
COLLECTION
The Crypto.com iOS App Store privacy label (self-reported by the developer) lists data linked to the user's identity including precise and coarse location, physical address, contacts, user-generated photos or videos, and a 'Sensitive Info' category, in addition to financial and purchase information.
Crypto.com's U.S. App and Web Terms & Conditions (last updated 26 Feb 2026) state that the Crypto.com App Services and Web Services are provided by Foris DAX, Inc., a Delaware corporation and registered money services business, together with its Affiliates (including Foris Services, Inc., also a Delaware corporation and registered MSB) — naming the operating entities but disclosing no ultimate parent company or ownership structure.
The Crypto.com iOS App Store privacy label self-declares that Purchases, Identifiers, and Usage Data collected from the user are used to track the user across apps and websites owned by other companies -- an App Store 'Data Used to Track You' designation for data disclosed to third parties for cross-app tracking/advertising purposes.
Crypto.com's official blog post 'Crypto.com Security Report & Next Steps' (published 20 Jan 2022, preserved via Wayback Machine after the original URL stopped resolving) states that a January 17, 2022 incident involving unauthorized withdrawals affected 483 Crypto.com users, that no customers experienced a loss of funds because withdrawals were mostly blocked and otherwise fully reimbursed, and that Crypto.com added a mandatory 24-hour delay before first withdrawal to a newly whitelisted address as remediation.
The Crypto.com iOS App Store privacy label self-declares a 'Data Used to Track You' category, stating that Purchases, Identifiers, and Usage Data may be used to track the user across apps and websites owned by other companies.