Is MEXC Safe and Legit? Reserves, KYC and Regulator Warnings in 2026
MEXC reports more reserves than user balances in the four coins it publishes and says its Guardian Fund now holds 2,000 BTC. The weak side is legal: it does not serve the US, holds no licence in the UK, the EU or Japan, and at least 14 regulators have warned about it or acted against it. What that means before you deposit.
- MEXC's proof of reserves snapshot of 8 October 2026 shows BTC at 294%, USDT at 122%, USDC at 115% and ETH at 111% of user balances, and Hacken's verification of 9 October puts all four above 100%.
- MEXC says its Guardian Fund holds 100 million USDT and 2,000 BTC for losses from a breach of its own systems. A separate futures insurance fund held 818.6 million USDT on 13 October 2026.
- MEXC does not serve the US and has no licence in the UK, the EU or Japan. It has drawn warnings or orders from at least 14 regulators, and in 2026 Dubai's VARA fined its operator.
- KYC has been mandatory since 5 February 2026. Without it you cannot withdraw or trade, so older guides that promise trading without KYC are out of date.
- MEXC restricted 20,752 accounts it linked to risk activity in July and August 2026. Only mexc.com and the domains confirmed by MEXC Verify are official, and mexc.fi is not one of them.
If you are asking whether MEXC is safe, you are weighing two ways to lose your balance: the exchange disappears with your coins, or it freezes your account. The numbers say the first risk is small and the second one is real. MEXC reports more reserves than user balances in all four coins it publishes. In July and August 2026 alone it restricted 20,752 accounts it linked to risk activity, months after admitting that some of its risk rules may have been too rigid for ordinary users.
Is MEXC legit?
Yes, MEXC is a legitimate exchange with reserves above 100% in the four coins it publishes, but it does not serve the US and has no licence in the UK, the EU or Japan.
MEXC says it has run since 2018, and its reserves cover user balances in BTC, ETH, USDT and USDC, so the risk of the exchange vanishing with your coins is small. The legal side is weaker. No regulator in a large market supervises how MEXC treats customers, and the documents name several different companies behind it: regulators have named MEXC Global Ltd, MX Global Ltd and MEXC Estonia OÜ, the Dutch AFM says MEXC is no longer in any trade register, and the User Agreement of 13 October 2026 names MEXC (Comoros) Ltd as your counterparty.
In the scorecard below, four of the six areas rate strong. Licensing rates weak, and account freezes are the area to watch.
- Proof of reserves
- BTC 294%, USDT 122%, USDC 115%, ETH 111%, all four above 100% in Hacken's verification of 9 October 2026
- Protection funds
- Guardian Fund MEXC puts at 100M USDT and 2,000 BTC, futures insurance fund of 818.6M USDT
- Security record
- No reported breach of MEXC's exchange wallets since 2018, according to MEXC
- Licensing
- Does not serve the US, no licence in the UK, EU or Japan, operator fined in Dubai in 2026
- Account freezes
- 20,752 accounts restricted under MEXC's risk rules in July and August 2026
- Account protection
- 2FA, passkey login, anti-phishing code, withdrawal whitelist, MEXC Verify
What backs your balance on MEXC?
MEXC holds more BTC, ETH, USDT and USDC than its users own, which Hacken verified on 9 October 2026, and it runs two separate funds: one for a breach of its own systems and one that covers negative balances left by liquidations.
The proof of reserves snapshot of 8 October 2026 counts 12,402.93 BTC against 4,220.56 BTC of user balances, a ratio of 293.86%. USDT sits at 122.38%, USDC at 115.42% and ETH at 110.90%. You can check that your own balance is in the snapshot with a Merkle tree tool on the platform. Two limits apply: the Hacken report calls its work a technical verification rather than a financial audit, and it covers only these four coins, with liabilities taken from MEXC's own daily snapshots.
The Guardian Fund started with $100 million in June 2025. In May 2026 MEXC committed to grow it to $500 million over two years and added 1,000 BTC. On 30 September 2026 it added another 1,000 BTC and now says the fund holds 100 million USDT and 2,000 BTC, although its press release of 15 September still gave a balance of $101 million. MEXC describes the fund as a company commitment with a manual claim review, meant for losses caused by a compromise of MEXC's own systems, and its published scope lists neither trading losses nor account takeovers. The futures insurance fund is separate: it held 818,610,368 USDT on 13 October 2026.
Why do regulators warn about MEXC?
Regulators warn about MEXC because it serves customers in countries where it holds no licence: at least 14 of them have published warnings or orders, and in 2026 the Seychelles FSA named its operator as unlicensed and Dubai's VARA fined it.
In Europe, BaFin warned in October 2023 that MEXC offers financial services in Germany without authorisation. France's AMF put mexc.com on its blacklist in June 2024, and Belgium's FSMA ordered MEXC in July 2024 to stop offering wallets to Belgian clients. The Dutch AFM warned in September 2025 that MEXC serves the Netherlands without the licence MiCA requires, and ESMA lists MEXC Global as a firm that breaches MiCA. MEXC suspended fiat services for Dutch residents on 20 March 2026 and is now closing accounts linked to the Netherlands in four batches. Open futures positions are closed at a fair price from 24 October, and the last batch is due to close on 31 October 2026.
Outside the EU, the UK's FCA, Hong Kong's SFC, Singapore's MAS, Malaysia's Securities Commission, Thailand's SEC, the Ontario Securities Commission and India's FIU have all listed or warned about MEXC. Japan's FSA issued warnings in March 2023 and November 2024. On 26 May 2026 the Seychelles FSA named MX Global Ltd as the unlicensed operator of mexc.com. On 22 June Dubai's VARA fined MX Global Ltd and ordered it to cease and desist, for service without a licence from 2022 to April 2026 and for onboarding users without the required KYC checks. VARA adds that the company cooperated, complied with the order and intends to apply for a licence.
The User Agreement, updated on 13 October 2026, applies English law and sends disputes to individual arbitration administered by the Hong Kong International Arbitration Centre. It lets MEXC freeze an account without prior notice, and it excludes 13 named jurisdictions, including the US, the UK, Canada, Singapore, Hong Kong and Malaysia. Our guide to MEXC's restricted countries has the full list.
- September 2022Malaysia's Securities Commission adds MEXC to its investor alert list.
- March 2023Japan's FSA warns MEXC for serving Japanese residents without registration and repeats the warning in November 2024.
- October 2023Germany's BaFin warns that MEXC offers financial services without authorisation.
- December 2023India's FIU issues a show cause notice and asks for MEXC's sites to be blocked.
- March 2024Hong Kong's SFC and the UK's FCA put MEXC on their warning lists.
- June and July 2024France's AMF blacklists mexc.com, and Belgium's FSMA orders MEXC to stop wallet services.
- February 2025The Seychelles FSA names MEXC Global Ltd among companies that did not apply for a virtual asset licence.
- March and May 2025Singapore's MAS and the Ontario Securities Commission add MEXC to their alert lists.
- September 2025The Dutch AFM warns that MEXC operates without a MiCA licence.
- March 2026Dubai's VARA warns that MEXC Estonia OÜ and MEXC Global Ltd hold no licence to serve customers in or from Dubai.
- April 2026Thailand's SEC adds MEXC to its investor alert list.
- May 2026The Seychelles FSA names MX Global Ltd as the unlicensed operator of mexc.com.
- June 2026Dubai's VARA fines MX Global Ltd and orders it to cease and desist.
- 31 October 2026MEXC is due to close the last batch of accounts linked to the Netherlands.
Does MEXC require KYC?
Yes, since 5 February 2026 MEXC requires identity verification for deposits, withdrawals and trading, so any guide to using MEXC without KYC written before that date is out of date.
Primary KYC unlocks spot, futures and P2P with withdrawals of up to 80 BTC a day. Advanced KYC raises that to 200 BTC a day and adds fiat of up to 20,000 USD a day. One identity can verify at most two MEXC accounts. MEXC can hold funds sent to an unverified account as restricted, and an unverified user who wins a withdrawal appeal keeps only the right to close positions and withdraw.
Sellers offer verified MEXC accounts online. Do not buy one. The account belongs to the person whose identity is on file, not to you, and if MEXC restricts it under its risk rules, you have no way to prove the funds are yours.
- 1No KYC: MEXC can hold deposits as restricted, and trading and withdrawals stay locked.
- 2Primary KYC: spot, futures and P2P, withdrawals of up to 80 BTC a day.
- 3Advanced KYC: withdrawals of up to 200 BTC a day and fiat of up to 20,000 USD a day.
Each person can verify up to two MEXC accounts, with three attempts per level per day.
Can MEXC freeze your account?
Yes. MEXC restricted 20,752 accounts it linked to risk activity in July and August 2026, and in November 2025 it said some of its risk rules may have proven overly rigid for ordinary users.
MEXC's security report for July and August 2026 also lists 215 intercepted cases of stolen or fraudulent funds worth 38.7 million USDT, 42 of them judicial freezes. In a statement of 1 November 2025, MEXC apologised to the users affected by its rules and set up a dedicated team and channels for unfreezing requests. Its own safety page describes the best known case: a trader who reported $3.1 million frozen in his account since July 2025, whose funds MEXC released after a public apology.
A takeover is the second way to lose access, and your own settings decide a lot here. MEXC says it fully compensated a user who lost $340,000 after an attacker moved funds through an API key that was still on the account. By default, withdrawals through the API skip the address whitelist until you switch that setting on, so delete any API key you no longer use.
How to spot a fake MEXC site
Check every link with MEXC Verify: it confirms mexc.com and four mirror domains as official, and it returns mexc.fi as unverified.
The .fi registry shows mexc.fi was registered on 28 August 2026 by a holder that is not one of the MEXC companies named in its User Agreement or by regulators. MEXC Verify checks websites, emails, phone numbers and social accounts, including Telegram and WhatsApp. MEXC tells users to type the address instead of logging in from a search result and to treat any email without their anti-phishing code as suspicious. Clones already exist: in February 2024 Hong Kong's SFC and police warned about a suspected fraudulent platform using the MEXC name on domains such as mexczx.icu.
On your own account, switch on Google Authenticator 2FA, the anti-phishing code and the withdrawal whitelist, and use passkey login. A password change locks withdrawals for 24 hours, which is a nuisance until the day it stops someone else.
What MEXC costs, and how to pay less
MEXC charges 0.01% maker and 0.04% taker on futures at VIP 0, the lowest regular taker rate of the 9 exchanges Trade Reclaim covers, and 30% cashback brings that to 0.007% and 0.028%.
At 5,000,000 USDT of taker volume a month that is 2,000 USDT in fees, and 600 USDT comes back. Check first that MEXC serves your country and that your regulator has not warned against it: Japan and Thailand are not on MEXC's excluded list, yet both regulators list MEXC as unlicensed, and Trade Reclaim does not recommend MEXC to residents of Japan. Affiliate services for accounts linked to the Netherlands end with the wind-down, so cashback for those accounts stops by 24 October 2026.
Trade Reclaim never holds your funds and needs only your MEXC UID. Our MEXC fees guide lists every tier, and the calculator shows what your own volume returns. The setup steps are on the MEXC cashback page.
| Maker | Taker | |
|---|---|---|
| MEXC VIP 0 | 0.010% | 0.040% |
| With Trade Reclaim (30%) | 0.007% | 0.028% |
Regular futures tier, October 2026. Cashback is 30% of the fee, paid in USDT.
Trading on MEXC anyway? Get part of the fees back
Check what your own volume returns at 30% cashback, then open your MEXC account through Trade Reclaim and add your UID. Trade Reclaim never holds your funds and needs no API keys.
Frequently asked questions
Is MEXC a scam?
MEXC is a real exchange that says it has operated since 2018, and it publishes reserves above 100% for the four coins in its proof of reserves. Its risks are legal and account restrictions: it does not serve the US, holds no licence in the UK, the EU or Japan, and at least 14 regulators have warned about it or acted against it. Impersonators exist too, such as the suspected fraudulent platform using the MEXC name that Hong Kong's SFC and police warned about in February 2024. Check any contact with MEXC Verify before you send anything.
Is MEXC regulated?
No financial regulator in the US, the UK, the EU or Japan supervises MEXC. It is not on ESMA's register of providers authorised under MiCA, and ESMA lists MEXC Global as a firm that breaches MiCA after a decision by the Dutch AFM. The FCA lists it as unauthorised, and in 2026 the Seychelles FSA and Dubai's VARA both took action against MX Global Ltd. MEXC's User Agreement of 13 October 2026 names MEXC (Comoros) Ltd as the contracting company.
Can I use MEXC without KYC?
MEXC has required identity verification for deposits, withdrawals and trading since 5 February 2026, so you cannot use it without KYC. MEXC can hold funds sent to an unverified account as restricted. Primary KYC allows withdrawals of up to 80 BTC a day. Guides that promise trading without KYC describe rules that no longer apply.
Has MEXC ever been hacked?
MEXC says no breach of its exchange wallets has been reported since it launched in 2018. Individual accounts have been taken over: MEXC says it fully compensated a user who lost $340,000 after an attacker moved funds through an API key that was still on the account. MEXC says its Guardian Fund of 100 million USDT and 2,000 BTC exists for a breach of its own systems. Deleting API keys you no longer use closes the gap that attacker used.
Is MEXC available in the US or the UK?
MEXC is not available in the US or the UK: its User Agreement excludes the United States, the United Kingdom, Canada and 10 other named jurisdictions. The UK's FCA lists MEXC as an unauthorised firm. Using a VPN to get around the restriction breaks the terms and can get the account closed. The same agreement lets MEXC freeze an account without prior notice.
Is mexc.fi the real MEXC website?
The domain mexc.fi is not a verified MEXC website: MEXC Verify does not list it, and the .fi registry shows it was registered on 28 August 2026 by a holder not named as a MEXC company in its User Agreement or by regulators. The official site is mexc.com, and MEXC Verify also confirms four mirrors: mexc.co, mexc.io, mexc.ai and mexc.fm. Paste any link into MEXC Verify before you log in. If you already entered your password on another domain, change it on mexc.com and check your API keys.
What happens to Dutch MEXC accounts?
MEXC is closing accounts it links to the Netherlands through KYC data, including nationality, so Dutch nationals living abroad can be affected. The last of four batches is due to close on 31 October 2026, and open futures positions are closed at a fair price from 24 October. Remaining assets then go to a regulated custodian MEXC has not yet named. MEXC points Dutch users to Bybit EU or Kraken, and referral and affiliate services for these accounts end with the wind-down.
Trade Reclaim Research reads exchange fee schedules, terms and regulator notices for the 9 exchanges Trade Reclaim works with. Every fact about MEXC in this article comes from MEXC's own pages, Hacken's proof of reserves verification, a regulator or the .fi domain registry, and was checked on 14 October 2026.
Trade Reclaim earns from exchange referrals and shares most of it back to you as cashback. Education, not financial advice.