Our unique
regulatory
strucuture

We are one of the first to be fully licensed as both a bank and a Virtual Asset Service Provider (VASP).

Our security system Reserve Compliance Inheritance

Why bank your Bitcoin?

Because it keeps your holdings safer, while making it easy to transact, and possible to earn. And it means there are multiple layers of protections in place for your funds, even if Xapo Bank were to close.¹

We comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations and keep your Bitcoin holdings and transaction information private by design.

A fully
licensed bank A fully
licensed bank

Xapo Bank

Your USD deposits are guaranteed.

Our status as a fully regulated bank provides protection for your USD with deposits of up to the equivalent of EUR 100,000 backed by the Gibraltar Deposit Guarantee Scheme, and securities with a value of up to €20,000, covered by the Gibraltar Investor Compensation Scheme (GICS), which compensates 90% of the investment value up to a maximum of €20,000.

Discover more

A regulated
bitcoin custodian A regulated
bitcoin custodian

Xapo Vasp

We’re setting a new regulatory standard for Bitcoin.

Our status as a VASP requires us to adhere to strict regulatory protocols for operational integrity and customer protection.

Discover more

Regulatory
guarantees Regulatory
guarantees

Regulatory guarantees

Your funds are protected, no matter what.

Our status as a regulated bank and VASP means there are guaranteed protections in place to ensure the safe return of your fiat funds, even if Xapo Bank were to close.¹

Learn more

List of elligible countries for Xapo Bank card:

Åland Islands
Albania
Algeria
American Samoa
Andorra
Angola
Anguilla
Antigua and Barbuda
Argentina
Armenia
Aruba
Austria
Azerbaijan
Bahamas
Bahrain
Bangladesh
Barbados
Belgium
Belize
Benin
Bermuda
Bhutan
Bolivia
Bonaire
Botswana
Bouvet Island
Brazil
British Indian Ocean Territory
British Virgin Islands
Brunei
Burkina Faso
Burundi
Cambodia
Cameroon
Cape Verde
Cayman Islands
Chad
Chile
China
Christmas Island
Cocos Islands
Colombia
Comoros
Congo
Cook Islands
Costa Rica
Curaçao
Denmark
Djibouti
Dominica
Dominican Republic
Ecuador
Egypt
El Salvador
Equatorial Guinea
Eritrea
Ethiopia
Falkland Islands
Faroe Islands
Fiji
Finland
France
French Guiana
French Polynesia
French Southern and Antarctic Lands
Gabon
Gambia
Georgia
Germany
Ghana
Gibraltar
Greece
Greenland
Grenada
Guadeloupe
Guam
Guatemala
Guernsey
Guinea
Guinea-Bissau
Guyana
Haiti
Heard Island and McDonald Islands
Honduras
Hungary
Iceland
Ireland
Isle of Man
Italy
Jamaica
Japan
Jersey
Jordan
Kazakhstan
Kiribati
Kosovo
Kuwait
Kyrgyzstan
Laos
Lesotho
Liberia
Liechtenstein
Luxembourg
Macao
Madagascar
Malawi
Maldives
Mali
Malta
Marshall Islands
Martinique
Mauritania
Mauritius
Mayotte
Mexico
Micronesia
Midway Islands
Moldova
Monaco
Mongolia
Montenegro
Montserrat
Morocco
Mozambique
Namibia
Nauru
Nepal
Netherlands
New Caledonia
New Zealand
Niger
Niue
Norfolk Island
North Macedonia
Northern Mariana Islands
Norway
Oman
Pakistan
Palau
Panama
Papua New Guinea
Paraguay
Peru
Pitcairn Islands
Poland
Portugal
Puerto Rico
Qatar
Reunion
Romania
Rwanda
Saint Barthelemy
Saint Helena, Ascension and Tristan da Cunha
Saint Kitts and Nevis
Saint Lucia
Saint Martin
Saint Pierre and Miquelon
Saint Vincent and the Grenadines
Samoa
San Marino
Sao Tome and Principe
Saudi Arabia
Senegal
Seychelles
Sierra Leone
Singapore
Sint Maarten
Slovakia
Slovenia
Solomon Islands
South Africa
South Georgia and the South Sandwich Islands
South Korea
Spain
Sri Lanka
Suriname
Svalbard and Jan Mayen
Swaziland
Sweden
Switzerland
Tahiti
Taiwan
Tajikistan
Tanzania
Timor-Leste
Togo
Tokelau
Tonga
Trinidad and Tobago
Tunisia
Turkey
Turkmenistan
Turks and Caicos Islands
Tuvalu
Uganda
Ukraine
United Arab Emirates
United Kingdom
Uruguay
US Minor Outlying Islands
US Virgin Islands
Uzbekistan
Vanuatu
Vatican City
Vietnam
Wake Island
Wallis and Futuna
Western Sahara
Yemen
Zambia

Our compliance protocols

We operate under the oversight of the Gibraltar Financial Services Commission. Certain services are also available in the UK under the regulation of the Financial Conduct Authority (FCA).²

We are bound by consumer protection laws and adhere to strict international compliance standards for the assets we protect, including:

PCI-DSS

Payment Card Industry Data Security Standard (PCI-DSS), keeps your card information secure.

KYC

Know Your Customer (KYC) verifies the legitimacy of our members and their transactions.

AML

Anti-Money Laundering (AML) ensures the integrity of all transactions.

SOC 2 Type II

Service Organization Control 2 Type II validates our operational effectiveness and commitment to security and privacy.

Routine independent audits

Independent oversight

To ensure we continue to operate in full compliance with regulatory standards we undergo routine independent audits by one of the big 4 accountancy firms, as well as Service Organization Control Type 2 (SOC 2), and PricewaterhouseCoopers (PwC). They evaluate our operations, product and services, and security controls.

Your privacy is protected

Privacy

Rest assured that our rigorous compliance measures do not compromise the privacy of your account. While we open our own balance sheets to auditors, your Bitcoin balance won’t be shared without your consent and will not be publicly available.

Meet our team of experts

Expertise

Our board members have decades of experience across the global financial industry, with diverse specialties including Bitcoin security, international finance, law, and traditional banking.

Our expertise