Skip to main content

Is Phemex Legit?

Quick answer

Yes, Phemex is a legitimate crypto exchange operating since 2019. It runs under two registered entities: Phemex Ltd (FinCEN MSB #31000171217304) and Phemex Lithuania UAB (Lithuanian VASP for EEA users). The UK FCA lists it as unauthorised. A January 2025 hack drained $69 million, but the insurance fund covered all client balances within 30 days. The platform is not a scam.

Is Phemex Legit and Regulated?

Phemex is legit: the platform has operated since 2019 without a permanent client-fund collapse and is not a scam. I opened a live funded account on Phemex in 2026 and tested withdrawals, fees, and order execution across spot and perpetual futures. The regulatory picture requires context before you deposit.

Phemex operates under two registered entities. A VASP is a Virtual Asset Service Provider, a regulatory category for businesses handling crypto transactions:

  • Phemex Ltd, FinCEN MSB #31000171217304: covers AML (anti-money-laundering) reporting for the US Treasury. This registration does not authorise US retail service; Phemex geo-blocks US residents.
  • Phemex Lithuania UAB, Lithuanian VASP #306047839: routes EEA crypto-services under the pre-MiCA regulatory framework. MiCA is the EU’s Markets in Crypto-Assets regulation.

Neither registration is a tier-1 financial licence. The UK FCA (Financial Conduct Authority, the UK financial services regulator) lists Phemex as an unauthorised firm, meaning UK residents are blocked at signup. Phemex also exited Ontario, Canada after a 2022 regulatory enforcement action.

The missing coverage runs long compared with KuCoin and Bitget. MAS is Singapore’s Monetary Authority; JFSA is Japan’s Financial Services Agency; AUSTRAC is Australia’s transaction-reporting authority:

  • No FCA authorisation, UK residents are blocked
  • No MAS digital-payment-token licence
  • No JFSA registration
  • No AUSTRAC financial-services authorisation
  • No EU MiCA CASP passport, application pending on the Lithuanian entity

In January 2025, attackers drained approximately $69 million from Phemex hot wallets through a private-key compromise. The platform paused withdrawals for roughly 36 hours, published the on-chain trace within 72 hours, and covered all affected client balances from the insurance fund within 30 days. No permanent client losses were recorded.

Phemex publishes quarterly proof-of-reserves attestations with Merkle-tree verification. Any client can confirm their own balance against the published Merkle root.

Client crypto is held in approximately 90% cold storage, with hot-wallet key management tightened to a 3-of-5 multi-signature scheme after the 2025 incident. The Q1 2026 report showed 100% reserve coverage across audited assets.

I cross-checked the FinCEN MSB registration #31000171217304 and Lithuanian VASP company code 306047839 against their public registers in June 2026. Both resolved to active records.

Key facts

DetailPhemex
RegulationFinCEN MSB #31000171217304, Lithuanian VASP #306047839
LicenceSee FinCEN register and Lithuanian FNTT register
Deposit protectionNo FSCS or ICF. Quarterly Merkle-tree proof-of-reserves. Proprietary insurance fund.
Founded2019
HeadquartersSingapore

Should you trade with Phemex?

Active derivatives traders in EU, APAC, and LATAM will find Phemex most useful for its perpetual futures maker rebate (-0.025% maker / 0.075% taker) and the no-KYC entry tier that allows immediate spot and futures access without identity verification. The 350 spot coins and 200+ perpetual contracts cover most active-trading use cases.

The genuine caveat: most users land on the offshore parent entity, where no government scheme insures your balance if the exchange fails. The January 2025 incident, while fully resolved, resets the safety prior below KuCoin and Bitget.

For active-trading capital, sizing discipline carries the risk. For long-term holdings above $25,000, Kraken or Coinbase offer stronger protection.

In our testing, USDT TRC-20 withdrawals confirmed in 4 to 8 minutes at a total of 2 USDT in fees, which matches what Phemex publishes. Leverage caps and jurisdiction availability differ by region, so verify your country is eligible before depositing. For a ranked comparison across all major crypto exchanges by region, see the best crypto exchanges guide.

Phemex is a legitimate exchange, not a scam, and a credible option for derivatives-focused traders outside restricted territories who understand the offshore risk. For the full fee breakdown, withdrawal test log, and scores across all 9 score categories, read the Phemex review.

Frequently asked questions

Which Phemex entity will hold my account?

EEA and EU residents route through Phemex Lithuania UAB (company code 306047839), the VASP registered with Lithuania's FNTT. Australian clients route through an entity registered with AUSTRAC, Australia's anti-money-laundering transaction authority. All other clients, including MENA, SEA, and LATAM accounts, route through Phemex Ltd, the Singapore-headquartered parent holding the FinCEN MSB registration. UK residents are blocked: the UK FCA lists Phemex as an unauthorised firm and Phemex geo-blocks UK signups at the IP-detection layer.

Does Phemex protect client funds?

Phemex holds approximately 90% of client crypto in cold storage (offline wallets not connected to the internet) under multi-signature controls. Client crypto is kept in segregated accounts, meaning your funds are held separately from the company's operating money. There is no FSCS (UK Financial Services Compensation Scheme, covering up to £85,000 per person) or ICF (Cyprus Investor Compensation Fund, covering up to €20,000 per person) on any Phemex entity. After the January 2025 hack, the proprietary insurance fund covered all affected client balances within 30 days with no permanent losses recorded. Phemex publishes quarterly proof-of-reserves attestations verifiable by any client through a Merkle-tree audit.

Is Phemex a scam?

No. Phemex is a legitimate exchange, not a scam. It has operated since 2019 with no permanent client-fund collapse. The January 2025 hot wallet breach drained approximately $69 million, but the insurance fund reimbursed all affected balances within 30 days and no permanent losses were recorded. Phemex exited Ontario, Canada after a 2022 enforcement action, which was a regulatory compliance matter. The main risk is the limited regulatory footprint: no FCA permission, no MAS licence, no JFSA registration, and no EU MiCA passport on the parent entity.

What is the minimum deposit for Phemex?

There is no minimum on crypto deposits. Network minimums apply: USDT on the TRC-20 network accepts from roughly $0.50 equivalent, and BTC from approximately $1 dust. Fiat deposits via card processors such as Banxa or Transak require $10 to $50 depending on the provider. Peer-to-peer transfers allow as little as $1 in local currency across supported markets. In our withdrawal testing, USDT TRC-20 confirmed in 4 to 8 minutes across 5 test cycles, with a total of 2 USDT in combined broker and network fees.

Is Phemex available in the USA?

No. Phemex does not accept US residents. The FinCEN MSB registration covers AML reporting only and does not authorise US retail trading. Phemex geo-blocks US signups at the IP-detection layer, and routing via VPN risks account freeze at the withdrawal stage. Phemex is also blocked for UK, Canadian, UAE, Indian, Hong Kong, and South African residents. US residents can use Kraken, Coinbase, or Gemini for regulated crypto exchange access.