Are Crypto Cards Safe? Card Protections, Crypto Risks and What Is Not Covered
Are crypto cards safe? Card terms can include fraud protections; the FDIC says its insurance does not cover crypto assets. Here is what is and is not covered.
Whether a crypto card is safe depends on which part you mean: the card or the crypto behind it. Coinbase’s agreement, for example, sets limits on your loss if the card is lost or stolen, and the CFPB says registering a prepaid card brings protections for errors, loss and theft. The crypto is a different matter: the FDIC says its deposit insurance does not cover crypto assets.
This guide separates the card side from the crypto side and explains what protects you, what does not, and what you can do yourself.
Two Layers: The Card and the Crypto
A crypto card involves two parts: the payment card, which runs on a network such as Visa or Mastercard, and the place where your crypto is held before you spend it, such as an exchange account, a wallet you control, or a balance on the card after you top up. Coinbase’s card, for example, is issued by Pathward. Our guide on how crypto cards work shows how the two fit together.
The safety rules for each part are not the same, which is why the same card can feel safe at the till and still leave your crypto exposed.
The Card Side: Protection Against Unauthorised Use
Coinbase’s cardholder agreement, on file with the Consumer Financial Protection Bureau (CFPB) as of October 2026, with an effective date of September 2022, spells out your liability if the card is lost or stolen.
| Situation | Your possible loss, per the Coinbase agreement |
|---|---|
| You report a lost or stolen card within 2 business days of learning about it | No more than $50 |
| You report it later, and the issuer can show it could have stopped the misuse | Up to $500 |
| Unauthorised transfers on your history that you do not report within 60 days | You may not get back money lost after the 60 days, if the issuer can show it could have stopped the transfer |
The agreement also says that the time limits will be extended when there was a good reason for the delay, giving a long trip or a hospital stay as examples. It mentions Visa’s Zero Liability policy as an extra protection, but notes that it covers only US-issued Visa cards and does not apply to ATM transactions, some PIN transactions, certain commercial card transactions or unregistered cards.
The CFPB explains why registration matters. It says federal prepaid card rules give an unregistered card fewer protections when it is stolen, misused or affected by an error. Once you register, the provider must offer protections for errors, loss and theft.
The Money Side: When Deposit Insurance Applies
Some crypto cards hold the regular money on the card at a bank. Coinbase’s agreement says card funds are held at, or moved to, Pathward, National Association, an FDIC-insured bank, and are insured up to $250,000 if Pathward fails, provided specific deposit insurance requirements are met.
The FDIC’s own page on prepaid cards adds important limits:
- The card must be registered so the FDIC can identify you if the bank fails.
- Deposit insurance applies only when a bank fails.
- It does not apply if your card is lost or stolen, or if the card provider, rather than the bank, goes bankrupt. Other legal options may exist, and your account agreement may describe them.
Not Covered by FDIC Insurance
The FDIC’s fact sheet on crypto companies says:
- FDIC deposit insurance does not cover crypto assets.
- Assets issued by non-bank companies, such as crypto firms, are not insured by the FDIC.
- It does not protect you if a non-bank company, including a crypto exchange, custodian or wallet provider, defaults or goes bankrupt.
- It does not protect against losses from theft or fraud, which are covered by other laws.
In the UK, the FCA says that registration of a cryptoasset business with it for anti-money laundering purposes does not mean customers can turn to the Financial Ombudsman Service, or claim from the compensation scheme known as the FSCS. It says most cryptoassets are not specified investments, so customers are unlikely to have access to either.
In other words, if the company holding your crypto fails, or the crypto is stolen, there may be no scheme to make you whole.
Custody: Who Holds Your Crypto Until You Pay
Where your crypto sits changes which risks you carry.
- Held by a company. If an exchange or card provider holds it, you depend on that company’s security and on it staying in business.
- Held in your own wallet. MetaMask says its card lets you keep self-custody of your funds until the moment you pay, and that it uses your wallet’s private keys for its non-custodial security. That removes the risk of a company holding your crypto, but puts the job of protecting your keys on you.
- Converted on top-up. On a prepaid card such as NORA CARD, your crypto becomes a USD balance when you top up, according to its official site as summarised on our NORA CARD page. After that, you are holding a card balance rather than crypto.
Our guide to custodial vs non-custodial crypto cards goes through these trade-offs.
Scams and Theft
The Financial Industry Regulatory Authority (FINRA) warns that bad actors use the interest in crypto for fraud, including phishing, romance scams and fake coins. It says that once crypto has been sent in a scam, it is generally gone for good, and that recovering stolen crypto is rare.
FINRA also describes “spoofing”: luring people to store their keys with fake crypto service providers, or posing as tech support staff for legitimate providers.
Security Features to Look For
Card providers list different tools. Examples from official pages, as of October 2026:
- Freeze and replace. MetaMask says you can freeze or replace its card instantly in the app and get transaction alerts.
- Compliance checks. Under security and compliance, NORA CARD’s official site lists PCI DSS, SOC 2 Type II, and KYC/AML checks. Note that it also lists a $25 fee to unfreeze (reactivate) a card.
- Clear liability terms. A cardholder agreement that sets out your liability for lost or stolen cards, like the Coinbase agreement above.
Simple Steps That Reduce Risk
- Register and verify the card so that the protections tied to registration apply.
- Report a lost card or strange transaction at once. The Coinbase agreement shows how quickly your possible loss grows with delay.
- Protect your wallet keys and app logins if you use a self-custody card.
- Contact your provider only through its official app or site, given the spoofing risks FINRA describes.
- Read the fees for card-security actions such as replacement or unfreezing; our crypto card fees guide lists what to check.
You can compare how cards describe their protections on our crypto cards list.
Questions and Answers
Is the crypto on my card insured? Not by FDIC deposit insurance. The FDIC says its deposit insurance does not cover crypto assets or the failure of non-bank crypto companies.
What if my crypto card is stolen? Report it straight away. Under the Coinbase agreement (on file with the CFPB as of October 2026, effective September 2022), reporting within 2 business days limits your loss to $50.
Is a self-custody crypto card safer? It removes the risk of a company holding your crypto, but you become responsible for protecting your keys.
Disclosure: ScoreWire has a commercial relationship with NORA CARD.
This article is for information only and is not financial advice.
