Understanding Crypto Trust Scores: How We Rate Platforms
By Danny Allan
Founder & lead analyst, CryptoWatchdog · former Complaints Manager at Crypto.com
13 April 2026· Updated 17 June 2026

Understanding Crypto Trust Scores: How We Rate Platforms
A number and a colour. That's the first thing you see on any CryptoWatchdog review — a crypto Trust Score out of 100, sat behind a green, orange or red alert. It's built to do one job, and do it well: tell you in a heartbeat how much risk a platform carries before you send it a single coin.
But a number is only as honest as the work behind it. So this page shows how it's made. What we check. How we weigh it. What the colours mean. And the bit most rating systems skip over: what the score can't tell you. We'd rather earn your trust by showing the working than ask you to take our word for it.
None of this is financial advice. A Trust Score is a research and safety tool, not a buy or sell signal. Markets shift, teams change, regulators move the goalposts — and our scores move with them.
What the Trust Score is (and is not)
The Trust Score is a 0-100 rating that boils down our investigation into a crypto exchange, wallet, broker, bot or yield platform. It squeezes a mountain of evidence — registrations, audits, ownership records, on-chain activity, user reports — into one figure you can actually compare against another.
Here's what it is:
- A snapshot of relative safety and reliability, as of the last time we put the platform under the microscope.
- An evidence-led summary, with the full reasoning laid out in the review so you can mark our homework.
- A living rating we go back to whenever something material changes.
And here's what it's not:
- A guarantee. No score, however shiny, means a platform is risk-free.
- A price prediction, or a nudge to invest.
- A verdict set in stone. A platform that scores well today can fall apart tomorrow, and a low score can climb if a team genuinely sorts itself out.
If you remember one line, make it this: a high score tilts the odds away from an obvious disaster — it never hands your due diligence back to you, done.
The three-colour alert system
Before you even clock the number, the colour tells you how to feel. We use a plain traffic-light system for a simple reason: most people make a gut call in about three seconds flat. We'd just prefer that gut call had some facts behind it.
| Alert | Score band | What it signals | What to do |
|---|---|---|---|
| Green | 70-100 | Met our core safety and transparency bar. Regulated or clearly accountable, audited, public team, sustainable model. | Reasonable starting point. Still do your own checks and never deposit more than you can afford to lose. |
| Orange | 40-69 | Mixed picture. Some genuine strengths, but real gaps — missing audits, thin disclosure, jurisdiction concerns, or unresolved complaints. | Proceed with caution. Read the full review, understand the specific gaps, and consider safer alternatives first. |
| Red | 0-39 | Serious red flags. Anonymous operators, unverifiable claims, "guaranteed" returns, withdrawal complaints, or signs of an outright scam. | Treat as high risk. In many red cases we advise avoiding the platform entirely. |
The colour and the number never disagree — they're two angles on the same finding. The colour is your instant read. The number is for when you've got two green platforms side by side and need to split them.
How the 0-100 score is built
The headline number comes out of a multi-point audit, grouped into core pillars. No single pillar can save a platform on its own. A polished app counts for nothing if you can't find out who runs it, and a well-known founder counts for nothing if customer funds aren't where they're meant to be.
The pillars we weigh:
- Regulation and legal standing — who can hold this company accountable?
- Security and technology — can it genuinely keep funds safe?
- Team and transparency — who's behind it, and what's on the record?
- Financial health and business model — where does the money come from, and does that source survive a second look?
- Deposits, withdrawals and support — can you get your money in, get it back out, and reach a human when it all goes sideways?
- Claims versus reality — do the marketing promises survive contact with the evidence?
Fail badly in a critical pillar — say, an anonymous crew running a yield product that promises fixed daily returns — and the score gets capped hard, no matter how slick the rest of it looks. Given the choice, we'll under-rate a polished scam every single time rather than flatter it.
Want to watch the framework in action, step by step? Our guide to the questions to ask before using any crypto platform runs the same checks we do, in the order we do them.
The multi-point audit, factor by factor
This is the engine room. Every review runs the same checklist, so our scores stay consistent and you can actually compare one against another. Here's what each factor means, and roughly what shoves it up or drags it down.
| Audit factor | What we examine | Pushes the score up | Pushes the score down |
|---|---|---|---|
| KYC and registration | Where the firm is incorporated; which regulators it is registered with; AML/KYC processes | FCA/recognised regulator registration; clear corporate entity; real identity verification | No registration; opaque shell company; "no KYC needed" as a selling point |
| Deposits and withdrawals | Whether users can actually get funds in and, crucially, out | Smooth, well-documented withdrawals; no pattern of complaints | Stuck withdrawals; surprise "fees" or "taxes" demanded before payout |
| Security and tech | Cold storage, third-party audits, proof of reserves, bug bounties | Published audits from reputable firms; majority of funds in cold storage; PoR | Unaudited code; history of breaches; vague "bank-grade security" claims with no evidence |
| Team and transparency | Identity, track record and public profile of leadership | Named, verifiable founders with checkable history | Anonymous or pseudonymous operators; fake or borrowed personas |
| Claims versus reality | Marketing promises tested against verifiable facts | Modest, evidence-backed claims | "Guaranteed" or "risk-free" high returns; fabricated partnerships or licences |
| Customer support | Whether real help exists when something breaks | Responsive, human support; clear complaint routes | Ghost support; only a chatbot or a Telegram admin |
| Backend investigation | On-chain wallet flows, domain age, hosting, corporate filings, reused scam templates | Clean on-chain history; established domain; consistent records | Freshly registered domain; on-chain links to known scams; recycled scam-site templates |
KYC and registration
Every review opens with the same blunt question: who can hold this company accountable? In the UK, firms offering cryptoasset services generally have to register with the Financial Conduct Authority for anti-money-laundering supervision and meet AML and customer due-diligence requirements (FCA — Cryptoassets: AML / CTF regime). Registration isn't a gold star for quality. It just means a real entity has been checked, and there's someone to point at when things go wrong.
Platforms that brag about skipping KYC, or that hide behind a shell company you can't trace, drop points on the spot. In a market with no borders, accountability is often the only thing tying a platform to anyone you could actually hold responsible.
Deposits and withdrawals
A platform can look flawless right up until the second you try to take your money out. We weight this heavily, because frozen withdrawals are the single most common pattern in the complaints that land in our inbox. The classic tell is a demand for an upfront "tax", "fee" or "deposit" before your balance is "released". That isn't a legitimate process — it's how the scam extracts a second payment.
Security and technology
Strip away the branding and a crypto platform is a tech company holding other people's money. So we hunt for evidence, not adjectives:
- Third-party audits. Has the code actually been picked apart by an established security firm? Independent auditors review a system's architecture and codebase and publish what they find — firms like OpenZeppelin have built much of the open-source tooling the rest of the industry leans on (OpenZeppelin — security audits). We want a recent, readable report. A logo slapped on a homepage doesn't count.
- Proof of reserves. After FTX imploded, proof of reserves went from nice-to-have to bare minimum. It uses cryptographic techniques — usually a Merkle tree of customer balances checked against on-chain holdings — to show an exchange genuinely holds customer assets. It has real limits, mind: snapshots go stale fast, and liabilities are hard to verify in full (MoonPay — What is proof of reserves?).
- Cold storage. Keeping the bulk of funds offline puts them out of reach of online attackers.
- Bug bounties. Paying ethical hackers to find the holes before criminals do is a sign of a serious, security-first operation.
For anything you're holding long term, the safest move is often to take the platform out of the equation altogether. That's the whole point of self-custody: with your own keys, no third party can freeze, lose or run off with your funds for you (ethereum.org — Ethereum wallets). We dig into the trade-offs in our guides to self-custody versus custodial wallets and the best hardware wallets of 2026.
Team and transparency
Who's behind the curtain? An anonymous or pseudonymous team rings the alarm immediately. If the founders have nothing to lose by vanishing, work on the assumption that some of them eventually will. We want named leadership with a track record you can actually check, and we watch how a platform behaves when things get hairy. Honest, prompt updates score well. Radio silence and corporate platitudes do not.
Claims versus reality
This is where the marketing meets the maths. We take each big promise — a licence, a partnership, a return figure — and try to verify it ourselves, independently. Anything we can't confirm gets treated as false until proven otherwise. "Guaranteed" or "risk-free" high yields are among the most reliable warning signs in the industry. A return that genuinely can't fail doesn't exist; if a platform promises one, treat it as a sales pitch, not a fact.
Customer support
When it goes wrong — and sooner or later, something always does — can you reach an actual person? We test whether support replies, whether there's a real complaints route, or whether the only "help" on offer is a chatbot going in circles and an anonymous admin in a chat group.
Backend investigation
This is the work that never shows up on the surface. We trace on-chain wallet flows, check how old the domain is, see where the site's hosted, pull the corporate filings, and look for whether the platform is running a template we've already caught on other scam sites. A domain registered last Tuesday, wired to wallets with links to known fraud, is damning — however polished the front end is. Our CryptoMine Pro scam warning shows exactly this kind of backend digging in the wild.
A worked example: green versus red
Let's make it concrete. Picture the two ends of the spectrum.
A platform like the one in our Kraken review sits comfortably in green: registrations across multiple jurisdictions, published proof-of-reserves attestations, the bulk of assets in cold storage, leadership you can name. None of that makes it risk-free — but every critical pillar has hard evidence behind it. Our Bitget review walks through a similar industry-grade assessment in full.
Now picture the opposite. A "yield" product promising a fixed 3% daily return, run by founders nobody can name, on a domain registered last month, demanding a "withdrawal tax" before it pays a soul. That's red across the board. The maths gives it away on its own: 3% a day compounds into impossible numbers within months, which means the "returns" can only be coming from new depositors, not real activity. That's the basic structure of a Ponzi scheme, and it pins the score near zero no matter how clean the website looks.
Affiliate disclosure: some review pages we link to may contain affiliate links, meaning we could earn a commission at no extra cost to you. This never affects a platform's Trust Score, which is determined solely by our audit.
How scores change over time
Trust Scores aren't frozen. We revisit a rating whenever something material happens, such as:
- A new regulatory registration — or an expired one.
- A fresh security audit — or a fresh security breach.
- A change of ownership or leadership.
- A pattern of new user complaints, especially about withdrawals.
- On-chain or corporate findings that quietly contradict earlier claims.
Clean up your act and the score can climb. Let it slip — an audit allowed to lapse, silence during a crisis, withdrawals that suddenly take "a few more days" — and it'll fall. The colour you're looking at is the most recent honest read, not a permanent verdict.
How to read a score before you deposit
Treat the Trust Score as the start of your own process, never the finish line. Before you commit funds to any platform:
- Read the full review, not just the number. The colour gives you the headline; the body tells you why — and the why is what actually matters for your situation.
- Check the date. Look at when the review was last updated. The older it is, the more you should verify for yourself.
- Find the operators. If you can't identify and verify the people running a platform, that's a serious risk all on its own.
- Test a small withdrawal early. Before you deposit anything meaningful, prove you can actually get money back out.
- Be ruthless about "guaranteed" returns. Real yield can be explained. If nobody can tell you exactly where the money comes from, work on the basis that it doesn't exist.
- Match the tool to the job. For long-term holdings, self-custody on a reputable hardware wallet takes platform risk off the table entirely.
What a Trust Score cannot do for you
We're deliberate about the limits here, because over-trusting any single signal is its own kind of risk:
- It can't see the future. A spotless platform today can be run into the ground tomorrow.
- It can't price market risk. Even the safest exchange on earth can't stop the assets you hold from dropping in value.
- It can't protect you from you. Most of the losses we see start with someone being rushed, greedy or frightened into a bad call. A calm, sceptical head is the best wallet protection going — and it's free.
Think of the Trust Score as a sharp, well-researched second opinion. It does a heap of the heavy lifting. It never replaces your own judgement.
Frequently asked questions
Is a high Trust Score a guarantee that a platform is safe?
No. A high score means a platform met our core safety and transparency criteria at the time we reviewed it, which lowers the odds of an obvious disaster. It doesn't remove market risk, future mismanagement, or your own responsibility to do your checks. No score is a guarantee — full stop.
What do the green, orange and red alerts actually mean?
Green (70-100) means the platform cleared our core bar and is a reasonable starting point with normal caution. Orange (40-69) means a mixed picture with real gaps worth understanding before you commit. Red (0-39) means serious red flags — and often a straight recommendation to avoid the platform entirely.
How often are Trust Scores updated?
There's no fixed timetable. We go back to a score whenever something material changes — a new audit, a security incident, a regulatory action, a change of ownership, or a run of user complaints. Always check the "updated" date on a review before you lean on it.
Why does an anonymous team lower the score so much?
Because accountability depends on knowing who's responsible. If the people running a platform can't be identified and have nothing to lose by disappearing, there's no realistic route to getting your money back when things go wrong. Anonymity is one of the strongest risk signals we track.
Does proof of reserves mean my money is completely safe?
No. Proof of reserves is a genuinely useful check that an exchange holds customer assets — but it has limits. Snapshots go out of date quickly, and total liabilities are hard to verify in full. It's one positive signal among several, not a safety net on its own.
Do affiliate links influence a platform's Trust Score?
No. Scores come purely from our audit. Some review pages may contain affiliate links that earn us a commission at no extra cost to you, but that commercial relationship never touches the rating or the evidence behind it.
Is the Trust Score financial advice?
No. It's a research and safety tool built to help you weigh up risk. It isn't a recommendation to buy, sell or invest, and it's no substitute for professional advice or your own due diligence.
The bottom line
The Trust Score exists to turn hours of investigation — registrations, audits, on-chain forensics, complaint patterns — into one honest signal you can read in seconds. The colour gives you the gut check. The number lets you compare. The full review shows our working, so you never have to take it on faith.
Use it as the opening move in your own diligence, keep more of your long-term holdings in self-custody, and stay sceptical of anything promising guaranteed returns. A researched second opinion plus your own calm judgement — that's the most reliable protection you've got.
Disclaimer
This content is for informational purposes only and does not constitute financial advice. Always do your own research.
Related guides
How to Vet a New Crypto Token Launch (and Avoid Getting Rekt)
A calm, practical walkthrough of how to vet a new crypto token before you buy: checking the team, the contract, the tokenomics and the audit, with a simple green-flag/red-flag table and the free tools we actually use.
EducationCrypto Due Diligence: A Hands-On Method for Vetting a Token Before You Buy
A repeatable crypto due diligence method you can actually run: how to read a whitepaper without being bored into submission, check a team and its funding, pull apart tokenomics, and use on-chain tools to verify what the marketing claims. Built around a checklist you can reuse on every token.
EducationSIM Swap Scams: The Phone-Based Threat That Can Empty Your Crypto Wallet
A SIM swap lets a criminal take over your phone number, catch your SMS codes, and empty your crypto, all without ever touching your handset. Here is how the attack actually works, what the FBI and FCC numbers really say, and the practical steps that move you out of the easy-target pile.
EducationPump-and-Dump Schemes: How to Spot the Crypto Scams That Will Empty Your Wallet
A crypto pump and dump inflates a token with hype, then the insiders sell into the rush and the price falls off a cliff. Here's how the trick works, the on-chain and social tells you can check yourself, and a plain checklist to keep your money out of it.
Education5 Questions to Ask Before Using Any New Crypto Platform
Five plain questions that tell you whether a crypto platform is safe before you deposit a penny: who runs it, how it really earns, who holds your coins, what the audits say, and how you get your money back out.
EducationHow to Spot a Crypto Scam: 10 Red Flags
A plain-English, evidence-led guide to the 10 biggest crypto scam red flags, from guaranteed returns to recovery fraud, with checklists and trusted sources so you can spot trouble before you invest.
