Back to BlogEducation

    Understanding Crypto Trust Scores: How We Rate Platforms

    DA

    By Danny Allan

    Founder & lead analyst, CryptoWatchdog · former Complaints Manager at Crypto.com

    13 April 2026· Updated 17 June 2026

    Understanding Crypto Trust Scores: How We Rate Platforms

    Understanding Crypto Trust Scores: How We Rate Platforms

    A number and a colour. That's the first thing you see on any CryptoWatchdog review — a crypto Trust Score out of 100, sat behind a green, orange or red alert. It's built to do one job, and do it well: tell you in a heartbeat how much risk a platform carries before you send it a single coin.

    But a number is only as honest as the work behind it. So this page shows how it's made. What we check. How we weigh it. What the colours mean. And the bit most rating systems skip over: what the score can't tell you. We'd rather earn your trust by showing the working than ask you to take our word for it.

    None of this is financial advice. A Trust Score is a research and safety tool, not a buy or sell signal. Markets shift, teams change, regulators move the goalposts — and our scores move with them.

    What the Trust Score is (and is not)

    The Trust Score is a 0-100 rating that boils down our investigation into a crypto exchange, wallet, broker, bot or yield platform. It squeezes a mountain of evidence — registrations, audits, ownership records, on-chain activity, user reports — into one figure you can actually compare against another.

    Here's what it is:

    • A snapshot of relative safety and reliability, as of the last time we put the platform under the microscope.
    • An evidence-led summary, with the full reasoning laid out in the review so you can mark our homework.
    • A living rating we go back to whenever something material changes.

    And here's what it's not:

    • A guarantee. No score, however shiny, means a platform is risk-free.
    • A price prediction, or a nudge to invest.
    • A verdict set in stone. A platform that scores well today can fall apart tomorrow, and a low score can climb if a team genuinely sorts itself out.

    If you remember one line, make it this: a high score tilts the odds away from an obvious disaster — it never hands your due diligence back to you, done.

    The three-colour alert system

    Before you even clock the number, the colour tells you how to feel. We use a plain traffic-light system for a simple reason: most people make a gut call in about three seconds flat. We'd just prefer that gut call had some facts behind it.

    AlertScore bandWhat it signalsWhat to do
    Green70-100Met our core safety and transparency bar. Regulated or clearly accountable, audited, public team, sustainable model.Reasonable starting point. Still do your own checks and never deposit more than you can afford to lose.
    Orange40-69Mixed picture. Some genuine strengths, but real gaps — missing audits, thin disclosure, jurisdiction concerns, or unresolved complaints.Proceed with caution. Read the full review, understand the specific gaps, and consider safer alternatives first.
    Red0-39Serious red flags. Anonymous operators, unverifiable claims, "guaranteed" returns, withdrawal complaints, or signs of an outright scam.Treat as high risk. In many red cases we advise avoiding the platform entirely.

    The colour and the number never disagree — they're two angles on the same finding. The colour is your instant read. The number is for when you've got two green platforms side by side and need to split them.

    How the 0-100 score is built

    The headline number comes out of a multi-point audit, grouped into core pillars. No single pillar can save a platform on its own. A polished app counts for nothing if you can't find out who runs it, and a well-known founder counts for nothing if customer funds aren't where they're meant to be.

    The pillars we weigh:

    • Regulation and legal standing — who can hold this company accountable?
    • Security and technology — can it genuinely keep funds safe?
    • Team and transparency — who's behind it, and what's on the record?
    • Financial health and business model — where does the money come from, and does that source survive a second look?
    • Deposits, withdrawals and support — can you get your money in, get it back out, and reach a human when it all goes sideways?
    • Claims versus reality — do the marketing promises survive contact with the evidence?

    Fail badly in a critical pillar — say, an anonymous crew running a yield product that promises fixed daily returns — and the score gets capped hard, no matter how slick the rest of it looks. Given the choice, we'll under-rate a polished scam every single time rather than flatter it.

    Want to watch the framework in action, step by step? Our guide to the questions to ask before using any crypto platform runs the same checks we do, in the order we do them.

    The multi-point audit, factor by factor

    This is the engine room. Every review runs the same checklist, so our scores stay consistent and you can actually compare one against another. Here's what each factor means, and roughly what shoves it up or drags it down.

    Audit factorWhat we examinePushes the score upPushes the score down
    KYC and registrationWhere the firm is incorporated; which regulators it is registered with; AML/KYC processesFCA/recognised regulator registration; clear corporate entity; real identity verificationNo registration; opaque shell company; "no KYC needed" as a selling point
    Deposits and withdrawalsWhether users can actually get funds in and, crucially, outSmooth, well-documented withdrawals; no pattern of complaintsStuck withdrawals; surprise "fees" or "taxes" demanded before payout
    Security and techCold storage, third-party audits, proof of reserves, bug bountiesPublished audits from reputable firms; majority of funds in cold storage; PoRUnaudited code; history of breaches; vague "bank-grade security" claims with no evidence
    Team and transparencyIdentity, track record and public profile of leadershipNamed, verifiable founders with checkable historyAnonymous or pseudonymous operators; fake or borrowed personas
    Claims versus realityMarketing promises tested against verifiable factsModest, evidence-backed claims"Guaranteed" or "risk-free" high returns; fabricated partnerships or licences
    Customer supportWhether real help exists when something breaksResponsive, human support; clear complaint routesGhost support; only a chatbot or a Telegram admin
    Backend investigationOn-chain wallet flows, domain age, hosting, corporate filings, reused scam templatesClean on-chain history; established domain; consistent recordsFreshly registered domain; on-chain links to known scams; recycled scam-site templates

    KYC and registration

    Every review opens with the same blunt question: who can hold this company accountable? In the UK, firms offering cryptoasset services generally have to register with the Financial Conduct Authority for anti-money-laundering supervision and meet AML and customer due-diligence requirements (FCA — Cryptoassets: AML / CTF regime). Registration isn't a gold star for quality. It just means a real entity has been checked, and there's someone to point at when things go wrong.

    Platforms that brag about skipping KYC, or that hide behind a shell company you can't trace, drop points on the spot. In a market with no borders, accountability is often the only thing tying a platform to anyone you could actually hold responsible.

    Deposits and withdrawals

    A platform can look flawless right up until the second you try to take your money out. We weight this heavily, because frozen withdrawals are the single most common pattern in the complaints that land in our inbox. The classic tell is a demand for an upfront "tax", "fee" or "deposit" before your balance is "released". That isn't a legitimate process — it's how the scam extracts a second payment.

    Security and technology

    Strip away the branding and a crypto platform is a tech company holding other people's money. So we hunt for evidence, not adjectives:

    • Third-party audits. Has the code actually been picked apart by an established security firm? Independent auditors review a system's architecture and codebase and publish what they find — firms like OpenZeppelin have built much of the open-source tooling the rest of the industry leans on (OpenZeppelin — security audits). We want a recent, readable report. A logo slapped on a homepage doesn't count.
    • Proof of reserves. After FTX imploded, proof of reserves went from nice-to-have to bare minimum. It uses cryptographic techniques — usually a Merkle tree of customer balances checked against on-chain holdings — to show an exchange genuinely holds customer assets. It has real limits, mind: snapshots go stale fast, and liabilities are hard to verify in full (MoonPay — What is proof of reserves?).
    • Cold storage. Keeping the bulk of funds offline puts them out of reach of online attackers.
    • Bug bounties. Paying ethical hackers to find the holes before criminals do is a sign of a serious, security-first operation.

    For anything you're holding long term, the safest move is often to take the platform out of the equation altogether. That's the whole point of self-custody: with your own keys, no third party can freeze, lose or run off with your funds for you (ethereum.org — Ethereum wallets). We dig into the trade-offs in our guides to self-custody versus custodial wallets and the best hardware wallets of 2026.

    Team and transparency

    Who's behind the curtain? An anonymous or pseudonymous team rings the alarm immediately. If the founders have nothing to lose by vanishing, work on the assumption that some of them eventually will. We want named leadership with a track record you can actually check, and we watch how a platform behaves when things get hairy. Honest, prompt updates score well. Radio silence and corporate platitudes do not.

    Claims versus reality

    This is where the marketing meets the maths. We take each big promise — a licence, a partnership, a return figure — and try to verify it ourselves, independently. Anything we can't confirm gets treated as false until proven otherwise. "Guaranteed" or "risk-free" high yields are among the most reliable warning signs in the industry. A return that genuinely can't fail doesn't exist; if a platform promises one, treat it as a sales pitch, not a fact.

    Customer support

    When it goes wrong — and sooner or later, something always does — can you reach an actual person? We test whether support replies, whether there's a real complaints route, or whether the only "help" on offer is a chatbot going in circles and an anonymous admin in a chat group.

    Backend investigation

    This is the work that never shows up on the surface. We trace on-chain wallet flows, check how old the domain is, see where the site's hosted, pull the corporate filings, and look for whether the platform is running a template we've already caught on other scam sites. A domain registered last Tuesday, wired to wallets with links to known fraud, is damning — however polished the front end is. Our CryptoMine Pro scam warning shows exactly this kind of backend digging in the wild.

    A worked example: green versus red

    Let's make it concrete. Picture the two ends of the spectrum.

    A platform like the one in our Kraken review sits comfortably in green: registrations across multiple jurisdictions, published proof-of-reserves attestations, the bulk of assets in cold storage, leadership you can name. None of that makes it risk-free — but every critical pillar has hard evidence behind it. Our Bitget review walks through a similar industry-grade assessment in full.

    Now picture the opposite. A "yield" product promising a fixed 3% daily return, run by founders nobody can name, on a domain registered last month, demanding a "withdrawal tax" before it pays a soul. That's red across the board. The maths gives it away on its own: 3% a day compounds into impossible numbers within months, which means the "returns" can only be coming from new depositors, not real activity. That's the basic structure of a Ponzi scheme, and it pins the score near zero no matter how clean the website looks.

    Affiliate disclosure: some review pages we link to may contain affiliate links, meaning we could earn a commission at no extra cost to you. This never affects a platform's Trust Score, which is determined solely by our audit.

    How scores change over time

    Trust Scores aren't frozen. We revisit a rating whenever something material happens, such as:

    • A new regulatory registration — or an expired one.
    • A fresh security audit — or a fresh security breach.
    • A change of ownership or leadership.
    • A pattern of new user complaints, especially about withdrawals.
    • On-chain or corporate findings that quietly contradict earlier claims.

    Clean up your act and the score can climb. Let it slip — an audit allowed to lapse, silence during a crisis, withdrawals that suddenly take "a few more days" — and it'll fall. The colour you're looking at is the most recent honest read, not a permanent verdict.

    How to read a score before you deposit

    Treat the Trust Score as the start of your own process, never the finish line. Before you commit funds to any platform:

    1. Read the full review, not just the number. The colour gives you the headline; the body tells you why — and the why is what actually matters for your situation.
    2. Check the date. Look at when the review was last updated. The older it is, the more you should verify for yourself.
    3. Find the operators. If you can't identify and verify the people running a platform, that's a serious risk all on its own.
    4. Test a small withdrawal early. Before you deposit anything meaningful, prove you can actually get money back out.
    5. Be ruthless about "guaranteed" returns. Real yield can be explained. If nobody can tell you exactly where the money comes from, work on the basis that it doesn't exist.
    6. Match the tool to the job. For long-term holdings, self-custody on a reputable hardware wallet takes platform risk off the table entirely.

    What a Trust Score cannot do for you

    We're deliberate about the limits here, because over-trusting any single signal is its own kind of risk:

    • It can't see the future. A spotless platform today can be run into the ground tomorrow.
    • It can't price market risk. Even the safest exchange on earth can't stop the assets you hold from dropping in value.
    • It can't protect you from you. Most of the losses we see start with someone being rushed, greedy or frightened into a bad call. A calm, sceptical head is the best wallet protection going — and it's free.

    Think of the Trust Score as a sharp, well-researched second opinion. It does a heap of the heavy lifting. It never replaces your own judgement.

    Frequently asked questions

    Is a high Trust Score a guarantee that a platform is safe?

    No. A high score means a platform met our core safety and transparency criteria at the time we reviewed it, which lowers the odds of an obvious disaster. It doesn't remove market risk, future mismanagement, or your own responsibility to do your checks. No score is a guarantee — full stop.

    What do the green, orange and red alerts actually mean?

    Green (70-100) means the platform cleared our core bar and is a reasonable starting point with normal caution. Orange (40-69) means a mixed picture with real gaps worth understanding before you commit. Red (0-39) means serious red flags — and often a straight recommendation to avoid the platform entirely.

    How often are Trust Scores updated?

    There's no fixed timetable. We go back to a score whenever something material changes — a new audit, a security incident, a regulatory action, a change of ownership, or a run of user complaints. Always check the "updated" date on a review before you lean on it.

    Why does an anonymous team lower the score so much?

    Because accountability depends on knowing who's responsible. If the people running a platform can't be identified and have nothing to lose by disappearing, there's no realistic route to getting your money back when things go wrong. Anonymity is one of the strongest risk signals we track.

    Does proof of reserves mean my money is completely safe?

    No. Proof of reserves is a genuinely useful check that an exchange holds customer assets — but it has limits. Snapshots go out of date quickly, and total liabilities are hard to verify in full. It's one positive signal among several, not a safety net on its own.

    Do affiliate links influence a platform's Trust Score?

    No. Scores come purely from our audit. Some review pages may contain affiliate links that earn us a commission at no extra cost to you, but that commercial relationship never touches the rating or the evidence behind it.

    Is the Trust Score financial advice?

    No. It's a research and safety tool built to help you weigh up risk. It isn't a recommendation to buy, sell or invest, and it's no substitute for professional advice or your own due diligence.

    The bottom line

    The Trust Score exists to turn hours of investigation — registrations, audits, on-chain forensics, complaint patterns — into one honest signal you can read in seconds. The colour gives you the gut check. The number lets you compare. The full review shows our working, so you never have to take it on faith.

    Use it as the opening move in your own diligence, keep more of your long-term holdings in self-custody, and stay sceptical of anything promising guaranteed returns. A researched second opinion plus your own calm judgement — that's the most reliable protection you've got.

    Disclaimer

    This content is for informational purposes only and does not constitute financial advice. Always do your own research.

    Related guides

    Education

    How to Vet a New Crypto Token Launch (and Avoid Getting Rekt)

    A calm, practical walkthrough of how to vet a new crypto token before you buy: checking the team, the contract, the tokenomics and the audit, with a simple green-flag/red-flag table and the free tools we actually use.

    Education

    Crypto Due Diligence: A Hands-On Method for Vetting a Token Before You Buy

    A repeatable crypto due diligence method you can actually run: how to read a whitepaper without being bored into submission, check a team and its funding, pull apart tokenomics, and use on-chain tools to verify what the marketing claims. Built around a checklist you can reuse on every token.

    Education

    SIM Swap Scams: The Phone-Based Threat That Can Empty Your Crypto Wallet

    A SIM swap lets a criminal take over your phone number, catch your SMS codes, and empty your crypto, all without ever touching your handset. Here is how the attack actually works, what the FBI and FCC numbers really say, and the practical steps that move you out of the easy-target pile.

    Education

    Pump-and-Dump Schemes: How to Spot the Crypto Scams That Will Empty Your Wallet

    A crypto pump and dump inflates a token with hype, then the insiders sell into the rush and the price falls off a cliff. Here's how the trick works, the on-chain and social tells you can check yourself, and a plain checklist to keep your money out of it.

    Education

    5 Questions to Ask Before Using Any New Crypto Platform

    Five plain questions that tell you whether a crypto platform is safe before you deposit a penny: who runs it, how it really earns, who holds your coins, what the audits say, and how you get your money back out.

    Education

    How to Spot a Crypto Scam: 10 Red Flags

    A plain-English, evidence-led guide to the 10 biggest crypto scam red flags, from guaranteed returns to recovery fraud, with checklists and trusted sources so you can spot trouble before you invest.

    Looking for honest AI crypto trading platforms? Take our free 60-second CryptoWatchdog assessment.