Coinbase Card
Visa debit card for US residents that spends cash or crypto from a Coinbase account, with optional crypto rewards.
Security record: 2 incidents · 1 own fault · 2 refund pending- Visa prepaid debit card issued by Pathward, for US residents except Hawaii
- Virtual card or physical card
- Spends USD or crypto from your Coinbase account; crypto converts to USD at purchase
- Optional crypto rewards from a rotating list, at a variable rate
- No spending fees and no annual fee; a spread applies when crypto is sold
- Cashback
- 1%
- Paid in
- Crypto you choose
- Monthly fee
- Free
- FX fee
- 0%
- ATM
- No Coinbase fee; the ATM may charge
- Custody
- Custodial
- Crypto converts
- At purchase
- Identity check
- Required
- Issuer
- Pathward, N.A., via Marqeta
Some of these terms come from a review site because the issuer does not state them, and they can be out of date.
Compare all cardsSeven criteria from the terms on this page, on a scale of 10. Compare it with other cards only. How we score
- Custody 4.0
- Self-custody is a 10, a custodial balance is a 4.
- Cashback 4.0
- Base tier: 3% or more is a 10, no cashback is a 1. Paid in the project's own token, a rate counts at three quarters.
- FX and conversion 10.0
- Base tier: no fee is a 10, 3% in FX and conversion together is a 1.
- Issuer and record 8.0
- Issued by Pathward, N.A., Member FDIC; funds held by Coinbase
- Fees 10.0
- No monthly fee is a 10; a fee or a paid physical card lowers it.
- Regions 2.0
- US residents only, except Hawaii
- Phone pay and card types 6.0
- Apple Pay, Google Pay, virtual and physical cards.
Cost to start: No annual fee
- Sign up for Coinbase and verify your identity
- Create a virtual card or order a physical card
- Fund it from a linked bank account or a direct deposit
- Pick a crypto reward in the app
- Spend wherever Visa debit is accepted
Spending crypto other than USD or USDC sells it, which is a taxable event in the US. The reward rate is variable and can change, and some merchant types such as gambling and crypto businesses are blocked.
2 incidents · 1 own fault · 2 refund pending
Past incidents 2
Bribed support agents leaked customer data. Criminals bribed overseas support contractors to copy data on under 1% of monthly users (about 69,000 people), including names, addresses and some ID images, then demanded a $20M ransom on May 11. Coinbase refused, offered a $20M bounty and estimated costs at $180M to $400M including voluntary reimbursement of customers scammed with the data. Coinbase pledged to reimburse customers tricked into sending funds; no final confirmation of amounts paid found. https://www.coinbase.com/blog/protecting-our-customers-standing-up-to-extortionists
Own faultRefund promised
Sources: coinbase.com, techcrunch.com, theregister.com
SMS recovery flaw let attackers drain 6,000+ accounts. Between March and May 20, 2021, attackers with phished login details abused a flaw in Coinbase's SMS account recovery to bypass 2FA and moved funds out of at least 6,000 customer accounts. Coinbase fixed the flow and said it would credit affected customers. Coinbase's breach notice said it would deposit funds equal to the value removed and that some customers were already repaid; no confirmation all were paid. https://therecord.media/hackers-bypass-coinbase-2fa-to-steal-customer-funds/
Partly own faultRefund promised
Sources: therecord.media, bleepingcomputer.com
From the project’s statements and security coverage. Own fault means the project’s code, servers or keys; third party means a vendor, registrar, oracle or issuer it relies on.
