Exchange

Bybit review

Bybit is a centralized exchange listing 379 assets, where it manages customer assets in Bybit accounts. The exchange requires standard identity verification for all of its products. New accounts without KYC cannot deposit or use any products, while older accounts that remain unverified can only withdraw funds, with a daily limit of 20K USDT and a monthly limit of 100K USDT. Country restrictions follow nationality rather than residence, and Bybit does not offer its services to US residents or US nationals. In February 2025, around $1.5 billion in ETH was stolen from a Bybit cold wallet. In our view, Bybit fits traders who accept a full ID check.

ID always

Bybit always asks for ID, per its own pages.

ActiveAccount needed

By Ethan ParkerChecked Oct 5, 2026 to Oct 23, 2026How we read the terms

ID firstAccount neededID rule: Always. ID before you trade, deposit or withdraw. Checked Oct 22, 2026.
No-ID limitNo-ID limit per tradeNo-ID limits, per Bybit's pages: 20,000 USDT a day, withdrawals only. Checked Oct 22, 2026.
BTCCoinsBitcoin: supported.
Provider holdsWho holds your coinsCustodial: assets are held in Bybit accounts; Bybit can freeze accounts or withdrawals. Checked Oct 14, 2026.
Not statedBybit's own pages we checked do not say. This is not the same as no.NetworkTor onion: None published. I2P: None published. Works without JavaScript: Not stated.
Our verdict

Choose Bybit if

Who Bybit suits, from the values on this page.

Bybit might not be the right fit if

  • You want to skip ID checks: Bybit's terms let it ask for ID.
  • You do not want an account: Bybit needs one.
  • You want Monero: Bybit does not list it.
  • You want Lightning: Bybit does not support it.
  • You live in the US: Bybit is not available there.
  • You want a service with no incident on record: Bybit had one in 2025.
Platform

Inside Bybit

Screenshots taken November 5, 2026

Platforms
Apps listed in the App Store and on Google Play (app_rating_ios and app_rating_android, checked today)

What you get with Bybit

Yes, no or partly, from our data

Privacy 0 of 6

  • No IDNo
  • No accountNo
  • Tor built inNot statedNot statedBybit's own pages we checked do not say. This is not the same as no.
  • Onion addressNoNone published
  • I2P addressNoNone published
  • Works without JavaScriptNot statedNot statedBybit's own pages we checked do not say. This is not the same as no.

Coins 1 of 4

  • BitcoinYes
  • MoneroNo
  • LightningNo
  • ZcashNo

Custody and code 0 of 3

  • You hold the keysNo
  • Open sourceNot statedNot statedBybit's own pages we checked do not say, checked Oct 14, 2026. This is not the same as no.
  • Address screeningNot statedNot statedBybit's own pages we checked do not say. This is not the same as no.
ID check

When can Bybit ask for your ID?

Always, per Bybit's own pages. Labels come from each provider's terms, never from our guess.

  1. 1Never, by designNo company holds your order, so nobody can ask
  2. 2Only if you chooseID only for extras you opt into
  3. 3If a payment is flaggedNo ID by default; checks when a risk system flags you
  4. 4Above a limitID once you pass a stated amount
  5. 5AlwaysBybit is on this stepID before you trade, deposit or withdraw

If a check comes and you do not pass it

Non-KYC accounts keep a withdrawal-only path (up to 20K USDT a day, 100K USDT a month); deposits are not available. Bybit may require KYC before approving a withdrawal. The Terms let Bybit limit, suspend, restrict, freeze or terminate an account or its withdrawal function, among other reasons if it is unable to verify or authenticate information provided, without disclosing the grounds; assets remaining at account deletion are forfeited.

“(Withdrawal is not affected for Non-KYC users.) [...] 23.2 We may, at any time and at our sole discretion, limit, suspend, restrict, freeze or terminate the Account (or certain functionalities thereof such as uploading, receiving, sending and/or withdrawing Digital Assets) [...] (e) we are unable to verify or authenticate any information you provided; [...] 7.7 Upon Account deletion, any remaining assets will be forfeited and irrecoverable.”

What triggers a check: Any product or service (Standard KYC mandatory); crypto and fiat deposits; withdrawals above 20K USDT a day or 100K USDT a month; Buy Crypto and card payments; Advanced KYC above a certain amount; claiming Rewards Hub rewards, Earn, Launchpad; internal transfers to a recipient without KYC are restricted; KYC may be required before Bybit approves a withdrawal request; region, product or service requirements (higher levels)

Not stated on Bybit's pages: fee on refusal, refund policyBybit's own pages we checked do not say. This is not the same as no.

Checked October 23, 2026

Fees and limits

What Bybit costs

WhatBybit
Trade feeVIP 0 0.10%/0.10% down to Supreme VIP 0.045% taker / 0.030% maker; VIP level by asset balance or 30-day volume, whichever is higher
No-ID limitNew accounts without KYC: no deposits and no products; existing non-KYC accounts: withdrawals only, up to 20K USDT a day and 100K USDT a month

Checked October 22, 2026

Your data

What Bybit knows about you

Who sees what during a trade, and who runs it.

During a trade

Data the policy collects
CDD documents per Terms: full name, home address, phone, e-mail, date of birth, country of residence and nationality, government ID, tax ID, social security number, bank account information, biometric verification (liveness video or photograph), purpose of transactions and source of funds. The privacy policy itself did not render from the US, so IP, device data and retention periods were not checked.
What your payment reveals

No ID check does not make a bank payment private.

Network and who runs it

Network
Onion: None publishedI2P: None publishedWithout JavaScript: Not statedBybit's own pages we checked do not say. This is not the same as no.
Who runs it
Operator: Bybit Technology Limited (global platform; Seychelles address per FSA Seychelles)
Warrant canary
Not published

Checked October 23, 2026

Safety

Track record and code

One major hack (2025, user ETH reserves restored per Bybit PoR), three regulator actions; no closure or seizure of user funds found.

Incidents

  1. 2025Feb 21, 2025: About $1.5 billion in ETH stolen from a cold wallet; FBI attributes it to North Korea (TraderTraitor). Bybit's next proof-of-reserves snapshot showed ETH reserves at 102% of user ETH.
  2. 2025Jan 31, 2025: India FIU-IND penalty of INR 9,27,00,000 on Bybit Fintech Limited for operating without FIU registration.
  3. 2024May 16, 2024: France AMF public reminder: Bybit on the blacklist since 2022-05-20, not registered as PSAN.
  4. 2022Jun 22, 2022: Ontario Securities Commission settlement with Bybit Fintech Limited: disgorgement of USD 2,468,910.
Open source
Not statedBybit's own pages we checked do not say, checked Oct 14, 2026. This is not the same as no.

Checked October 14, 2026

Reddit

Community

Discussions about Bybit on Reddit (opens in a new tab) (r/Bybit)

We have not summarized these discussions yet.

More facts

More facts we checked on Bybit

Coins listed
379
Onion address
Not published
I2P address
Not published
Where you live

Bybit in the US and elsewhere

In the US

US availability: Not available

Blocks US IPs
Terms: Bybit does not offer services to users in the United States

If you are a US person, US sanctions rules apply to you whether or not a service asks for ID.

Outside the US

Where Bybit does not serve

15 places in its terms
  • Australia
  • United States
  • the Chinese Mainland
  • Hong Kong
  • Singapore
  • Canada
  • France
  • North Korea
  • Cuba
  • Iran
  • Uzbekistan
  • Russian-controlledregions of Ukraine (currently including the Crimea, Donetsk, and Luhansk regions)
  • Sevastopol
  • Sudan
  • Syria
Show all 15 places+9 moreShow fewer

Regional rule: Not statedBybit's own pages we checked do not say. This is not the same as no.

Site blocks by region
Excluded: the United States, mainland China, Hong Kong, Singapore, Canada, North Korea, Cuba, Iran, Uzbekistan, occupied regions of Ukraine, Sudan, Syria and others

Where you live and the provider's terms

Many services on this page do not serve every country. Some exclude people because of where they live or their citizenship, not only where they connect from. Read the provider's terms before you send funds. If the terms exclude you, do not use the service, and do not try to get around the restriction, for example with a VPN.

Taxes

A service that does not ask for ID does not change your taxes. In the US, the federal income tax return asks a yes-or-no question about digital assets, and you must report digital asset transactions whether or not they result in a gain or loss. In the UK, you may owe Capital Gains Tax when you sell, swap or spend crypto, and you must keep your own records. Rules in other countries differ.

No KYC is not anonymity

"No KYC" here means the provider says it does not ask for ID in the cases its terms describe. It does not make you anonymous. Bybit's terms say it can ask for ID in these cases: Any product or service (Standard KYC mandatory); crypto and fiat deposits; withdrawals above 20K USDT a day or 100K USDT a month; Buy Crypto and card payments; Advanced KYC above a certain amount; claiming Rewards Hub rewards, Earn, Launchpad; internal transfers to a recipient without KYC are restricted; KYC may be required before Bybit approves a withdrawal request; region, product or service requirements (higher levels). Regulated exchanges you send funds from or to may have to collect information about who sends and who receives a crypto transfer. Your tax duties stay the same.

Funds can be held

If a provider asks for more information during a swap or a withdrawal, it may hold your funds until it gets it. Its terms decide what happens next. In the UK, a crypto business that asks for information on a transfer to or from a self-custody wallet, and does not receive it, must not pass the funds on. Read what the provider's terms say before you send. Bybit's terms say that if a check is requested and not completed: non-KYC accounts keep a withdrawal-only path (up to 20K USDT a day, 100K USDT a month); deposits are not available. Bybit may require KYC before approving a withdrawal. The Terms let Bybit limit, suspend, restrict, freeze or terminate an account or its withdrawal function, among other reasons if it is unable to verify or authenticate information provided, without disclosing the grounds; assets remaining at account deletion are forfeited.

Checked October 23, 2026

Alternatives

Exchanges to compare with Bybit

Other active services in this category from our list. The shield shows each one's ID rule from its own terms.

Crypton Exchange ID rule: Never, by design. No company holds your order, so nobody can ask.
NonKYC.io Monero ID rule: Never, by design. No company holds your order, so nobody can ask.
BloFin ID rule: Above a limit. ID once you pass a stated amount.
CoinEx ID rule: Above a limit. ID once you pass a stated amount.
Pionex Bitcoin ID rule: Above a limit. ID once you pass a stated amount.

Bybit side by side

From our privacy data, the same fields for every service
WhatBybitCrypton ExchangeNonKYC.ioBloFinCoinExPionex
ID ruleID alwaysNo ID, by designNo ID, by designID above a limitID above a limitID above a limit
AccountNeededNot statedNeededNeededNeededNeeded
You hold the keysNoNot statedNoNoNot statedNo
MoneroNoNot statedYesNoNot statedNo
LightningNoNot statedNoNot statedNot statedNo
Open sourceNot statedNot statedNoNoNot statedNot stated

Checked October 23, 2026

FAQ

Short answers about Bybit

From the data on this page.

Does Bybit ask for ID?

Bybit always asks for ID, per its own pages. You need an account.

How much can you trade on Bybit without ID?

20,000 USDT a day, withdrawals only.

Who holds your coins during a Bybit trade?

Held by the provider. Custodial: assets are held in Bybit accounts; Bybit can freeze accounts or withdrawals.

Can you buy Monero on Bybit?

No. Bybit does not list Monero, per its own pages.

What does Bybit cost?

Trade fee: VIP 0 0.10%/0.10% down to Supreme VIP 0.045% taker / 0.030% maker; VIP level by asset balance or 30-day volume, whichever is higher.

Author

Who checked this page

Ethan Parker

Senior Content Editor

Every value on this page comes from Bybit's own pages and code, read on the dates shown. Checked Oct 5, 2026 to Oct 23, 2026.

Sources

Sources, how we read the terms and our process

Sources

  1. amf-france.org/fr/actualites-publications/communiques/communiques-de-lamf/lamf-rappelle-au-public-que-la-plateforme-de-trading-de-crypto-actifs-bybit-est-inscrite-sur-liste, for incidents, checked October 14, 2026
  2. api.bybit.com/v5/market/instruments-info, for Zcash, checked October 22, 2026
  3. api.bybit.com/v5/market/instruments-info, for Monero and coins listed, checked October 23, 2026
  4. api.bybit.com/v5/market/time, for status, checked October 5, 2026
  5. bybit.com/common-static/compliance/legal/BYBIT/8016641686b360b415bf61cc24e22fbb.pdf, for custody and custody in detail, checked October 14, 2026
  6. bybit.com/common-static/compliance/legal/BYBIT/8016641686b360b415bf61cc24e22fbb.pdf, for what happens if a check fails, data collected, operator and excluded countries, checked October 23, 2026
  7. bybit.com/en, for I2P address, checked October 22, 2026
  8. bybit.com/en/help-center/article/Benefits-of-Different-KYC-Levels, for no-ID limit, checked October 22, 2026
  9. bybit.com/en/help-center/article/Benefits-of-Different-KYC-Levels, for what triggers a check, checked October 23, 2026
  10. bybit.com/en/help-center/article/Individual-KYC-FAQ, for ID rule, account, warrant canary and onion address, checked October 22, 2026
  11. bybit.com/en/help-center/article/Service-Restricted-Countries, for US availability, checked October 23, 2026
  12. bybit.com/en/help-center/article/Service-Restricted-Countries, for blocks US IPs and site blocks by region, checked October 28, 2026
  13. bybit.com/en/help-center/article/Trading-Fee-Structure, for fees, checked October 22, 2026
  14. bybitglobal.com/x-api/v3/private/cht/asset-common/coin-status, for bitcoin and Lightning, checked October 14, 2026
  15. fiuindia.gov.in/pdfs/judgements/Bybit_Order_15_2024.pdf, for incidents, checked October 14, 2026
  16. ic3.gov/PSA/2025/PSA250226, for incidents, checked October 14, 2026
  17. itunes.apple.com/lookup, for platforms, checked October 22, 2026
  18. osc.ca/en/news-events/news/osc-holds-global-crypto-asset-trading-platforms-accountable, for incidents, checked October 14, 2026
  19. play.google.com/store/apps/details, for ways to pay, checked October 15, 2026

How we read the terms

We do not give privacy services a score. We record what each provider's own pages say: when it asks for ID, the limits, who holds your coins and what it costs. Labels come from each provider's terms, never from our guess. How we read the terms

Our process

We take fees, availability, licenses and coin counts from primary sources: Bybit's own fee schedules, terms and help pages, and the public registers kept by regulators. Every value carries the date we last checked it. The values on this page were checked between October 5, 2026 and October 28, 2026.