Introduction: The “Problem Student” Under the Halo of Elite Credentials
In previous episodes, we exposed HashKey (the compliance model student), HTX (the sanctions-hit exchange), and UZX (the DAO penny-stock exchange).
Todays subject is an interesting one — Phemex.
Its résumé looks extremely impressive:
- “Founded by eight former core developers from Morgan Stanley”
- “Trading engine capable of processing 300,000 transactions per second”
- “Serving more than 10 million users worldwide”
Sounds like the perfect Wall Street success story — a group of financial elites leaving traditional finance to build a crypto empire.
But on the other hand:
- Trustpilot rating: 2.3/5
- 60% of users gave it 1 star
- Permanently banned in Canada
- Warned by both the UK FCA and Austrias FMA
- Removed from South Koreas Google Play Store
- Hacked for $69 million in January 2025
How did a “top student” end up becoming a “globally blacklisted exchange”？
Today, we will peel back the layers one by one.
1. Regulatory Compliance: A Collector of Global “Crackdown Orders”
From Canada to the UK, from Austria to South Korea, from India to the European Union — Phemex is facing regulatory pressure from multiple jurisdictions worldwide.
This is not an isolated issue in one country.
It represents a broader global regulatory crisis.
Canada: Permanently Banned and Fined Over $500,000
This is Phemexs most serious regulatory blow.
In June 2025, Ontarios Capital Markets Tribunal issued a final decision:
Permanently prohibited Phemex from participating in Ontarios capital markets
Ordered a CAD $300,000 administrative penalty
Required the disgorgement of 39,712 USDT in illegal proceeds
Ordered payment of CAD $134,975 in costs
What was the violation？
Between late 2019 and early 2023, Phemex operated a crypto asset trading platform in Ontario without registration.
During that period, Ontario investors traded more than 74 million USDT worth of crypto products on the platform, and Phemex earned approximately 39,712 USDT in fees.
More importantly:
Phemex acknowledged the regulatory violations.
After being contacted by regulators, the company began blocking Ontario IP addresses in January 2023. However, admitting the violation and restricting access did not prevent the permanent market ban. (资本市场法庭)
What does this mean？
Canadian users are not only restricted from using Phemex — the exchange has effectively been blacklisted from Ontarios capital markets indefinitely.
Phemex Compliance Risk Overview (Source: WikiBit)
UK FCA: Warning for Operating Without Authorization
The UK Financial Conduct Authority (FCA) issued a warning stating that Phemex was providing financial services or products to UK consumers without proper authorization.
The FCA specifically emphasized that customers dealing with Phemex:
Are not eligible for protection from the Financial Ombudsman Service
Are not covered by the Financial Services Compensation Scheme (FSCS)
In other words, if something goes wrong, there may be no compensation available for users.
Austria FMA: Public Warning Issued
In January 2025, Austrias Financial Market Authority (FMA) added Phemex to its warning list, stating that the exchange was providing regulated banking-related services in Austria without authorization.
South Korea: Removed from Google Play Store
In March 2025, South Koreas Financial Services Commission (FSC) requested Google to remove 17 unregistered overseas cryptocurrency exchanges from its app store.
Phemex was among the platforms listed.
In July 2026, at least another 29 overseas crypto exchange apps were reportedly blocked from installation through South Koreas Google Play Store, and Phemex appeared on the list again.
India: FIU Notification
Indias Financial Intelligence Unit (FIU) included Phemex among 25 offshore crypto platforms that were not registered under the Prevention of Money Laundering Act (PMLA) framework.
Authorities requested restrictions on their apps and URLs.
European Union: MiCA Non-Compliant
CoinPaprika clearly labels Phemex as:
“Not MiCA compliant.”
Phemex does not appear on ESMAs CASP (Crypto Asset Service Provider) registration list, meaning EU users theoretically cannot access its services through a compliant regulatory framework.
The So-called “Licenses”: Two Stickers
Phemex claims on its website that it holds:
U.S. FinCEN MSB registration
Lithuania VASP registration
The Lithuania VASP operation is conducted under the name:
Phemex Lithuania UABCompany code: 306047839
But what exactly is an MSB？
A U.S. FinCEN MSB registration has a very low entry threshold:
No review of business models
No verification of financial solvency
No requirement to disclose detailed ownership structures
What about Lithuanias VASP registration？
It is simply a virtual asset service provider registration in a smaller European jurisdiction.
Its regulatory strength is nowhere near frameworks such as:
Hong Kong SFC
Singapore MAS
One sticker + one sticker = regulation？
No.
It equals two stickers.
Risk Rating: High Risk
2. Account Freezes and Withdrawals: The “Nightmare Stories” Behind a 2.3 Trustpilot Rating
Phemex has a 2.3/5 rating on Trustpilot — rated “Poor.”
More concerning:
60% of users gave it only 1 star.
Even more importantly, many user experiences follow an almost identical pattern:
Normal trading → Withdrawal request → Account locked → Funds inaccessible
User complaints include:
“I have used Phemex since 2022 and everything was fine. Recently, I tried withdrawing to another wallet and suddenly received a notification that my account was locked. I did nothing wrong — just normal trading.”
“My Phemex account was locked without reason. I only participated in regular activities and tried to withdraw some profits. My account was closed. I have been a loyal user for years and completed all identity verification.”
“My account was frozen, and 1,905 USDT was locked. Customer service accused me of violating rules but refused to explain what I actually did wrong.”
My account has been locked for two months. I cannot log in and cannot reach customer support. No response, no updates — I have no idea what happened to Phemex.
The 2025 Hack Made Withdrawals Even More Chaotic
On January 23, 2025, Phemexs hot wallets were attacked by hackers.
The estimated loss was around $69 million, involving multiple networks:
Ethereum: approximately $20 million
Solana: approximately $17 million
XRP: approximately $13 million
Bitcoin: approximately $5.3 million
Following the attack, Phemex temporarily suspended withdrawal services.
Although withdrawals were later restored, many users reported that withdrawing funds became significantly more difficult afterward.
Customer Support: Better Than Nothing
According to Trustpilot data:
- Phemex only responds to around 20% of negative reviews
- Response times often take around two weeks
Some users reported:
“Completely unable to contact customer service. No communication, no updates.”
One user also complained about experiencing more than 750% slippage while trading on Phemex — even with the default 0.5% slippage protection enabled.
What does 750% slippage mean？
If you intend to spend 10,000 USDT buying crypto, your actual execution could theoretically cost 85,000 USDT.
This cannot simply be explained as “market volatility.”
Risk Rating: High Risk
A large number of users report:
- Accounts being frozen after withdrawal requests
- Assets being locked
- Customer support becoming unreachable
This is not merely a “poor user experience.”
It is the classic pattern of:
Easy to deposit, difficult to withdraw.
The $69 million hack only made the situation worse.
3. Reserve Transparency: The 138.39% “Top Student Report Card” — But Who Is Grading It？
Phemex has actually performed relatively well in terms of reserve transparency.
Its numbers look almost textbook-perfect.
On November 21, 2022 — just 10 days after the FTX collapse — Phemex launched its Merkle Tree Proof of Reserves (PoR) system, becoming one of the earliest exchanges to take action.
It currently publishes monthly PoR reports, allowing users to independently verify their account positions within the Merkle tree.
According to the latest August 2026 report:
Average reserve ratio: 138.39%
- BTC: 116.81%
- ETH: 121.64%
- SOL: 150.01%
All major asset reserve ratios are significantly above 100%.
But…
First: No Independent Third-Party Audit
Phemexs PoR system allows users to verify reserves themselves and claims users do not need to blindly trust third-party auditors.
This sounds very Web3.
However:
Self-verification cannot replace an independent audit.
Second: PoR Does Not Cover Hidden Liabilities
Phemex itself acknowledges:
“Basic PoR proves that assets exist, but cannot prove that an exchange has no off-balance-sheet liabilities.”
In other words:
A reserve report can show what assets exist.
It cannot prove whether the exchange owes hidden debts elsewhere.
Third: CoinPaprika Confidence Score: 0%
CoinPaprika gives Phemex a confidence score of 0.00%.
The platform performs poorly across four dimensions:
Credibility
Liquidity
Website traffic
Regulation
Risk Rating: Low Risk (Reserve Transparency Only)
The data is indeed impressive.
A 138% reserve ratio is among the strongest levels in the industry.
However, without independent third-party audits, combined with a confidence score of 0%, even the most beautiful numbers deserve a question mark.
4. Asset Strength: Can Morgan Stanleys Halo Really Pay the Bills？
Team Background: A True “Wall Street Elite” Team
Phemexs biggest strength is undoubtedly its founding team.
Founded in November 2019, the exchange was created by eight former core developers from Morgan Stanley.
Co-founder Jack Tao spent 11 years at Morgan Stanley, where he served as the global head of development for benchmark execution strategies on the investment banks electronic trading platform.
Another co-founder, Max, also worked at Morgan Stanley for 12 years.
The team consists of more than 30 members, including eight former Morgan Stanley developers.
In March 2020, Phemex completed a $3.5 million Series A funding round, led by NGC Ventures, with a valuation of $50 million.
In November 2023, it completed another $90 million financing round, bringing total funding to approximately $93.5 million.
Starting in 2023, CEO duties were taken over by Federico Variola, who is responsible for business development and strategic expansion.
Users and Trading Volume: Rapid Growth, But Conflicting Data
Phemex claims:
10M+ registered users (November 2025), up 66% year-over-year
Average daily derivatives trading volume of $1.69 billion (first half of 2026)
Spot trading volume consistently ranking among the global top 10
Derivatives ranking around No.16 globally
Average daily trading volume of approximately $3.8 billion
More than 600 crypto assets
However, CoinPaprika shows Phemexs 24-hour trading volume at only around 1.7 billion RMB, while estimated real trading volume is reportedly 0.
The data conflict is severe.
The Biggest Risk: The $69 Million Hack
On January 23, 2025, Phemexs hot wallets were attacked by hackers, resulting in losses of approximately $69 million.
The attacker was reportedly linked to North Koreas Lazarus Group.
Some stolen funds later flowed into Tornado Cash.
What does $69 million mean？
It equals roughly 74% of Phemexs total funding of $93.5 million.
Although Phemex claimed it used its own funds to compensate affected users, one single security incident wiped out nearly three-quarters of its total fundraising amount.
The question remains:
What happens if there is another attack？
Risk Rating: Medium Risk (Asset and Team Perspective)
Morgan Stanleys background is indeed a major advantage.
But even the strongest team cannot completely defend against groups like Lazarus.
The $69 million hack exposed a critical weakness in Phemexs security infrastructure.
5. Product Experience and Trading Depth: Strong Technology, But Users Are Not Impressed
Technical Capabilities: Definitely Not Bad
Phemexs technical foundation is difficult to criticize.
Its infrastructure includes:
- Trading engine capacity of 300,000 transactions per second
- Order response time under 1 millisecond
- Execution speed of 5–10 milliseconds
- 99.999% uptime in 2025, meaning less than five minutes of downtime for the entire year
- Futures engine upgrade in 2026, increasing throughput from 25,000 to 40,000 orders per second
- Up to 100x leverage
Product Line: From Derivatives to “Everything Can Be Traded”
Phemex originally started as a pure derivatives exchange.
It has now expanded into a multi-asset trading platform:
Spot Trading
600+ crypto assets
Futures
137+ trading pairs
Up to 100x leverage
Tokenized Stocks
Including:
Apple
Tesla
Other U.S. equities
Pre-IPO Futures
Including:
SpaceX
OpenAI
Traditional Assets
Gold futures
Silver futures
Phemex Earn
Up to 15% APY
But Users Are Not Buying the Story
The core complaints behind those 1-star Trustpilot reviews include:
“750% slippage”
No matter how advanced the technology is, extreme slippage control issues make the system look ridiculous.
“Account frozen, withdrawals blocked”
Even the best products are meaningless if users cannot access their money.
Risk Rating: Medium Risk (Product Perspective)
Phemexs technology foundation is genuinely strong.
Its product range is also extensive.
However, declining user experience is offsetting those advantages.
The fastest trading engine in the world cannot save a frozen account.
6. Real Community Feedback: Trustpilot 2.3 Rating, 60% of Users Want Out
Phemex has a 2.3/5 rating on Trustpilot.
60% of users gave it only 1 star.
Main complaints focus on:
- Withdrawal delays and account freezes
- Poor customer support
- Liquidations caused by high leverage
- Slow customer service responses
Positive Feedback: Some Users Still Praise It
Around 29% of users gave Phemex 5 stars, praising:
- Competitive trading fees
- Smooth execution
- Perpetual contracts and high-leverage options
- Layered deterministic cold wallet security system
Phemexs user experience feels like walking on a tightrope:
Those who never encounter problems think:
“Its actually pretty good.”
But those who experience issues feel:
“Nobody answers, nobody helps.”
Risk Rating: High Risk (Community Perspective)
A 60% one-star rate is extremely unusual among major exchanges.
When more than half of users are willing to give the lowest possible rating, this is no longer an isolated complaint.
7. Comprehensive Exit Risk Assessment
| Dimension | Risk Level | Summary |
| Regulatory Compliance | High | Permanently banned in Canada + warnings from UK, Austria, South Korea, India + MiCA non-compliance |
| Account Freezes / Withdrawals | High | Trustpilot 2.3 rating, widespread “withdrawal leads to account freeze” complaints |
| Reserve Transparency | Low | 138% reserve ratio + monthly PoR reports, but no third-party audit |
| Asset Strength | Medium | Morgan Stanley founding team + $93.5M funding, but $69M stolen in hack |
| Team Operations | Low | Eight former Morgan Stanley elites with strong backgrounds |
| Product Experience | Medium | Strong technology but poor user experience, including “750% slippage” complaints |
| Community Feedback | High | Trustpilot 2.3 rating + 60% one-star reviews |
Overall Rating: Medium-High Exit Risk
The probability of Phemex suddenly disappearing is relatively low.
The Morgan Stanley veterans behind the company are unlikely to destroy their careers for tens of millions of dollars.
But:
Not running away does not mean your funds are safe.
Phemexs biggest problems today are:
1. Global Regulatory Pressure
Canada has permanently banned it.
The UK, Austria, South Korea, and India have issued warnings.
This is not an isolated problem in one market.
It represents a broader global regulatory crisis.
The question is:
If more countries follow, what happens to user funds？
2. The Shadow of the Hack
The $69 million theft was compensated, but trust in the security system has already been damaged.
If Lazarus Group can break through once, could it happen again？
3. Collapsing User Confidence
Trustpilot 2.3 rating.
60% one-star reviews.
The curse of:
“Request withdrawal → Account frozen.”
When users no longer trust a platform, even the strongest technology becomes meaningless.
4. 0% Confidence Score
CoinPaprikas 0% confidence score suggests that, from the perspective of professional data platforms, Phemex performs poorly across:
Credibility
Liquidity
Regulatory compliance
8. Advice for New and Existing Users
For New Users
Enter cautiously.
A platform that has been:
Permanently banned in Canada
Warned by FCA
Removed from South Koreas app store
raises a simple question:
Why choose it？
If you insist on using Phemex:
Start with a small test:
Deposit → Trade → Withdraw.
Only consider larger amounts after confirming the full process works.
Complete KYC verification.
Incomplete identity verification may create withdrawal problems later.
For Existing Users
Evaluate your exposure
If your Phemex holdings exceed 10% of your total assets, consider gradually reducing your position.
Withdraw now
Many users who later complained about frozen withdrawals initially thought:
“It should probably be fine.”
Monitor regulatory developments
Canada has already taken action.
Which country will follow next？
Do not put all your eggs in one basket
This applies to every exchange.
For Phemex, it is especially important.
Final Recommendation
Who is Phemex suitable for？
Users who:
Seek high-leverage derivatives trading
Accept regulatory uncertainty
Are willing to take the risk of not becoming part of the “60%”
Phemex has the best résumé:
Morgan Stanley elite founders.
But it also has one of the most controversial report cards:
Global regulatory crackdowns + angry users + major hacking incidents.
The question is:
Do you trust the résumé, or do you trust the report card？
Next Episode Preview: WikiBit Exchange Exit Risk Ranking Vol.5 — Tapbit Exchange. Stay tuned!
Risk Disclaimer: This article represents personal analysis only and does not constitute investment advice. Cryptocurrency investment involves risks. Please conduct your own research before making investment decisions. This article was updated on August 21, 2026. Please verify the latest information through multiple sources.
