Why your assets are safe with us

Customer safety is our first goal – this is how we approach security.

+5,000,000

users

16

European licences & registrations

7.7k

trusted reviews

All

our funds are regularly validated

Security at Monnay

Financial Transparency

Not only are we the leading European crypto investment platform, we are also one of the most regulated. We believe in doing things the right way, not the easy way, which is why we choose to be fully transparent, to acquire licences that see us monitored by multiple financial market authorities, and to have our funds and business practices regularly validated by external parties.

User data protection

Monnay only processes your personal data for the purposes permitted according to GDPR. We do not use personal data for automated decision-making, including profiling, and we have several security measures in place to make sure your data is safely stored and processed. Learn more.

Regulations, licences, registrations

The Monnay Group diligently follows European laws and regulations. We operate our businesses based on various VASP registrations, as well as MiFID II, E-Money and PSD II licences amongst all our core markets.

Asset protection

We prioritise keeping your assets safe, incorporating multiple security measures to protect them from potential threats. Crypto assets are stored in highly-secure cold storage facilities that are examined by an external auditor. Your assets are yours.

Advanced Encryption

Monnay infrastructure and systems are secured with the most modern encryption technologies and supported by our dedicated security teams.

24/7 Coverage

As the markets are open 24/7, so are we. Our Operations, Security and Engineering teams operate on a 24/7 coverage model to respond to any changes within the markets.

Best-in-class security

Possessing internally maintained security programs is one thing, but having them measure up to industry standards and validating them by achieving best-in-class certifications is another. The latter is much more difficult and time-consuming, but if you want to be a safe and rigorously regulated company, it is necessary and worthwhile. Our ISO27001 certification proves we do it.

Secure and regulated

We have attained the SOC 2 Type 1 report. This is a significant achievement that demonstrates our ongoing commitment to the highest security and compliance standards.

Which licences should a trustworthy crypto broker have?

Keeping your account secure

Password Management

User passwords are stored using the most trusted and modern hashing algorithms. Nobody can read or decrypt them, including us.

MFA

If activated by the user (highly recommended by Monnay) time-based one-time passwords and multi-factor authentication to defend against security threats and additional 2FA in case of user password compromise.

KYC / AML

Robust KYC onboarding and verification procedures, and fully compliant with European regulation.

Account Lock

Users are prompted via email to verify every password reset request and to freeze their account if the request was not initiated by them.

Session Management

Monnay allows users to see which browsers and devices they are logged in from to control their account access.

Account monitoring

Important notifications to the user to ensure overview of user account activity.

Platform Security

Infrastructure safeguards

We have a system of layered technical defences in place to safeguard our platform and to uphold the confidentiality, integrity and availability of our infrastructure. Additionally, we practise secure software development lifecycle in order to build our products

Internal security measures

Our internal security teams ensure the day-to-day activities of our colleagues take place in a secure manner as part of a safe and controlled environment. We build and run our insider threat monitoring programme and regularly conduct training exercises to increase awareness of security topics across the organisation.

Continuous security assessment

Routine assessments of our security controls and processes through exercises like penetration tests completed by reputable external parties, proactive internal threat hunting, as well as our public Bug Bounty programme ensure that we can prevent potential attacks and minimise risk.

Monnay Custody

Our insured, user-friendly custodial platform for institutional-grade security, automation and management of crypto assets across blockchains and DeFi

Academy

What are public keys, private keys and wallet addresses?

What are public keys, private keys and wallet addresses?

How can I keep my cryptocurrencies safe?

Learn how practising safe cybersecurity habits and keeping your software up-to-date minimises the risk of losing your crypto.

Can a cryptocurrency get hacked or shut down?

Blockchain technology is designed to fend off hackers, but people and websites are easier targets. Learn how to stay safe

What is a stock?

A stock represents ownership of a share in a publicly listed company and is usually a medium to long-term investment.

What does to diversify your portfolio mean?

Achieving a well-balanced portfolio means considering risk tolerance, costs, timing, weighting and diversified holdings
Is Monnay safe?
We take our users’ safety very seriously. Security is a natural and foundational part of everything we do from developing and deploying code to building and running our platform.

We operate our businesses based on various VASP registrations, as well as MiFID II, E-Money and PSD II licences amongst all our core markets. The Monnay Group diligently follows European law and regulations, and Monnay Payments GmbH possesses a payment service provider licence under PSD2, recently becoming an E-Money Institute. Our stringent user verification processes are also fully compliant with AML5.

When you invest with Monnay, you do. You are the beneficial owner of your assets (crypto assets and metals) and we hold them in custody, as a trustee. It’s your investment, your assets – we just keep them safe. All assets are held in a highly-secure environment. As a result, if something goes wrong, you will not be treated as an unsecured creditor and you don’t risk losing your assets. Instead, you assert the right of separation under Austrian law. For Monnay Stocks we have implemented a pledge system and all underlyings are held with a licensed custodian for securities (please refer to our prospectus). So whether you want to move it, trade it, invest it or grow it; it’s your investment, your choice.

Yes, all of our customers’ assets are physically backed up 1:1 and are stored in a highly secure environment.

Monnay manages client assets as a trustee, the client remains the beneficial owner. But what does that mean?


Monnay holds clients crypto assets as trustee under a legally binding trust agreement with its customers and therefore there is a legally binding separation between our own assets and those of our customers.


We do not speculate with customers’ assets we hold.



Customers have a right to separation and are not treated as unsecured creditors; therefore customers cannot lose their crypto assets in custody.

Ownership works just like with other assets. You are acquiring each single asset and not a basket.
Yes, all of our customers’ assets are physically backed up 1:1 and are stored in a highly secure environment.

Thanks for your suggestion. We are working around the clock to improve our blockchain infrastructure, so our customers have all deposit/withdrawal options they need. Withdrawing or depositing to and from Monnay to your Ledger is already possible, by simply using your ERC-20 deposit/withdrawal address. A deeper integration is not planned right now, but we can consider it for the future. Hope this answers your question.

Please note that this is an abbreviated statement for informational purposes only and this statement is not legally binding. For all details regarding the legal customer relationship as well as the trust agreement the respective general terms and conditions apply and please refer to them. Any insolvency procedure in any European jurisdiction is subject to mandatory European and local law and therefore the assessment of the competent insolvency administrator and the competent courts. For this reason, the statements in this information as well as the general terms and conditions are not conclusive and there remains a risk that this legal setup will be qualified differently.