In late 2022, a Dutch crypto exchange most non-Europeans had never heard of found itself with €280 million stuck at a company then dominating crypto headlines for all the wrong reasons — Digital Currency Group, parent of the collapsing lender Genesis. The exchange's response was blunt: it told customers, correctly, that their funds were never at risk, named the counterparty publicly, and spent the next two years chasing the money back. That exchange was Bitvavo, and the episode is a decent shortcut to understanding what it actually is — a company that built its entire reputation on being the careful, compliance-first option, tested by a genuine stress event, and mostly came through it intact.
Founded in Amsterdam in 2018 by programmers Tim Baardse and Jelle de Boer alongside business administrator Mark Nuvelstijn, Bitvavo has grown into the largest cryptocurrency exchange in Europe by euro-denominated spot volume. By 2023 the company said it controlled roughly 40% of the Dutch crypto market alone, and it now serves upward of 4 million users trading somewhere between 190 and nearly 400 assets, depending on when you check. It's deliberately narrower in scope than global giants — spot trading and staking, no derivatives, no high leverage — which keeps it simple for the retail users it's built for.
A Regulatory Story Worth Paying Attention To
What separates Bitvavo from a lot of regional exchanges is that its compliance posture isn't just marketing language. It's registered with De Nederlandsche Bank, the Dutch central bank, as a digital asset service provider, and in June 2025 it became one of the earlier major EU exchanges to receive a full MiCA Crypto-Asset Service Provider license from the Dutch AFM. That license passports across the entire European Economic Area, which explains how a company headquartered in one city ended up as the dominant euro-trading venue across so much of the continent.
On fees, Bitvavo runs a standard tiered maker/taker model — roughly 0.15–0.25% at low volume, dropping toward 0.03–0.04% for accounts trading above €10 million a month — but the number that actually matters for most users is zero: SEPA and iDeal deposits are free from small minimums, which quietly removes one of the more annoying hidden costs on competing platforms.
Three Incidents, None of Them a Hack
It's worth walking through Bitvavo's rougher stretch in full rather than picking the headline that sounds worst, because the three events that hit in an 18-month window were genuinely different in kind.
The DCG exposure came first, in January 2023 — not a breach, but a counterparty risk: Bitvavo had lent €280 million to a Genesis Global Capital, a DCG subsidiary, as part of a yield product for its own customers, and that money got frozen when Genesis suspended redemptions. Then, in November 2023, a failure at a third-party infrastructure provider knocked the platform offline temporarily — an availability problem, not a security one. Finally, in April 2024, Bitvavo disclosed a data breach affecting a limited group of customers, tied to unauthorized access rather than any compromise of wallets or funds.
Add them up and the pattern is this: no customer has ever lost crypto to a Bitvavo hack, which puts it ahead of plenty of exchanges with cleaner-sounding PR. But the DCG episode in particular is a useful reminder that "safe exchange" and "safe yield product" aren't automatically the same claim — the counterparty risk sat inside a product most users probably assumed just held their coins.
As our author Wes Ibarra puts it: "The exchange itself wasn't hacked — its balance sheet took a hit because it lent your deposits somewhere risky to pay you interest. That's a different kind of trust to extend, and it's worth reading the terms before you extend it."
Getting Set Up, and What Kind of User This Actually Suits
Opening an account is unremarkable by design: register with an email address, complete identity verification under standard Dutch AML/MiCA rules, and fund through SEPA or iDeal if you want to avoid fees entirely — card funding works too, at the usual small premium. From there it's a straightforward spot-trading interface, with staking available separately for users who want passive yield, ideally after checking what each specific product actually does with deposited assets.
Bitvavo isn't the exchange for someone chasing derivatives, exotic altcoins, or the deepest possible order books — for that, larger global platforms still win on raw selection. What it does well is narrower and, for a specific kind of user, more valuable: a fully MiCA-licensed, euro-native exchange with close-to-free funding rails and a track record where, whatever else went wrong along the way, customer crypto itself has stayed untouched.