Is Gemini safe to connect?
Exchange ยท Multi-asset centralized exchange (US-regulated trust company). Checked 2026-10-24; every line links its source.
Worst case: Gemini holds your coins and can freeze them pending an AML or source-of-funds determination with no fixed end date; a leaked Fund-management key can withdraw to your approved addresses only, but a leaked Trading key can still place bad trades.
Safe setup in 3 steps
- Give bots Trading or Auditor keys only; never a Fund-management key
- Set every key to 'Trusted IPs only' with your server's address
- For ZEC, withdraw to a unified (shielded) address in your own wallet rather than holding it on the exchange
Gemini also has a full listing with an Agent Risk Score Agent risk 70% (partial, 6 of 7 inputs): Gemini on TradingAgentStack.
What it can do with your money
| Who holds the keys | The exchange holds your funds Custodial exchange account. source |
|---|---|
| Can funds be sent out to any address? | Yes. Crypto withdrawals available; may be delayed for regulatory or administrative reasons. UK/EU/EEA customers cannot start outbound crypto transfers via API. source |
| Can it hold or freeze your funds? | Gemini Trust User Agreement: Gemini may immediately suspend accounts and 'freeze or lock' funds 'until a determination has been made' on suspected violations of the agreement, law, its BSA/AML Program or conduct rules, court/regulator orders, unusual activity, etc.; may require additional information or a background check at any time; for source-of-funds issues it may dispose of funds it decides you don't own (e.g. return to origin). Conduct-rule notices give 7 calendar days to respond; on termination you may be asked for a wallet address within 7 calendar days or assets may be sold. ACH deposits can block withdrawals ~4-5 business days. source |
| What a leaked API key can do | Roles: Auditor (read-only), Trading (orders, no withdrawals) and Fund management (withdrawals to approved addresses). Keys can be set to 'Trusted IPs only' (recommended). Keys unused for 180 days expire. UK/EU/EEA customers cannot initiate outbound crypto transfers via API. source |
| Monero and Zcash | XMR: not listed (no XMR symbol in Gemini public API on 2026-10-24) ZEC: trade+deposit+withdraw (zecusd 'open' in Gemini public API on 2026-10-24); deposits go to a transparent address Shielded ZEC withdrawals: yes source |
Official links
- Website:
gemini.com - X:
@Gemini - X:
@GeminiSupport
Where we confirmed these
Deadlines
- 2027-07-10: EU AMLR (Regulation (EU) 2024/1624, Art. 79(1)) applies: crypto-asset service providers may not keep accounts that allow anonymisation or obfuscation of transactions, including through anonymity-enhancing coins (e.g. XMR, ZEC). Relevant if you use an EU/EEA-licensed entity of this service. source
Incidents
| Date | What happened | Amount | Outcome | Source |
|---|---|---|---|---|
| 2024-02-28 | NYDFS settlement over Gemini Earn (frozen since the 2022 Genesis collapse): Gemini to return >$1.1B to Earn users and pay a $37M fine | >$1.1B returned | refunded (Earn users repaid via the Genesis bankruptcy settlement) | source |