BITSO EXCHANGE

Investigation Report

Documented Problems, User Complaints, Corporate Controversies and Regulatory Concerns

Subject
Nvio Pagos México S.A.P.I. de C.V.
CEO
Daniel Vogel (Co-founder & Global CEO)
Mexico Director
Felipe Vallejo Dabdoub
Founded
2014, Mexico City
Valuation
$2.2 billion (Series C, 2021)
Report Date
July 6, 2026

This report compiles publicly available information from news outlets, regulatory filings, user review platforms, and investigative journalism. No criminal charges or regulatory fines have been confirmed against Bitso or its executives as of the publication date. This is a research compilation, not a legal accusation.

Executive Summary

Bitso, Latin America's largest cryptocurrency exchange with over 12 million users, has faced growing scrutiny across multiple dimensions. While the company maintains regulatory licenses in four jurisdictions and has never suffered a confirmed hack, a pattern of user complaints, corporate governance concerns, and investigative journalism raises questions about its operational practices.

Key Findings

  • No confirmed regulatory fines or sanctions from CNBV, GFSC, or any other regulator
  • Persistent user complaints about frozen accounts and withdrawal blocks (Trustpilot: 2.0/5)
  • Investigative journalism in Mexico (Nov. 2025) by El Heraldo, Eje Central, and FintechExpert
  • Structural conflict of interest — Mexico director chairs the fintech trade association
  • 180 layoffs in 2022 with evasive corporate statements
  • Limited Proof of Solvency covering only BTC and ETH; no full third-party audit of all assets
critical

Issue #1: Systematic Fund Retention

Multiple Mexican media outlets and a prominent journalist raised alerts about Bitso retaining user funds without adequate explanation, citing "security protocols" as justification without providing case numbers, timelines, or formal dispute resolution paths.

Bitso's recent practices [...] raise serious concern: they hold your money without a clear explanation and justify the delay with alleged 'security issues.' You are supposed to be able to move your funds whenever you want, and that is not the case.

Journalist Enrique Galván Ochoa (El Heraldo de México, Nov. 13, 2025)

There are reports of blocked withdrawals without concrete justification, mentions of alleged court orders without case numbers, frozen accounts without verifiable information, and prolonged delays without a formal resolution path.

Eje Central (Opinion column, Nov. 2025)
  1. User deposits funds (fiat or crypto)
  2. Account is frozen or withdrawal is disabled
  3. User contacts support — receives generic "security protocol" response
  4. No case number, timeline, or escalation path is provided
  5. Resolution (if any) occurs only after public exposure on social media or complaint platforms
  6. Some users report being asked to pay additional fees to recover funds
critical

Issue #2: Conflict of Interest — Trade Association Leadership

Felipe Vallejo Dabdoub simultaneously serves as Bitso Mexico Director/CRO and President of Fintech Mexico Association. Mexico's most criticized fintech is led by the same person who represents the industry before regulators.

  • Bitso's Mexico director sets industry standards that his own company must comply with
  • Represents the sector before CNBV and Banco de México — the very regulators that should investigate user complaints against Bitso
  • The trade association has no public mechanism to address conflicts when its president is the subject of user complaints
medium

Issue #3: Jurisdictional Arbitrage and Opacity

Bitso's split jurisdiction model channels peso operations through Nvio Pagos (Mexico/CNBV) while crypto custody is handled via Bitso International (Gibraltar/GFSC). When funds are frozen, users cannot determine which entity is responsible.

  • Claims regulatory compliance in Mexico (through Nvio's IFPE license)
  • Keeps crypto-asset custody offshore under Gibraltar's less stringent regime
  • Shifts responsibility between entities when users complain
  • Avoids full Mexican banking regulation by using the "electronic payments" license category
medium

Issue #4: Lax KYC and AML Concerns

Bitso simultaneously freezes legitimate user accounts citing "security" while maintaining one of the laxest KYC policies among regulated exchanges. KYC is not mandatory for basic operations, unverified users can trade with reduced limits, and verification requires only "basic information, no document upload."

  • Lax onboarding combined with aggressive account freezing suggests a reactive rather than preventive compliance model
  • Reuters (Dec. 2020) documented LATAM cartels increasingly using crypto to launder money — Bitso operates in this high-risk environment
  • Mexico's Fintech Law (2018) was specifically designed to address these risks
medium

Issue #5: Layoffs and Corporate Governance

Bitso grew to 700+ employees during the bull market, then cut 180 positions (25%) within 6 months (May–Nov. 2022). Official statements used evasive language with no admission of market miscalculation or accountability.

MetricScoreNote
CEO Rating (Daniel Vogel)76/100Above average
Manager Rating67/100Below average
Executive Team Rating58/100Bottom 45%
Overall LeadershipGrade CBelow industry norm
high

Issue #6: Fee Opacity and Abusive Practices

Users report extreme discrepancies between published fees and actual costs charged.

$68 to move $120 in BTC (56% fee)

Trustpilot User

They charge you 50% of your balance if you try to transfer

Trustpilot User

I deposited 3000 pesos [...] they asked me to pay 50 USDC (~1000 MXN) fee to recover

App Store User
high

Issue #7: Proof of Solvency Limitations

While Bitso implemented Zero-Knowledge Proof of Solvency (with Proven), it covers only BTC and ETH — not the 55+ listed assets, no fiat deposits (MXN, BRL, ARS, COP), no full independent third-party audit, no insurance on deposits.

11% covered (BTC + ETH)
89% not covered

Estimated coverage based on 2 of 55+ assets

info

Daniel Vogel — CEO Profile and Criticism

Stanford (BS CS + BA Econ), Harvard MBA. Built Quantcast's Real-Time Bidding system. Left Silicon Valley to return to Mexico to build Bitso.

  • Overhiring and mass layoffs: Grew to 700+ employees during bull market, cut 25% in 6 months
  • Admitted Bitso operated with "limited internal transparency" in early days
  • Executive team weakness: Comparably 58/100 rating suggests systemic leadership issues
  • No public response to the November 2025 fund retention crisis despite multiple media reports
  • Deep integration with Ripple (XRP) which faced SEC enforcement creates concentration risk
info

Regulatory Status and What Is Missing

Bitso holds active licenses in Gibraltar (GFSC, DLT Provider FSC1348B), Mexico (CNBV, IFPE via Nvio Pagos P022/2020), Argentina (CNV), and Brazil (local registration).

What Has NOT Happened (as of July 2026)

  • No CNBV sanctions found in public records against Nvio Pagos México
  • No OFAC violations — Bitso has not appeared on any OFAC enforcement list
  • No criminal charges against Daniel Vogel or any Bitso executive
  • No confirmed hack or security breach in over 10 years
  • No proven misuse of funds (unlike FTX's fund commingling)

What SHOULD Exist But Does Not

  • No public CONDUSEF complaint resolution tracker for Bitso
  • No mandatory full audit of all assets (only BTC + ETH covered by zk-proof)
  • No insurance on fiat or crypto deposits
  • No public response protocol for fund retention complaints
  • Mexico's IFPE license does not require the same capital reserves as a bank

Comparative Context

ExchangeHacked?Fines?Full PoR?Insurance?Trustpilot
BitsoNoNoPartialNo2.0/5
BinanceNoYes ($4.3B)YesYes (SAFU)1.5/5
CoinbaseNoYes ($100M)YesYes (FDIC fiat)1.4/5
KrakenNoYes ($30M)YesNo1.6/5
FTXYes*N/ANoNoDefunct

*FTX's collapse was due to fraud, not hacking. Low Trustpilot ratings are common among crypto exchanges.

Conclusions

HIGH CONCERN: Systematic pattern of fund retention without due process or transparency
HIGH CONCERN: Structural conflict of interest in Mexican fintech governance
MEDIUM CONCERN: Jurisdictional split creates accountability gaps for affected users
MEDIUM CONCERN: Partial proof of solvency (BTC/ETH only) leaves most assets unverified
CONTEXT: No criminal activity has been proven; the company maintains its licenses and operates normally
CONTEXT: User complaint patterns are common in the crypto industry (not exclusive to Bitso)