Bybit Card:
up to 10% cashback from the exchange that lost $1.5 billion.
We tore apart Bybit's tiered Mastercard across seven weighted categories; from the largest exchange hack in crypto history to whether the recovery afterward actually earns back the trust it cost; and landed on a score the marketing page won't show you.
Our take, up front: we need to address the elephant in the room before anything else. On February 21, 2025, North Korea's Lazarus Group stole roughly $1.5 billion in ETH from a Bybit cold wallet, the largest single theft in crypto history. What happened next is genuinely rare: Bybit didn't freeze withdrawals, disclosed the attack within hours, and fully restored every affected user's funds within about 72 hours using treasury reserves and bridge financing. Nobody lost a dollar. That's either the best crisis response the industry has ever seen, or the clearest argument yet against trusting any single company with this much of your money, and honestly, it's probably both. The card itself is a real, tiered, custodial Mastercard built on top of that same exchange, with genuinely strong cashback and a real yield-while-spendable feature. We weighted all of it below, hack included.
Card balances and cashback sit in your Bybit Funding Account; fully custodial. On February 21, 2025, attackers compromised a Safe{Wallet} developer machine to disguise a malicious transaction, tricking Bybit's own signers into approving what looked like a routine cold-to-warm wallet transfer. Forensic review found the vulnerability was in third-party tooling around the transaction, not in Safe's smart contracts themselves. Roughly $1.5 billion in ETH was drained across 39 addresses before Bybit could react.
Pros
- Withdrawals stayed open throughout the crisis; Bybit never froze user access, unlike many exchanges facing a comparable shock
- All affected user funds were fully restored within roughly 72 hours from treasury reserves and bridge financing
- Post-incident Hacken proof-of-reserves audit confirmed 100%+ collateralization; zero customers ultimately lost money
Cons
- The largest single cryptocurrency theft in history, roughly $1.5 billion, occurred on this exchange's watch
- The compromise exploited the same class of multisig tooling (Safe) that underlies several non-custodial cards in this series, a real reminder that operational security around a wallet matters as much as the wallet's contracts
- Attributed to North Korea's Lazarus Group, a sophisticated, well-resourced, repeat state-level threat actor targeting this exact industry
Cashback runs from 2% at the base tier up to 10% at the top (Tier 6/Infinite), paid in USDT within a few days of the transaction. Reaching the higher tiers requires $25,000 in cumulative spend, and cashback caps at $600/month regardless of tier. Tier 2+ (unlocked at $500/month spend or VIP1 status) adds a genuinely distinctive perk: 100% cashback on eligible subscriptions like Netflix, Spotify, ChatGPT Plus, and Amazon Prime, which can add up to real annual value if you're already paying for those services.
Pros
- 100% subscription rebates at Tier 2+ is a genuinely distinctive, real-value perk few competitors match
- Top tier reachable through cumulative spend, not a large static balance or token stake
- Rewards credit within days, not a full monthly cycle
Cons
- $600/month cashback cap limits upside even at the top tier
- $25,000 cumulative spend to reach higher tiers is a steep bar for casual users
- Not all spending categories qualify for cashback; some purchases earn nothing
No annual fee; the virtual card is free and the physical card costs a one-time $5. Sources disagree on the exact FX and conversion cost: the EEA program is documented at 0.5% FX plus 0.9% crypto conversion, while another source cites 0.9% conversion plus a 1% FX markup, likely describing a different regional program. Either way, expect roughly 1.4% to 1.9% in combined fees on international, crypto-funded spend. The first $100/month in ATM withdrawals is free, then 2%.
Pros
- No annual fee; physical card is a low one-time $5
- EEA program discloses FX and conversion fees as separate, named line items rather than a hidden spread
- $100/month in free ATM withdrawals before fees apply
Cons
- Combined FX and conversion fees run roughly 1.4% to 1.9% on international crypto-funded spend
- Sources cite different specific fee percentages depending on region; confirm your program's exact rate before relying on any published figure
- Inactivity fees may apply per some sources, though the exact threshold isn't clearly published
This is genuinely the most fragmented availability picture in this series: separate regional card programs run through Moorwand Ltd (UK), Harmoniie SAS (EEA), and a distinct AIFC program covering parts of Asia, the Middle East, and South America, alongside separate Australia and Latin America listings. Worse, our sources actively disagree on core EU access: several describe the EEA as a primary supported market, while one explicitly warns "do not apply if you're in the EU." The US, UK-for-some-programs, Canada, Singapore, and France are excluded across various sources. Full KYC is mandatory throughout.
Pros
- Genuine multi-continent reach across EEA, Switzerland, Australia, Latin America, and the AIFC program
- No credit check required; funded from your own exchange balance
Cons
- Our sources actively disagree on whether EU/EEA residents are currently eligible at all; confirm directly before assuming access
- Fragmented into at least three separate regional programs with different issuers, fees, and terms
- US, Canada, Singapore, and France are excluded across the sources we reviewed
The standout feature here is auto-savings: idle funds in your Bybit account can earn up to 8% APY through Bybit Earn while remaining fully available for card spending at any moment. That's a genuine "yield without giving up liquidity" mechanic, second in this series only to ether.fi's own collateral-yield model. Spend logic is fiat-first, only auto-converting crypto when your fiat balance runs short, using Bybit's One-Click Sell mechanism for instant conversion.
Pros
- Idle balances can earn up to 8% APY while remaining fully available for card spending
- Fiat-first spend logic minimizes unnecessary crypto conversion events
- Broader Bybit ecosystem (P2P, OTC desk, tokenized equities) adds real depth beyond just the card
Cons
- Fully custodial; the yield and your spending balance both sit on Bybit's platform, not in your own wallet
- Bybit's own NFT marketplace was shut down in April 2025, a reminder that product lines here can be discontinued
- 8% APY is a variable rate, not guaranteed, and can change with market conditions
Bybit's unified trading dashboard is widely described as one of the more intuitive, feature-rich interfaces in crypto, and that extends to card management: 2FA, PIN protection, and instant freeze/unfreeze from the app. Physical card delivery within the EU has been independently clocked at around 72 hours, genuinely fast. The card runs on Mastercard's network with EMV 3D Secure and Mastercard's zero-liability policy for unauthorized transactions.
Pros
- Widely regarded as one of the more polished, feature-rich trading and account interfaces in crypto
- Instant card freeze/unfreeze and full 2FA/PIN protection
- Fast physical card delivery, around 72 hours in the EU per independent testing
Cons
- No independently cited app-store rating specific to the card product itself
- Managing card, exchange, and Earn features in one dense app adds real complexity for casual users
Bybit sits around 3.2 out of 5 on Trustpilot, with more than 40% one-star reviews, a real, meaningfully poor signal even if it's better than the worst performer in this series. Multiple independent reviewers document cards being permanently blocked for unspecified "compliance reasons" with no clear path to reactivation, a distinctly severe complaint pattern; this isn't slow support, it's total loss of card access with no recourse described.
Pros
- Hack crisis response set a genuine industry benchmark for transparency and speed
- Card physical delivery and basic account operations are independently reported as fast and functional
Cons
- Roughly 3.2/5 on Trustpilot with more than 40% one-star reviews
- Multiple documented reports of cards permanently blocked for unspecified compliance reasons with no reactivation path
- Support response times reported to lag further during periods of peak market volatility, precisely when users need it most
Confirm your region's program before applying.
Bybit Card runs as separate regional programs with different issuers and terms; what's true for the EEA program may not apply to the AIFC or Australia programs. Confirm your specific country's eligibility and fee schedule directly before applying, given how much these details vary by region.
Good rewards, real yield, and a $1.5 billion asterisk.
The card mechanics here are genuinely solid: tiered cashback that scales with real spend rather than a whale-only balance, a rare yield-while-spendable auto-savings feature, and one of the more polished apps in this series. None of that changes the fact that this exchange suffered the largest theft in crypto history, and while the recovery was about as good as a recovery can be, "we lost $1.5 billion and made everyone whole" is a different trust proposition than "we've never had a comparable incident." Combine that with a genuinely confusing regional program structure and a real, documented pattern of cards getting permanently blocked, and this lands as a card for people who've made peace with concentrated exchange risk in exchange for real rewards, not a low-anxiety pick.
The scorecard above is deliberately general. Whether the Bybit Card is right for you depends heavily on which of these you already are.
The existing active Bybit trader
You already trade on Bybit and have made peace with exchange-level risk. The card is a natural, low-friction extension of a balance and a platform you're already using daily.
The subscription-heavy spender who can hit Tier 2
If $500/month in spend is realistic for you, the 100% cashback on Netflix, Spotify, ChatGPT, and Amazon Prime can genuinely offset a meaningful chunk of your monthly bills.
The saver who wants yield without losing spendability
The auto-savings feature (up to 8% APY while remaining spendable) is a real, working perk if you'd otherwise let a Bybit balance sit idle between purchases.
Anyone prioritizing a clean security history or simple availability
If the $1.5 billion 2025 hack is a dealbreaker regardless of the recovery, or if you want one clear, unambiguous answer about whether your country is supported, this isn't the card to start with.
The scorecard covers the headline judgment calls. These four tables cover the specifics we didn't want to bury in prose; the cashback tiers, the fragmented regional program structure, the fee picture, and how this card compares against every other card we've reviewed in this series.
Cashback tiers
| Tier | Requirement | Cashback rate |
|---|---|---|
| Tier 1 (Base) | None; default tier | 2% |
| Tier 2 | $500/month spend or VIP 1 | Higher rate + 100% subscription rebates unlocked |
| Tiers 3-5 | Progressively higher cumulative spend or VIP status | Scales upward toward the top rate |
| Tier 6 (Infinite) | $25,000 cumulative spend | Up to 10% |
Regardless of tier, cashback caps at $600/month. Tier 2+ additionally unlocks 100% cashback on eligible subscriptions like Netflix, Spotify, ChatGPT Plus, and Amazon Prime, credited back in USDT.
Regional card programs
| Region | Issuer | Notes |
|---|---|---|
| EEA | Harmoniie SAS | Sources disagree on whether EU residents can currently apply; confirm directly |
| UK / Switzerland | Moorwand Ltd | Separate terms and issuer from the EEA program |
| AIFC program | Varies | Covers parts of Asia, the Middle East, and South America |
| Australia / Latin America | Varies | Listed as separate regional programs with their own terms |
| Excluded | N/A | US, Canada, Singapore, and France are excluded across the sources we reviewed |
This is the most fragmented regional structure of any card in this series. Terms, fees, and even basic eligibility can differ meaningfully between programs sharing the same brand; don't assume one region's terms apply to another.
Fee schedule
| Fee | Amount |
|---|---|
| Annual fee | $0 |
| Virtual card | Free |
| Physical card | $5 one-time |
| FX fee (EEA program) | 0.5%, on top of Mastercard's rate |
| Crypto conversion fee | 0.9%; one source cites a 1% FX markup on top instead, depending on region |
| ATM withdrawal | First $100/month free, then 2% |
Combined FX and conversion costs on international, crypto-funded spend run roughly 1.4% to 1.9% depending on which source's figures apply to your region.
How it compares to the other cards we've reviewed
| Card | Card type | Custody model | Major security event | Region |
|---|---|---|---|---|
| Bybit Card | Custodial, tiered | Custodial exchange balance | $1.5B hack (Feb 2025); fully restored | EEA, CH, AU, LatAm, AIFC |
| Gnosis Pay | Self-custodial debit | On-chain verifiable Safe wallet | None significant disclosed | EEA, UK, Argentina, Brazil |
| ether.fi Cash | Debit against collateral | Non-custodial Safe vault | None significant disclosed | ~20 US states, UK, EEA, HK, UAE |
| Uphold Essential | Multi-asset debit | Custodial exchange balance | NY AG settlement (2026, historical CredEarn) | US & UK only |
| Coinbase One Card | Revolving credit | Custodial exchange wallet | 2025 data breach (~$400M est. cost) | US only |
| Gemini Credit Card | Revolving credit | Custodial exchange wallet | Gemini Earn collapse (2022, resolved 2024) | US only |
| Crypto.com Visa | Prepaid | Custodial; CRO staking drives tiers | None significant disclosed | 90+ countries (US excl. NY) |
| Venmo Credit Card | Revolving credit | Custodial; crypto is optional | None significant disclosed | US only |
Bybit's 2025 incident is, by dollar value, the largest security event tied to any company in this entire series, several times larger than the others combined. Its resolution was also, by most independent accounts, the cleanest of any comparable incident here; both facts are true at once, and neither cancels the other out.
We don't just want to hand you our number; we want to show you how it sits next to what other review desks, app-store users, and comparison sites have published. Where we could find a real cited figure, we used it; everything else is a clearly-flagged editorial estimate based on that outlet's published sentiment.
Our score lands modestly below the aggregated industry average; most outlets focus heavily on the cashback structure and the genuinely impressive crisis response, giving the underlying scale of the 2025 hack less weight in their final number than we do. We think a $1.5 billion loss, however well it was ultimately resolved, deserves to move the needle more than a footnote.
| Source | Score | Type |
|---|
Scores compiled by our editorial team from publicly available reviews as of August 2026. "Editorial estimate" means the outlet didn't publish a single numeric score, so we converted their published verdict and sentiment into a comparable 100-point figure. Verify current figures directly with each source before citing them elsewhere.
On February 21, 2025, attackers compromised a Safe{Wallet} developer machine to disguise a malicious transaction during a routine cold-to-warm wallet transfer, tricking Bybit's signers into approving it. Roughly $1.5 billion in ETH was drained, the largest single theft in crypto history, attributed to North Korea's Lazarus Group.
No. Bybit kept withdrawals open throughout the crisis and fully restored all affected funds within roughly 72 hours using treasury reserves and bridge financing. A subsequent Hacken proof-of-reserves audit confirmed 100%+ collateralization. By the numbers, no customer ultimately lost money.
Not directly. Forensic review found the vulnerability was in a compromised developer machine and surrounding tooling, not in Safe's actual smart contracts or public frontend source code. It's still a useful reminder that the operational security around a wallet matters as much as the wallet's underlying code.
Genuinely unclear from published sources; several describe the EEA as a core supported market, while at least one explicitly advises against applying from the EU. Confirm directly with Bybit's current regional eligibility page before assuming either way.
It requires $25,000 in cumulative spend to reach, and even then caps at $600 in monthly cashback. It's reachable through genuine spending rather than a static whale-sized balance, which is fairer than some competitors, but it's still a real commitment, not a starting rate.
Idle funds in your Bybit account can earn up to 8% APY through Bybit Earn while remaining fully available for card spending at any time. It's a genuine yield-while-spendable mechanic, not marketing language, though the rate is variable and not guaranteed.
Multiple independent reviews document cards being blocked for unspecified "compliance reasons" with no clear reactivation path. This is a real, documented pattern rather than an isolated complaint, and it's a meaningful factor in why Support scores lowest of the seven categories here.
No. Bybit does not offer services or products in the United States at all, card included. This is consistent across every source we checked.
More Reviews
Coinbase Card – Crypto Card Review
Coinbase Card review: 59/100. Frictionless for existing users, but Coinbase won't publish a fixed cashback rate anywhere. Details inside.
Read More
Ether.fi – Crypto Cash Card Review
ether.fi Cash Card review: 76/100. Strong borrow-to-spend model and real yield, but regulatory gaps limit it to ~20 US states. Full breakdown inside.
Read More
1inch Card – Crypto Card Review
1inch Card review: 50/100. Real DEX-aggregator ties, but it's custodial despite the name, and the wrong cashback pick can lose you money.
Read More
Crypto.com – Crypto Card Review
Crypto.com Visa Card review: 60/100. Broad card tiers and merchant perks, but CRO staking lock-ups and a 1.3/5 Trustpilot score hold it back.
Read More