Crypto.com Upgrades PCI DSS to v4.0: Why Is This Important?

As a seasoned crypto investor with over a decade of experience navigating the digital asset landscape, I can confidently say that Crypto.com’s recent achievement of the PCI DSS v4.0 certification is nothing short of impressive. Having witnessed numerous hacks and security breaches in this sector, it’s heartening to see a platform like Crypto.com prioritizing security and data privacy as much as they do.


Crypto.com, a leading global cryptocurrency exchange platform, has advanced its current PCI DSS (Payment Card Industry Data Security Standard) compliance from version 3.2.1 to the most recent v4.0 certification. This upgrade is implemented well in advance of the industry standard, thereby establishing a new benchmark for the entire sector.

Crypto.com achieves PCI DSS v4.0 certification: Details

As a diligent analyst, I am excited to announce that I have been instrumental in upgrading our platform’s security system at Crypto.com, one of the leading crypto exchanges, to the Payment Card Industry Data Security Standard (PCI DSS) version 4.0. This upgrade positions us at the forefront of security measures for services within this sector, utilizing the most recent and sophisticated security protocols available.

We have successfully obtained the PCI DSS v4.0 certification, marking an important milestone in our commitment to providing secure and reliable services for our clients. We take great pride in being among the early adopters of this standard within the cryptocurrency industry.

— Crypto.com (@cryptocom) October 3, 2024

According to Jason Lau, the Chief Information Security Officer at Crypto.com, it’s crucial that all users of their service pay attention to this update.

Obtaining PCI DSS v4.0 certification underscores Crypto.com’s unyielding dedication to upholding robust security and data privacy principles. We are tenacious in our efforts to maintain top-tier security measures, thereby allowing our customers to rely on our products with utmost confidence. This commitment ensures that we have the necessary technology and safety mechanisms in place to meet the demands of today’s digital landscape.

The progression of PCI DSS version 4.0 is fueled by the desire to constantly improve standards for handling the ever-changing security needs within the payment sector. This includes a strong focus on ongoing security practices, improving verification techniques, and incorporating more flexibility and adaptability to ensure effective security implementation.

Therefore, activating this update will once more emphasize Crypto.com’s dedication to reinforcing strong security procedures and preserving high data protection norms.

Crypto.com reaches milestone before industry deadline

The latest version, PCI DSS v4.0, continues to uphold the fundamental 12 security standards but also incorporates emerging threats by introducing several innovative technologies within its system.

Even though the deadline for PCI DSS v4.0 certification in the industry isn’t until March 2025, Crypto.com has chosen to be forward-thinking and aims to be among the initial companies within the cryptocurrency field to meet this standard ahead of schedule.

As a proud crypto investor, I can confidently say that Crypto.com’s recent attainment of the PCI DSS v4.0 certification solidifies their standing as a top-tier virtual asset service provider. This achievement underscores their unwavering dedication to adhering to the stringent regulatory standards of the traditional financial sector, which instills trust and confidence in us investors, knowing that our investments are being handled by a reliable and responsible platform.

Earlier, Crypto.com attained various certifications from different platforms, such as SOC2 Type 2, ISO 27017, and ISO 27018, which are related to ensuring the security and privacy of cloud services.

Read More

2024-10-03 17:41