Coinstash: membership pricing, AUD funding and custody terms

Coinstash is an Australian crypto dealing platform with more than 1,000 listed assets, an AUD balance and separate personal, business and self-managed super fund accounts. Its standard interface supports buying, selling and crypto swaps. The public offer remained available when checked on 20 October 2026. The relevant operational distinctions are the trading route, account verification level and membership reward choice.[1][20]

OTC execution becomes binding after the counterparties confirm the written trade terms. The agreement normally requires prefunding. It sets same-day settlement for execution before noon AEST and settlement by the following day for later execution, subject to technical exceptions and any agreed delayed funding. Funds committed to a completed OTC agreement cannot simply be withdrawn before settlement.[26]

Coinstash obtains prices from several liquidity providers. A displayed quote can change before execution, and the platform may restrict order size or temporarily disable a thinly traded asset. Its help page directs disputed fills to chat with the asset, size and approximate execution time. Those controls make asset availability and the final order record more useful than assuming every listed coin has equal liquidity.[32]

Automatic Purchases are configured through the website. Allocations must add to 100%, with at least A$20 per selected coin. The trigger is a bank deposit carrying the reference “stash”; ANZ users are told to use the Message field. A recurring bank payment sets the schedule, and a platform toggle turns future automatic purchases off. This is a deposit-driven instruction, so merely leaving an AUD balance does not establish a new scheduled purchase.[30]

Retail buy, sell and swap transactions carry a percentage trade fee. The standard rate is 0.60%; the displayed rate falls with membership only when Fee Discounts is selected. The fee is deducted from the transaction amount in fiat and recorded in trade history. The following table separates the qualification thresholds from the published discounted rate.[4]

The monthly review uses the previous calendar month’s buy/sell volume and daily-average AUD value of fiat and crypto holdings. An assigned level normally lasts until that month ends. A large deposit near month-end is therefore different from maintaining the same balance throughout the month.[5]

A separate spread is embedded in the quoted buy/sell prices. Coinstash says market liquidity, volatility and USD/AUD exchange-rate movements can affect it. A zero trade-fee tier consequently still has a quoted execution price with a spread. The public material does not supply one fixed spread applicable to every asset or transaction.[31]

For a hypothetical A$2,000 trade, the percentage fee is A$12 at 0.60% or A$8 at Gold’s 0.40% discounted rate. These are fee components only: the quote’s spread, market movement and any later transfer charge remain separate. A lower membership percentage does not establish a better final price across different assets or times.[4]

Choosing STASH Back keeps the standard 0.60% trade fee and awards loyalty points instead of an immediate discount. Reward percentages run from 5% of the standard fee at Starter to 100% at Nova. A changed preference applies only to future trades. Points expire after six months without eligible earning or redemption activity; merely collecting holding rewards does not reset that clock.[6]

STASH Points have no cash value, cannot be transferred between accounts and cannot be redeemed directly for cash. Available redemptions can include selected crypto, merchandise and entries to prize-based promotions, with the current points price shown in the Rewards Centre. SMSF accounts are excluded from this points ecosystem. A reward balance should therefore be read separately from withdrawable AUD or crypto.[7]

Bank funding is initiated from the customer’s bank; Coinstash does not pull money by direct debit. Its guide estimates minutes for many NPP deposits and one to two business days for standard transfers or bank-side checks. A first transfer may also face a bank security hold. PayID is described as an inbound identifier; use the saved, verified BSB/account workflow for AUD withdrawals.[9]

A new receiving bank account requires a recent statement and an onboarding review, typically one to two business days. An existing verified account is marked with a blue tick. The withdrawal guide also says its confirmation button is disabled while a VPN is detected. Delivery can be within minutes or take one to two business days depending on the bank; adding a bank and delivering funds are separate stages.[10]

The card charge is attributed to WorldPay, with possible additional charges from the issuing bank. On a hypothetical A$1,000 deposit basis, 1.37% is A$13.70 before any bank fee or subsequent trade cost. The dedicated card guide is more specific than the platform’s broad free-funding wording.[11]

All supported crypto deposit addresses changed on 25 June 2026. Existing holdings and withdrawal access were unaffected, but later transfers to an old address are not automatically credited. Retrieve the current address from the account and update any recurring external transfer. Coinstash directs a mistaken old-address deposit to support for manual recovery; the notice does not promise an automatic recovery deadline.[15]

Incoming transfers require matching networks and may be held for checks even after blockchain confirmation. If a confirmed deposit is missing, the documented investigation route uses its transaction hash. For outgoing crypto, the app’s preview shows the network charge and recipient amount, and the charge is applied only on confirmation. An advertised absence of a platform withdrawal fee should not be mistaken for a free blockchain transfer.[12][13]

Coinstash’s transfer workflow collects the destination type, recipient identity and transfer purpose before an outgoing transfer is sent on-chain. Incoming funds can require sender information before wallet credit. The information requested differs between a personal wallet, an exchange and a company or individual recipient. A transfer awaiting those checks has not necessarily reached the blockchain, so confirmation time alone cannot describe the whole withdrawal process.[14]

The agreement vests asset ownership with Coinstash and permits lending, pledging and commingling. It disclaims a trust, legal custodian status, investor compensation and insurance. If the main ledger and attempted external funding cannot cover losses, it permits proportionate allocation across customer accounts. A displayed 1:1 balance does not establish custody rights.[2]

Coinstash’s security page says assets are backed one-for-one, independent audits occur annually and financial statements are filed with ASIC. These are company disclosures; the page does not provide a complete current financial audit or a client-specific insurance certificate. Its account controls include biometric/PIN login, two-factor authentication and email checks. Such controls address access risk, while the contract determines the platform’s asset-handling rights.[16]

A separate controls article names Fireblocks and Ledger infrastructure and describes wallet whitelisting and linked trusted accounts. This identifies technology used in custody and account control; it does not identify a direct custody contract between each customer and those vendors. The dedicated Controls Report page still describes that report as under development, so an externally audited controls opinion is not treated here as delivered.[17][18]

For a stolen device, the official sequence is to change the password from another trusted device, revoke all sessions, notify support and check account activity. Authenticator troubleshooting distinguishes an email code from the rotating app code and directs unresolved cases to support. The inspected guidance did not establish a fixed withdrawal-hold duration following a reset.[24][23]

Customers must be eighteen and legally capable.[2]

Identity review can temporarily restrict AUD or crypto withdrawals; the KYC guide says access is restored after approval. Approval requires the requested identity documents and review, rather than merely creating a login.[19]

The detailed tier table supports a starting bank limit of A$20,000, despite broader A$100,000 wording elsewhere in the funding material. The customer’s Daily Limits screen is the operative account check before sending a large amount. Excess AUD deposits are described as carrying over to the next daily allowance.[8]

Company onboarding asks for an ASIC extract or ACN and verifies directors and shareholders owning at least 25%, each through their own verified account. SMSFs need their fund ABN, signed certified deed and the applicable trustee/director identities. The stated one-business-day review estimate begins after the required material is submitted; it is not approval merely from creating a login.[20][21]

The agreement allows termination with fourteen days’ written notice. Restricted assets can be converted into fiat during company-initiated closure.[2]

Website/app chat is the main documented assistance route. A trade query should identify the coin, amount and approximate time, allowing support to investigate the fill. The inspected material did not establish a general emergency telephone desk authorised to replace retail orders during an outage. OTC’s separately agreed execution channel should not be assumed to accept instructions for every ordinary platform account.[32]

Coinstash’s procedure directs dissatisfied complainants to AFCA after internal handling. That is the company’s published escalation route; the exact current AFCA membership and jurisdiction for an individual crypto complaint were not independently matched in this review.[22]

Coinstash publishes registration number DCE100575420-001. AUSTRAC’s current public system uses the VASP register and covers designated virtual-asset activities within its anti-money-laundering framework. That registration is separate from an ASIC financial-services authorisation.[3][39]

The official public register opened without readable firm records in this check. Current registration was therefore not independently matched to the operator; the company’s disclosure remains an attributed claim.[38]

Coinstash describes itself as Australian owned and based in Brisbane, with a 2017 founding by Mena Theodorou and Ting Wang. Its timeline places the OTC launch in 2022, Private Client in 2024 and a reported $4.7 million Series A in 2025. The current team description names Theodorou as chief executive and Wang as sales strategist.[37]

The company reports more than 50,000 Australian users, reached in 2025. This is a platform-level company claim, not independently measured active trading accounts. Its homepage also reports more than $2 billion traded without defining the currency or measurement period in that display; the figure is not used here as a comparable global volume ranking.[37][16]

Operator

TWMT PTY LTD trading as Coinstash AU

Exchange model

Centralised

Service scope

Australian retail crypto dealing, DeFi access, scheduled purchases and an OTC desk for trades from A$20,000.

Client types

Retail clients; Professional clients; Institutional clients

Pricing publication

Public and quoted pricing

Headquarters

Brisbane, Australia

Covered jurisdictions

Australia

Pricing scope

Retail trading fee plus quoted spread; OTC terms are agreed before execution.

Funding scope

AUD bank deposits/withdrawals, card deposits and supported crypto transfers; verification limits and transfer checks apply.

Custody and asset handling

Platform-held assets; ownership vests with Coinstash, which disclaims legal custodian status and permits proportionate customer loss allocation.

Client eligibility

Identity-verified customers; Australian bank and mobile onboarding, with separate company and SMSF verification. No complete foreign-residency matrix established.

Support

Website/app chat and email support; formal complaints usually acknowledged within one business day, with a 30-day response target.

Authorisation and registration scope

Company discloses AUSTRAC DCE100575420-001. The public VASP register returned no readable entity entry in this review; no independently matched current permission is asserted.

Exchange metadata checked 20 Oct 2026Source 1Source 2Source 3Source 4Source 11Source 19Source 21Source 22Source 25Source 26Source 36Source 37Source 38

Desktop Settings provides transaction-history CSVs, holdings and cash statements, trade-level exports and an end-of-financial-year report. These are account records for reconciliation or an accountant’s work; the page does not establish that downloading a file submits a tax return. Report access after account closure was not established, making an export before closing a practical part of winding down the account.[33]

Adviser Access is described as view-only. The client revokes it in Settings; the adviser cannot currently remove themselves through their own portal. Revocation immediately removes portfolio/report access, including the BGL integration. This is a reporting permission, so disconnecting an accountant is not an instruction to sell holdings or stop a trading strategy.[34]

The agreement prohibits automated platform use. Its conflict with the API guide remains unresolved; confirm authorization before connecting automated trading.[2][35]

The July API guide describes separate read and trading permissions, a secret shown once, and per-key revocation. A missing secret requires deleting the key and issuing another. It does not document a withdrawal permission, rate-limit schedule or what happens to pre-existing orders when a key is revoked. A third-party integration should therefore be assessed against the actual selected permissions, rather than its marketing description.[35]