
The ruling said Coinbase failed to show the user authorized the transfers or that adequate wallet safeguards existed, while broader fraud issues add to scrutiny around the exchange’s security practices.
A São Paulo State Court ordered Coinbase to return nearly $100K to a user after funds deposited into a Coinbase Wallet disappeared in unauthorized transactions. Applying Brazil’s Consumer Protection Code, the court found Coinbase did not prove that the wallet holder initiated the transfers and also failed to demonstrate that basic security measures such as blocking tools and two-factor authentication were in place. The judge criticized the company for submitting technical records without explaining them in terms the court could readily assess, and ordered repayment of roughly 507,000 reais along with legal charges and court costs equal to 10% of the claim. Raphael Souza, a lawyer focused on digital law, said the ruling could influence how Brazilian courts assess liability for self-custody wallet products, as the country moves toward stronger consumer protection standards for crypto platforms. The case also lands as Coinbase faces wider security-related scrutiny, including scams tied to impostors posing as Coinbase support, criminal charges in Brooklyn over thefts from Coinbase users, and fallout from a 2025 breach involving leaked customer data.