"Non-custodial" is the most abused adjective in crypto. It has been stretched to cover wrapped assets, where the bridge holds collateral. It has been stretched to cover staking derivatives, where the validator controls the keys. But it takes real effort to stretch it across a platform that literally holds your funds during the swap.
ChangeNOW wears this label. Eight million customers, the company claims. Support for 110-plus chains. Coverage of 1,500-plus assets. An unbroken operating streak that runs back to 2017. By every convenience metric, it checks the boxes.
Then you read the terms. The entity you transact with is CHN Group LLC, registered in St. Vincent and the Grenadines. The country's financial intelligence unit does not supervise crypto service providers — a fact buried in ChangeNOW's own AML documentation. No named human has ever been publicly attached to the operation.
This is not a compliance gap. It is a compliance void. And the void sits exactly where the platform claims it doesn't: holding user funds.
Start with what ChangeNOW actually is: a centralized swap router. Application-layer middleware between 110-plus blockchains and users who want to move assets without learning bridges, gas mechanics, or slippage. The flow is simple. Pick source and destination. Paste a deposit address. Send funds to a platform-controlled address. The internal routing engine — a mix of proprietary liquidity pools and external market makers — executes the exchange. Output arrives on the far side.
No account registration in most cases. No order book. The pitch: DEX convenience with CEX liquidity. The real position: serving users who find centralized exchanges too invasive and on-chain tooling too complex.
Operation since 2017 places ChangeNOW in a rare survival class. The 2018 bear market didn't kill it. DeFi Summer 2020 didn't marginalize it. The collapse cascade of 2022 didn't take it down. Execution history exists.
But that's where the problems begin. Performance claims — "1–2 minute average completion, 98 percent within ±0.5 percent of estimate" — are self-reported. No independent audit exists. The company's own FAQ states a 5-to-30-minute range. One number is marketing. The other is operational reality. The gap between them is the user experience.
The fee structure compounds the opacity. ChangeNOW does not itemize costs. Spread, routing, network fees, and platform margin are folded into a single displayed exchange rate. Users see the destination amount and nothing else. Auditability is zero. Comparability is zero.
The competitive set adds pressure. Changelly occupies the same niche with similar opacity. SimpleSwap offers a lighter interface. THORChain executes native cross-chain swaps without a custody window. Uniswap and the broader DEX ecosystem provide fully auditable on-chain execution, at the cost of user complexity. ChangeNOW's differentiation is coverage — 110 chains, 1,500 assets. Coverage is a feature, not a moat. Aggregators can add chains faster than ChangeNOW can defend them.
Then there are the design choices embedded in the service. Fixed-rate quotes with built-in slippage protection. Automated risk scoring. On-demand KYC triggers. A three-day refund window for those who resist verification. Each choice reveals something about the underlying incentive structure.
The custody window is real custody. "Non-custodial" traditionally means the user holds private keys at all times. ChangeNOW's terms describe a different reality. During execution, between the user's deposit and the output arrival, the platform takes possession. Temporary custody is still custody.
The deeper issue is the on-demand KYC engine. The platform's risk screening can flag any transaction and suspend it until identity verification completes. Users who decline verification trigger a three-day refund window. After that window, recovery becomes a manual process that may involve fees.
Plain-language translation: "no account needed" hides an identity checkpoint that can activate at any moment. The user has no prior notice, no way to predict which transactions get flagged, no mechanism to appeal. The three-day window is not a protection mechanism. It's a forced decision point — submit to surveillance or enter an opaque refund process.
This is asymmetric power. ChangeNOW holds the funds. ChangeNOW interprets the compliance rules. ChangeNOW decides when recovery ends. The user's only recourse is a support channel controlled by the same anonymous operators.
I have personal experience with this class of risk. During the 2020 DeFi Summer, I deployed $5,000 across five protocols, farming the Compound airdrop. A flash crash took 30 percent of that capital. What the experience taught me was not about yield — it was about auditability. On-chain, I could inspect contracts, interest curves, liquidation parameters. The risk was visible, which made it priceable. With ChangeNOW, there is no contract. There is only a terms-of-service document that reserves rights for the operator.
Smart contracts don't custody your funds. LLCs do. The question is whether users are comfortable with the LLC's jurisdiction, its anonymity, and its unilaterally drafted terms. Most never ask, because the marketing says non-custodial.
The fee black box. ChangeNOW has three revenue streams: the spread embedded in quotes, fiat onboarding fees from third-party processors like Transak and Simplex, and recovery fees on erroneous transactions. The spread is dominant. It is also completely opaque.
Profit, routing cost, network fees — all bundled into one displayed rate. Users cannot identify the cost of liquidity versus the cost of service. They cannot compare margins against competitors. Every swap is a retail purchase in disguise. The store sets the price. The customer accepts or walks.
There's a structural possibility worth flagging: payment for order flow. If the platform routes through multiple market makers, it may extract additional income by directing orders to whichever maker pays the highest rebate. Standard practice in equities. A disclosure gray zone in crypto. The user sees one quote — perhaps the best, perhaps the most profitable for the router.
The recovery fee is the most instructive revenue line. ChangeNOW charges users for the privilege of retrieving their own funds after error. The fee exists because mistakes are frequent enough to monetize. Two implications follow: self-custody errors are common in this user base, and the platform structurally benefits from user confusion. Whether that incentive has ever been acted on is unknowable. Whether it exists is a matter of profit logic alone.
DeFi's own mechanisms are not immune to these failures. I have long argued that Aave and Compound's interest rate models are arbitrary constructs, disconnected from real supply and demand. But those models are at least visible, auditable, and subject to governance. ChangeNOW's pricing engine is none of those. It's a black box inside a jurisdiction that has no regulator to receive a complaint.
The 2017 ICO summer shaped my view on this. I spent three months manually tracking whale wallets on Etherscan, identifying 50-plus suspicious launches. Eighty percent of ICOs failed not from technical flaws but from unsustainable tokenomics. The recurring pattern: incentive structures that extract user value rather than create it. Recovery fees are that pattern in miniature.
Performance claims without verification. Speed is the advertised value. The promotional figure: 1–2 minutes average, 98 percent within range. The FAQ figure: 5–30 minutes. The reconciliation: the marketing number describes ideal conditions — quiet chains, abundant liquidity, no risk flags. Every real-world disturbance pushes the actual wait toward the FAQ end of the spectrum.
The discrepancy itself is less troubling than the absence of verification. No public dashboard. No transaction-time history. No third-party measurement. This is the same trust deficit as centralized finance — minus the regulatory oversight, audited statements, and named executives that make centralized finance at least a known quantity.
Security opacity follows the same pattern. No smart contract audit disclosures. No published penetration tests. No bug bounty program. No security infrastructure information. For a service that holds user funds, this silence is not evidence of insecurity. It is evidence of opacity. In an industry founded on the premise of verifiable code, opacity is its own failure class.
The review source also embeds a Tweet from ChangeNOW's official account, warning users to verify the domain before accessing the service. The platform itself is issuing anti-phishing alerts. That means impersonation campaigns are targeting its user base — and that the user base includes people vulnerable enough to fall for them. In institutional finance, that warning would be disclosed as an operational risk. In crypto, it's dismissed as routine noise. It's not. It's a signal about the user profile and the threat environment around it.
Paper compliance and the regulatory void. The regulatory architecture is the structural weak point. CHN Group LLC operates from St. Vincent and the Grenadines, where the local FIU does not supervise crypto companies. ChangeNOW's own AML documentation admits this. The documents exist to satisfy banking partners and payment processors — gatekeepers with real compliance duties. Not to satisfy a regulator with actual authority over the service.
Geographic access makes the pattern explicit. UK users are blocked, a likely response to the FCA's cryptoasset promotion regime. US users can proceed under special terms — not licensed provisions, not regulated pathways. Unilaterally drafted terms acknowledging that US regulatory status is unresolved.
The consequences are concrete. No deposit insurance. No licensing authority to appeal to. No mechanism for recourse against an anonymous LLC in a jurisdiction without a crypto framework. If the platform fails, users hold a claim against an entity whose principals cannot be identified and whose host regulator has no remit.
My 2022 thesis on algorithmic stablecoins examined the Terra/Luna collapse. The mathematical point was that reliance on seigniorage shares made the system unsustainable. The deeper pattern was a confidence narrative detached from enforceable rights. Terra sold a yield promise. ChangeNOW sells a non-custodial claim. In both cases, the gap between narrative and mechanism is survivable in bull markets and lethal in stress. And in my 2024 work tracking Bitcoin ETF flows for institutional clients, I watched how regulatory framing — not technology — determined capital allocation. Framing is everything. ChangeNOW's framing is its most fragile asset.
The anonymous operator. Since 2017, zero named humans. No founders in public. No leadership profiles. No disclosed investors. No office location. For a service that briefly holds user funds, the opacity is extraordinary.
The industry spectrum runs from regulated exchanges with quarterly filings to pseudonymous protocols with transparent governance. ChangeNOW sits outside both. The trust model is duration-based: "we've operated for years; ergo, we're trustworthy." That's a narrative, not evidence. The industry has watched long-running narratives collapse in months.
This is not an accusation. It is an accountability assessment. ChangeNOW might be perfectly well-run. I have no evidence to the contrary. But the absence of evidence, in the presence of fund custody, is its own kind of finding.
The structural squeeze. The market position is a corridor between two better-defended territories. Centralized exchanges hold regulatory licenses, institutional trust, and deep liquidity. Decentralized exchanges hold code, transparency, and economic alignment. ChangeNOW holds a corridor illuminated by a marketing claim that its own terms contradict.
Eight million self-reported customers sounds significant until you compare it with the user bases of major exchanges or established wallets with integrated swap functionality. The review contains no active user numbers, no volume figures, no retention metrics. The only data point is the one the company chose to share.
Wallet integrations keep the platform alive. Embedded as the backend for "one-click swap" features, ChangeNOW benefits from distribution it doesn't control. That's a genuine channel. But wallets can switch providers overnight. The relationship is a revocable convenience, not a lock-in.
This corridor position is precisely why the platform cannot survive the infrastructure transition. Corridors close when new buildings are constructed around them.
Here is the contrarian position: the most serious risk is not the custody window, the fee opacity, or the regulatory void. It's obsolescence.
ChangeNOW's entire value proposition is a bet that DeFi will remain too complicated. That's the business model. Simplified interface. Managed routing. Custody-window convenience. And the entire forward edge of crypto infrastructure — account abstraction, chain abstraction, intent-based protocols — is explicitly designed to eliminate that complexity.
When those mechanisms mature, the user declares the outcome and the network handles the route. No destination address selection. No custody window. No middleman. ChangeNOW's core demographic shrinks to the residue of users who refuse both KYC and chain-level tools. That's a declining pool.
Meanwhile, the non-custodial label becomes a liability. As awareness of the custody window spreads, the marketing claim flips from differentiator to deception. The platform that built its brand on "no custody" becomes the central exhibit in a seminar about how loosely that term gets used. Reputational risk compounds with every industry-wide security incident — not because ChangeNOW is involved, but because users grow more sophisticated about asking who holds assets at every moment.
The genuinely counterintuitive observation: ChangeNOW is not a crypto company. It's a UI company that routes tokens. The moat is user ignorance of on-chain tools. That moat drains daily.
The industry's infrastructure narrative mirrors this dynamic. Rollups market dedicated data availability layers as critical infrastructure, yet 99 percent of them generate less data than a busy website loads in a minute. Over-engineered solutions for invented problems. ChangeNOW sells the inverse: an intentionally under-engineered solution for a real problem — and charges a toll for the privilege.
Liquidity is a ghost, not a foundation. It can vanish the moment a market maker steps back or network congestion spikes. ChangeNOW's entire service is rented liquidity wrapped in an interface. That's not a moat. It's a lease.
The next cycle will test ChangeNOW on terms it doesn't control. Either regulators demand licenses, forcing genuine compliance infrastructure or exit from major jurisdictions. Or chain abstraction matures to where a manual swap router looks like a fossil. Most likely, both happen simultaneously.
Users should act accordingly. Treat the custody window as counterparty risk. Price it into every swap. Keep records. Test with small amounts. Ask the question marketing never answers: who holds my assets, for how long, and under what rules?
"Non-custodial" is a marketing term, not a technical specification. Survival is not safety. The industry is building toward a future where the middleman is optional. Smart users will not be the last ones paying the toll.
