bitrefill

What is Bitrefill

Bitrefill is a Stockholm, Sweden-based crypto-commerce platform founded in 2014 that converts cryptocurrency into real-world utility. As of 2026-05-30, its core catalog spans gift cards from thousands of brands, prepaid mobile refills across 600+ operators, eSIMs for borderless connectivity, and-selectively in Europe-a prepaid debit card product. The service operates in 186 countries and emphasizes fast digital delivery via email.

How no-KYC is it?

Bitrefill occupies a nuanced position on the KYC spectrum. Standard gift-card and mobile-refill purchases below certain thresholds generally require only an email address, making it effectively no-KYC for casual privacy-conscious users. However, the platform implements tiered verification: higher-value transactions, the Bitrefill Card, and certain regional offerings trigger identity collection. Multiple third-party sources describe this as "KYC-free" functionality for basic usage, while the platform's own architecture supports escalating verification demands. Users seeking pure anonymity should stay within low-value gift-card purchases and avoid the card product entirely. The older "Shotgun KYC" classification from kycnot.me appears partially accurate-verification is conditional rather than universal.

Privacy & security

Privacy protections on Bitrefill are functional but not maximalist. The platform supports Tor and .onion access, offers 2FA, and processes payments without persistent wallet linking for standard orders. However, the March 1, 2026 cyberattack fundamentally altered the risk calculus. Bitrefill disclosed that 18,500 customer records were exposed in a breach attributed to North Korean state-sponsored actors. The incident involved stolen funds, malware deployment, and reused IP/email address compromises per Bitrefill's own incident report. While the platform has since implemented "urgent security upgrades," the breach demonstrates centralized data accumulation risks even for services marketing privacy. Users should treat email addresses and transaction histories as potentially retrievable by sophisticated adversaries.

Payments, fees & limits

Bitrefill supports Bitcoin (on-chain and Lightning Network), Ethereum, USDC, USDT, Litecoin, Dogecoin, Solana, Dash, and Binance Pay. Fees range from 0% to 3% depending on cryptocurrency and purchase amount. The Lightning Network integration enables near-instant, low-cost Bitcoin transactions particularly suited for smaller gift-card purchases. The Bitrefill Card-available in select European countries including Austria, Belgium, France, Germany, Italy, Netherlands, and Spain-operates on the VISA circuit with Bitcoin cashback rewards. No refunds are offered except in specific cases. The "Bitrefill Balance" feature was rebranded to "Store Credit" in a recent update.

User experience & support

The platform offers web and Android app access with a catalog exceeding 10,000 gift cards according to some sources, though older references cite 3,500-5,000 brands. Delivery is digital and typically instant post-confirmation. Trustpilot hosts 2,752 reviews with mixed signals; ComplaintsBoard aggregates a 3.4/5 reputation score from 13 reviews. Common complaints center on regional card availability limitations and fee opacity for the card product. The Reddit community r/Bitrefill remains active with 4,000+ gift card references. Post-breach, the service status page indicates restored operations.

Who it's for

Bitrefill suits privacy-conscious crypto holders needing everyday utility-Amazon, Netflix, Uber, mobile top-ups-without full KYC for modest transactions. It fits travelers seeking eSIMs, unbanked users converting mined or earned crypto to spendable value, and those in regions with limited banking access. The Lightning-native experience appeals to Bitcoin-first users. However, the March 2026 breach makes it unsuitable for threat models requiring absolute data minimization, and the card product's regional restrictions and verification requirements limit its audience. Alternatives like CoinsBee or direct P2P gift-card markets may better serve pure anonymity requirements.

Verdict

Bitrefill remains operational and broadly useful for crypto-to-gift-card conversion as of 2026-05-30, but the March 2026 breach materially damaged its privacy credibility. For low-value, email-only gift-card purchases with Lightning, it functions as a practical no-KYC tool. Users requiring higher limits, the prepaid card, or maximal privacy should evaluate alternatives and minimize stored data.