NordVPN review for crypto users
Last reviewed 2026-08-26
Ownership disclosure
NordVPN has had its no-logs claim independently checked six times, which is more often than any other service on this page, and it has kept the same auditing standard throughout.
The engagements run in an unbroken line. PwC Switzerland ran the first in late 2018 and a broader second in 2020. Deloitte took over for the third in 2022 and has repeated it every year since, with Deloitte Lithuania completing the sixth at the end of 2025 under ISAE 3000 (Revised). That last engagement inspected standard, Double VPN, obfuscated and Onion Over VPN server types, along with configuration and deployment processes. No court case or seizure has ever tested the claim in public, so the evidence here is thorough but scheduled.
The honest blemish is older. In 2019 NordVPN disclosed that a rented Finnish server had been reached without authorization in March 2018, through an insecure remote management account the data centre had left in place. No user activity logs existed on it and no credentials were exposed, but the disclosure came more than a year after the company learned of the intrusion.
Crypto payment runs through CoinGate and, unlike several rivals, the refund actually happens: the terms say a crypto purchase is refunded in the same cryptocurrency, valued at the dollar price paid when you bought, not at the rate on the day of the refund. An email address is still needed for the account itself. The Panama entity sits under a Netherlands holding company that also owns Surfshark, which is reviewed here.
- Owned by
- Nord Security
- Jurisdiction
- Panama
- Eyes alliance
- Outside the Five, Nine and Fourteen Eyes alliances
- Price
- About $12.99 per month billed monthly, dropping to roughly $3.39 per month on the two-year term; renewal prices run above the introductory rate.
- Money-back
- 30 days (Covers the initial purchase only; renewals fall outside it except in Germany, the Netherlands and the United Kingdom, which get a pro rata refund.)
- Free tier
- None
- Protocols
- NordLynx, OpenVPN, IKEv2
- Servers
- Vendor states thousands of RAM-only servers across roughly 125 countries
- Pay with crypto
- bitcoin, ethereum
The evidence for the no-logs claim
A no-logs policy is a sentence on a website until someone checks. This is what has actually been checked for NordVPN, dated, with the primary source for each item.
Independent audits
- 2025
Deloitte Lithuania: sixth no-logs assurance engagement under ISAE 3000 (Revised), covering standard, Double VPN, obfuscated and Onion Over VPN servers. source
- 2024
Deloitte: fifth no-logs assurance engagement. source
- 2023
Deloitte: fourth no-logs assurance engagement. source
- 2022
Deloitte: third no-logs assurance engagement, the first conducted by Deloitte rather than PwC. source
- 2020
PwC Switzerland: second and broader assurance engagement on the no-logs claim, reported 28 May 2020. source
- 2018
PwC Switzerland: first independent assurance engagement on the no-logs claim. source
Incidents
- 2019
A rented server in a Finnish data centre was accessed without authorization through an insecure remote management account the data centre had installed; NordVPN said no activity logs were on the machine and no credentials were exposed, but disclosed it publicly only in October 2019, after learning of it that April. source
Paying with bitcoin
Coins accepted
bitcoin, ethereum
Processor
CoinGate
Anonymous signup
No
An email address is required to create the Nord Account regardless of payment method, so a crypto purchase is not an anonymous one.
The refund sentence that governs a crypto purchase, from NordVPN's own policy:
“For payments made in cryptocurrency, the refund will be made in the same cryptocurrency (or in another cryptocurrency if the one used for the purchase becomes unavailable or impractical to use). The amount to be refunded in cryptocurrency will be calculated based on the equivalent of the price paid in USD at the time of purchase.” refund policy
Markets it has left
- 2022
India: CERT-In required five years of customer logs, so NordVPN removed its physical Indian servers instead of complying. source
What it does for a bitcoin user
- Six independent no-logs assurance engagements, the longest run reviewed here
- Panama base, outside the Five, Nine and Fourteen Eyes alliances
- Crypto purchases are refundable in the same coin at the dollar price you paid
- A 2018 breach of one rented server, disclosed over a year later
What it will not do: bypass KYC, hide on-chain activity, or make a geo-blocked exchange usable. Presenting a false location to an exchange breaches its terms of service and is how accounts get frozen with the balance inside. Details in the VPN guide.
Pros and cons
What works
- The most repeated no-logs verification of any service on this page
- Refunds crypto purchases at the purchase-date dollar value rather than the refund-date rate
- RAM-only server architecture with no persistent storage
- Panama jurisdiction has no mandatory data retention law
What to watch
- The 2018 Finland server breach was disclosed more than a year after the company learned of it
- No court case or seizure has publicly tested the no-logs claim
- An email address is required even for a crypto purchase
- Sits under the same Nord Security group as Surfshark, which is also reviewed here
NordVPN compared
Fact by fact against each VPN we review, with a verdict where the audit record decides it.
Frequently asked questions
How many times has NordVPN's no-logs claim been audited?
Six times. PwC Switzerland ran the first two in 2018 and 2020, and Deloitte has run one every year since 2022, with the sixth completed by Deloitte Lithuania at the end of 2025.
Can I get a refund on a bitcoin payment to NordVPN?
Yes. The terms say a cryptocurrency purchase is refunded in the same cryptocurrency, calculated from the dollar price you paid at the time of purchase rather than the exchange rate on the refund date.
Did NordVPN ever lose user data in a breach?
No user data was lost. One rented server in Finland was accessed in 2018 via a management account the data centre had left exposed; the server held no activity logs, though the disclosure came over a year after NordVPN found out.
Is NordVPN connected to Surfshark?
Yes. Surfshark and NordVPN both sit under the Nord Security group after a merger completed in February 2022, though the two say they run separate infrastructure and independent product teams.