Security is not a feature at XCrowMart — it is the platform. Every architectural decision, every policy, and every feature is designed around a single principle: your funds, your data, and your trades should be safer on XCrowMart than in any Telegram chat, Discord server, or private deal.
The buyer's payment is locked in escrow when a purchase is initiated. Funds are only released once the buyer confirms the delivered asset matches the listing. This eliminates the two biggest P2P risks: sellers disappearing with funds, and buyers falsely claiming non-delivery.
Every seller must complete identity verification before listing. Fraudulent accounts are detected, suspended, and removed. Seller ratings and dispute history are publicly visible on each listing.
All messages between buyers and sellers are encrypted in transit with TLS 1.3. We minimize the personal data we collect and never share it with third parties without user consent.
Contested trades are reviewed by trained mediators using a transparent evidence-based process. Funds remain in escrow until the dispute is resolved — they never automatically release to either side during an open case.
We never hold your private keys. Funds only enter our escrow for the exact duration of an active trade. When an order completes, the seller's payout moves directly to their wallet.
Third-party penetration tests and internal code reviews are ongoing. We maintain a responsible disclosure program for researchers who find issues.
We operate a responsible disclosure program. If you discover a vulnerability or suspicious activity, please contact our support team immediately with details. We do not pursue legal action against researchers acting in good faith.