How safe is PAX Gold? An honest risk review

The short answer

Is PAX Gold safe? Compared with most gold tokens, it is among the better-documented options. PAXG is issued by Paxos Trust Company, N.A., a national trust bank that has been supervised by the Office of the Comptroller of the Currency (OCC) since 12 December 2025. One PAXG represents one fine troy ounce of a London Good Delivery gold bar held in LBMA vaults in London, and Paxos publishes monthly attestation reports by KPMG LLP.

That does not make it risk-free. You hold a claim that depends on a company, its custodians and its software. Paxos can freeze and upgrade the token. Exchanges that hold your PAXG can fail. And the ticker attracts scammers. If you want the basics first, our guide on what PAX Gold is explains the mechanics. This page sorts the risks from biggest to smallest and shows what you can do about each.

Is PAX Gold legit, then? Yes. It has traded since September 2019, it has a public contract on Ethereum with tens of thousands of holders (Etherscan showed 88,522 holders on 12 October 2026), and its issuer is a federally chartered bank. The same question in other languages, like the Turkish “pax gold güvenilir mi” or the Portuguese “pax gold é seguro”, gets the same answer: the product is real; the risks around it are what you need to manage.

Issuer risk: Paxos Trust Company

Everything starts with the issuer. Paxos Trust Company, N.A. is the chartered entity that issues PAXG directly. The OCC conditionally approved its conversion to a national trust bank on 12 December 2025, and Paxos says it completed the conversion that day. The bank takes no deposits and is not FDIC-insured, so there is no deposit insurance behind your tokens. Before the switch, Paxos operated under a New York State Department of Financial Services (NYDFS) limited-purpose trust charter. That is history now, so be wary of any site that still calls PAXG “NYDFS-regulated”.

Paxos’s record is not spotless, and you should know it. In February 2023, NYDFS ordered Paxos to stop minting BUSD, the stablecoin it issued for Binance. On 7 August 2025, NYDFS announced a $48.5 million settlement with Paxos: a $26.5 million penalty plus $22 million for compliance remediation, over due-diligence and anti-money-laundering failures linked to Binance. None of that touched the gold behind PAXG, but it tells you about compliance culture and regulatory pressure.

The second event is more technical. On 15 October 2025, Paxos mistakenly minted about $300 trillion of PYUSD on Ethereum and burned it within roughly 20 to 30 minutes. Paxos called it a technical error, not a hack. Why does this matter for gold holders? PYUSD and PAXG run on the same PaxosTokenV2 code family and a similar operational key model. A mistake in one product shows the kind of operational risk the other shares. No PAXG-specific incident was found in our research as of October 2026.

Custody risk: where the gold sits

Paxos says the gold sits in LBMA vaults in London. Its terms say the gold is held “on a segregated basis for the benefit of PAXG holders” in LBMA-approved security carrier vaults. Attestation data, as cited by the risk firm LlamaRisk in August 2026, names the custodians as Brink’s Global Services and ICBC Standard Bank, with HSBC removed from the custody set from 30 January 2026. Paxos also states that its vault provider holds insurance against loss of the gold, covering vault and transit, although the insurer is not named.

Segregation is the key protection. It is designed so that if Paxos itself failed, the bars would not be mixed with company assets. That structure has never been tested in a PAXG insolvency, so treat it as strong but unproven. Our page on how the gold backing works covers the vaults, bar standards and the serial-number lookup in detail.

Attestation vs audit: what the reports prove

Many people search for a “PAXG audit”. Strictly speaking, Paxos publishes attestations. An attestation is a point-in-time check: an accounting firm confirms that, on a given date, the gold held matched the tokens outstanding. A full audit would examine controls and finances over a period. Both are useful, but they are not the same thing.

Paxos posts monthly reports on its transparency page. Reports posted on or after 28 February 2025 come from KPMG LLP; earlier ones came from WithumSmith+Brown, PC. The latest report listed when we checked on 12 October 2026 was for August 2026. The most recent figures we could confirm were from the 30 June 2026 report, which showed 452,355 PAXG outstanding against 452,355 fine troy ounces, with no surplus or deficit. Press reports also mention an annual physical bar audit by Bureau Veritas, but we could not confirm that from a primary source.

Smart-contract and admin powers

This is the risk most buyers miss. PAXG on Ethereum is an upgradeable contract. The address you hold is a proxy that points to an implementation contract (PaxosTokenV2), and Paxos can swap that implementation. The terms give Paxos “the ability and the right to freeze and upgrade all PAXG tokens”, and allow freezes at its sole discretion. Seizure requires a binding legal directive, but the terms also warn that frozen assets can become permanently unrecoverable.

On-chain, these powers are concrete. An asset-protection role can freeze an address and wipe its balance. A pause role can halt all transfers for everyone; Paxos used a pause around Ethereum’s Pectra upgrade as a planned operational step. LlamaRisk reported 285 frozen addresses on mainnet and noted that the proxy admin and roles were held by externally owned accounts with no timelock at review time. Paxos said a timelock would roll out in the week of 17 August 2026. As of 12 October 2026 we could not verify that it is live, so check Etherscan or Paxos announcements yourself. Our PAXG contract and networks guide shows how to read the contract page.

Is this bad? It cuts both ways. Freeze powers let Paxos stop stolen funds and comply with court orders, which is part of why a regulated bank can issue the token at all. But they mean PAXG is not censorship-resistant like bitcoin. If you need that property, PAXG is the wrong tool.

Liquidity and price vs spot gold

A gold token is only useful if you can sell it near the gold price. LlamaRisk studied 470 daily observations up to August 2026: the median gap between PAXG and spot gold was +0.08%, 97.7% of days stayed within ±1%, and the extremes were −1.05% and +2.00%. No depeg events were reported. That is a good record, but small gaps happen, especially at weekends when the spot gold market is closed and PAXG keeps trading.

Depth matters too. On-chain DEX liquidity was about $31.9 million across 20 pools in August 2026, and a sale of about $9 million of PAXG would have caused around 2.6% slippage. For most retail amounts, centralized exchange order books are deeper. Check the live gap on our PAXG price page before a large trade, and remember that the arbitrage which keeps PAXG near spot runs through Paxos minting and redemption, which only verified Paxos customers can use.

Exchange custody risk

Most people buy PAXG on an exchange and leave it there. Then the main risk is no longer Paxos; it is the exchange. If it is hacked, freezes withdrawals or goes bankrupt, you become an unsecured creditor with a claim on tokens you never controlled. The gold in London is fine, but your access to it is not.

So pick the venue carefully and treat it as a doorway, not a vault. Look for a known legal entity, clear licences and a long track record. CEX.IO, for example, has operated since 2013, and its US entity is registered with FinCEN as a money services business and licensed as a money transmitter in 38 states plus DC. Our PAXG exchanges list compares global and local venues. After buying, move the tokens to a wallet you control, such as a Ledger hardware wallet.

Scams: fake tokens and fake “PAXG mining”

Anyone can deploy a token called “PAXG” or “PAX Gold”. On Solana, LlamaRisk flagged at least one non-Paxos token using the PAXG symbol, and wallets list several addresses with the same name. On Ethereum, the only official contract is 0x45804880De22913dAFE09f4980848ECE6EcbAf78. If a token in your wallet has the right name but a different address, it is not PAX Gold.

The second pattern is “PAXG mining” or cloud-mining sites. PAXG cannot be mined. New tokens exist only when Paxos receives payment and allocates gold, so any site that promises to mine PAXG, or pays fixed daily returns for “staking” it, is selling a story. Our guide to PAXG staking and yield explains what real earning options exist and what they risk. The third pattern is impersonation: fake Paxos support accounts asking for your seed phrase or asking you to “validate” your wallet. Paxos support will never need your seed phrase.

Legal and regulatory limits

Regulation also limits who can use PAXG. Paxos states that “PAXG is currently unavailable in the EU”. That refers to buying and redeeming directly with Paxos; its EU entity issues a dollar stablecoin under MiCA, not PAXG. Some EU venues still list PAXG for secondary trading, such as Kraken’s PAXG/EUR pair, but you cannot redeem with Paxos from the EU, and access may change. Readers in Germany or Poland should read our PAX Gold in Germany page before buying.

Redemption is gated too. Only verified Paxos customers can buy from or redeem with Paxos, retail redemption is effectively to US dollars, and physical delivery needs at least 430 PAXG plus fees per bar, delivered to a UK vault. If you hold PAXG bought on an exchange, your realistic exit is selling on the market. Tax treatment also varies: many countries treat PAXG as a crypto-asset, and swapping crypto into PAXG is usually a taxable event. This page is not legal or tax advice; see our disclaimer.

Risk map: what can go wrong

The table below is our editorial ranking, not a formal rating. It weighs how likely each problem is against how much of it you can control.

Notice the pattern. The risks you cannot control, such as issuer and custody, are rated lowest. The ones you can control, such as where you store tokens and which links you click, are rated highest. That is good news: most PAXG losses are preventable.

How to reduce your risk

You cannot remove issuer risk, but you can avoid adding your own. The checklist below covers the steps we would take before putting meaningful money into PAXG. If you are still choosing between gold tokens, our PAXG vs XAUT comparison weighs issuers, vaults and attestations side by side, and our how-to-buy guide walks through a first purchase.

One last example puts this in proportion. Say you hold 2 PAXG. If Paxos froze a random address, the odds it is yours are tiny unless your coins came from a flagged source. If your exchange failed while you kept the tokens there, you could lose access to all of it. Moving those 2 PAXG to a hardware wallet costs one network fee and removes the single largest risk on this page.