Bitpanda began in Vienna in 2014 with a focus on making Bitcoin easier to buy and later expanded into a much broader investment platform. The company identifies Eric Demuth, Paul Klanschek and Christian Trummer as its founders. Its current group history says the platform moved from Bitcoin brokerage into additional cryptocurrencies, added precious metals in 2019, introduced tokenized stock exposure in 2021, expanded custody and business infrastructure after acquiring Trustology in 2022, and obtained a MiCA licence in 2025. In 2026 Bitpanda describes its consumer proposition as a universal investment app with more than 7 million clients and more than 10,000 available assets, including cryptocurrencies, stocks, ETFs, ETCs and precious metals; those scale and catalogue figures are company-reported, and product availability depends on the customer’s country, legal entity, account eligibility and the specific instrument.
Current Bitpanda Group pages list Lukas Enzersdorfer-Konrad and co-founder Christian Trummer as Co-CEOs, Eric Demuth as Executive Chairman of the Board and Paul Klanschek as a board member. That is worth recording because older profiles that still describe the founding team as the current day-to-day executive structure are no longer precise. The legal and regulatory picture also needs more care than a single “regulated in Europe” label. Different Bitpanda companies provide different services, and the protections, complaint routes, investor-compensation arrangements and regulatory status that apply to a cryptoasset, stock, ETF, leveraged product or payment feature are not necessarily the same.
Customers should read the legal notice and product documentation attached to their own country and instrument before investing. Cryptoassets and market securities can lose value, and historical performance or a platform’s regulatory permissions do not remove investment risk. Customer support is now presented as a 24/7 service through the Bitpanda app and Helpdesk, with live chat, human escalation, WhatsApp and scheduled calls available in supported circumstances. Bitpanda also maintains official community channels, but its own Helpdesk explicitly says account-specific support is not provided through social media and that staff will never initiate a direct message asking for passwords, seed phrases, recovery codes, two-factor codes or transfers.
That warning is particularly important for a financial platform because fake support accounts are a common impersonation route. The practical way to evaluate Bitpanda is by the exact asset and legal entity being used: compare execution or spread information, custody model, fees, withdrawal rules, tax documentation, order types and the applicable risk disclosure instead of assuming that every feature on the platform operates under one identical set of terms. Regulation does not remove investment risk. Bitpanda’s current legal notice identifies Bitpanda GmbH in Vienna and lists authorization as a crypto-asset service provider under MiCAR, while other group entities handle products such as metals or services in additional jurisdictions.
The company also maintains separate regulatory registrations and licenses in markets outside Austria. Customers should therefore identify the legal entity and product involved rather than treating the Bitpanda brand as one universal regulatory wrapper. Crypto assets can be highly volatile, may lose most or all of their value and can have different custody or insolvency protections from bank deposits or regulated securities. Staking, derivatives, tokenized products and other features can introduce additional terms and risks. A regulatory license is evidence that an entity must follow applicable rules; it is not a government guarantee of investment performance.
Account security is equally important because crypto transfers can be difficult or impossible to reverse. Bitpanda’s current support page explicitly warns that staff will never ask for passwords, seed phrases, recovery codes or two-factor authentication secrets and says the company will not initiate support conversations through unsolicited direct messages. Users should enable strong authentication and anti-phishing controls and verify withdrawal addresses carefully.
