ForecastsPro Log in

Are crypto trading bots safe? Where your money stays, and what limits can and cannot do

No crypto trading bot is fully safe, because no trading is. With a careful setup, your money stays in your own exchange account, and the bot gets a key that can trade but cannot withdraw. The bot can still lose money on trades. We make an AI trading tool. One section near the end is about it.

Published By ForecastsPro

In short

  • Ask first where your money stays. Even in your own exchange account, the exchange holds it for you1.
  • An API key that cannot withdraw limits what a thief can do. The thief can still lose your money through trades2.
  • Limits lower risk and do not remove it. A stop-loss order does not guarantee the price you get3.
  • Use a separate exchange account for bot trading, with only the amount you are prepared to trade. Practise first, then start small.

Are crypto trading bots safe?

No. No trading is fully safe. A trading bot is software that places buy and sell orders for you on a crypto exchange. EU regulators told consumers on 6 October 2025 that crypto can be risky and that legal protection may be limited4.

So ask three smaller questions:

  1. Can the tool take my money out? That depends on what you give it.
  2. Can I lose money with a trading bot? Yes. Any trade can lose.
  3. Can something fail? Yes. A key can be stolen, an order can fail, and an exchange can stop working.

Where does my money stay when a bot trades for me?

It depends on the tool. With some tools your money stays in your own exchange account, and the tool only sends orders there.

With other tools you send coins to a wallet that the tool creates, or you hand over the private keys of your own wallet. Private keys are the secret codes that move coins1. Reports from 2023 say that many trading bots inside the chat app Telegram worked this way5. This may have changed.

An exchange account is not a wallet of your own: the exchange holds the private keys for you1. Staff of the US securities regulator warn: if the exchange is hacked, closes or goes bankrupt, you may lose access to your crypto1.

So “your money stays in your own exchange account” means one thing: the bot company does not hold it. You still trust the exchange.

What is an API key, and what can a trading bot do with it?

An API key is a code that you create in your exchange account. It lets a program work in that account without your password67. It is not the private key of a wallet: it can only do what its permissions allow.

The exchange OKX, for example, names three permissions: read, trade and withdraw (to send money out)8. A trade-only key can place orders and cannot withdraw. Check what “trade” includes on your exchange: at OKX it also covers funding transfers8.

A second lock is the IP restriction, also called an IP whitelist. The key then works only from the internet addresses you list7, for example the bot’s. It helps when the key is stolen from you. It may not help when the bot itself is broken into, because orders then come from the bot’s address.

So a trade goes like this: the bot sends an order with your key, and the exchange carries it out inside your account. Your money stays there.

Can a trading bot withdraw or steal my money?

A trading bot can withdraw your money only if you gave it the means. That is your coins, the private keys of your wallet, or an API key with the withdrawal permission or a transfer permission. With a trade-only API key it cannot withdraw, but it can still lose your money through trades.

So can a thief who steals that key. Binance’s security blog explains how. The thief can make your account buy, from the thief’s own account, a coin that few people trade. Trade by trade, your money moves to the thief, and you are left with coins you never wanted. No withdrawal is needed2.

An API key can be stolen from you, or from a tool that stores it, ours included. If a key may have leaked, Binance Academy says to revoke (cancel) it at once6. A tool that only proposes trades needs no key: you place each trade by hand.

Do stop-losses and loss limits always work?

No. Limits are rules that the bot must follow. They lower risk and do not remove it. Four limits matter, and each has a weak point:

  • Position size. The most the bot may put into one coin (one position), and into all coins together. A falling price can still take a large part of that money.
  • Stop-loss and take-profit. Sell orders that wait on the exchange: a stop-loss below your buying price, a take-profit above it. When the price falls to your stop price, the stop-loss sells at the price buyers pay at that moment9. So the stop price starts the sale. It is not a promised selling price3.
  • Daily loss limit. It pauses new buying, or all trading, when one day’s losses reach a set amount. Coins you already hold can still fall.
  • A switch that stops everything. Some tools call it a kill switch. Stopping new orders is not the same as selling, so ask what happens to the coins you hold.

Example: you buy a coin at 100 dollars with a stop-loss at 95. The price then falls straight to 90. Your order can sell near 90, so you lose about 10 dollars, not 5. Kraken’s help page says that in crypto such a sale is likely to end well below the stop price9. A stop-loss with a lowest price it accepts may not sell at all3.

Should I try paper trading first?

It helps. Paper trading means practising with virtual money. It shows how a tool behaves before real money is involved. It does not show how real trades will go: the trades were never really made.

How do I check a trading bot before I connect it?

To check whether a trading bot is legit, look for seven answers on its own pages. They test the design, not the people. The CFTC, a US regulator, also says to research the company and its people, and to get a second opinion10.

Table: seven questions to ask any trading bot.

QuestionA careful answer
Where does my money stay?In your own exchange account. You never send the tool coins to trade.
What can the API key do?Trade only: no withdrawals or transfers, with an IP restriction. The tool checks this itself.
Does the stop-loss wait on the exchange?Yes, after every buy. The tool says it may sell lower, or not at all.
What stops trading after losses?A daily loss limit and a stop switch. The tool says what they do not do.
Can I stop it myself?Yes, with one switch. You can also delete the key on the exchange.
What does it promise?No profit. It says plainly that you can lose money.
Who checked it?A named outside company (an audit), or the tool says that nobody did.

Should I use a separate account and start small?

It is a safety habit, not advice to invest. Use a separate exchange account only for bot trading, with only the amount you are prepared to trade. Some exchanges offer sub-accounts, extra accounts under your main one: Binance and OKX, for example13.

Practise first with virtual money. Then start small, and raise the amount only when you know how the tool behaves.

What does ForecastsPro do, and what does it not do?

We make ForecastsPro, a paid app. It never holds the money you trade with, and you never send us coins to trade. The app’s fee is a separate payment, made in crypto.

Its AI proposes buy, sell or hold. Fixed rules, called the risk gate, decide what is allowed. They are limits written in code, and the AI cannot change them.

Nothing trades until you switch on one of the app’s modes:

  • Paper. Practice with virtual money on Binance’s public test system11. Binance’s test key is free and needs a GitHub login, not a Binance account.
  • Manual mode. No exchange key. The AI gives each trade, and you place it by hand on any exchange. The app places no order there, so you set any stop-loss yourself.
  • Real money. Automatic orders on your own Binance account, and on no other exchange, through a key that cannot withdraw. No leverage, margin or futures. It may not be open in your country: see Binance in Europe.

In Real money, as of 11 October 2026:

  • Key. The app asks Binance what your key may do. It refuses a key that can withdraw or transfer, or use margin loans, futures or options. It also refuses a key with no IP restriction.
  • Stop-loss. It waits on Binance after each buy. It may sell below its price, or not at all when the price jumps. If Binance refuses the order, the app warns you and tries again. Until then that coin has no stop-loss.
  • Stopping. New buys pause when losses pass your daily loss limit. A loss lock, at a total loss that you set, switches everything to Off, and so can you. None of these sells the coins you hold.

We promise no profit: you can lose money, and the AI can be wrong. No outside company has audited the app. A stolen key is not harmless, so we recommend a separate Binance account with only the money you are prepared to trade. See our Risk Disclosure and every safeguard and what it cannot do.

Questions and answers

Is it safe to share my Binance API key with a trading bot?

Not fully. Binance’s help page on API keys says that entering your key into any platform of another company is a security risk12. That includes tools like ours. Binance’s security blog says to give each key only the permissions it needs, and an IP restriction2.

What does non-custodial mean for a trading bot?

It means the bot company does not hold your money: the tool only sends orders. Somebody still holds your coins. In an exchange account, the exchange does1.

Are AI trading bots safe?

No more than any other bot. The CFTC, a US regulator, warned in January 2024 that fraudsters use the interest in AI to promote trading bots. They promise very high or certain returns. In the CFTC’s words: “AI technology can’t predict the future or sudden market changes.”10 Ask whether the AI can change its own limits, or whether fixed rules hold it.

How we checked this

We read the sources on 11 October 2026, and checked every sentence about ForecastsPro against its code and guide. This article is information, not financial, legal or tax advice.

ForecastsPro is not affiliated with or endorsed by Binance or any company named here. Found a mistake? Write to support@forecastspro.com.

Sources

  1. US Securities and Exchange Commission, Office of Investor Education and Assistance, investor bulletin (staff views), 12 December 2025. Crypto Asset Custody Basics for Retail Investors. Used for: what a wallet stores, who holds the keys, and the risk when an exchange fails.
  2. Binance blog, dated 24 March 2025 on the page. An older version of the same post was dated 14 February 2023. How to Secure Your API Keys on Binance: 5 Tips For Protecting Your Crypto. Used for: how a stolen key is misused through trades with no withdrawal, and the tips on permissions and an IP whitelist.
  3. US Securities and Exchange Commission, Office of Investor Education and Assistance, investor bulletin (staff views), 13 July 2017, updated 18 August 2026. Stop, Stop-Limit, and Trailing Stop Orders. Written for shares. Used for: the stop price is a trigger and not a promised price, and that an order with a lowest price may not sell.
  4. EBA, EIOPA and ESMA, the three EU financial supervisors, 6 October 2025. EU Supervisory Authorities warn consumers of risks and limited protection for certain crypto-assets and providers. Used for: crypto can be risky, and legal protection may be limited.
  5. The Block, 26 July 2023, updated 19 September 2023: Telegram crypto trading bots spark fears over security vulnerabilities. Cointelegraph, 11 August 2023: Telegram trading bots are hot, but don’t trust them for custody: Security firms. Used for: how many Telegram trading bots handled wallets and keys in 2023.
  6. Binance Academy, updated 26 May 2026. What Is an API Key and How to Use It Securely?. Used for: what an API key is, and revoking a leaked key at once.
  7. Kraken support, last updated 8 August 2025. How to create a spot API key. Used for: an API key stands in for the username and password of the account, trading bots use API keys, and what an IP restriction (IP whitelisting) is.
  8. OKX, no date on the page, read 11 October 2026. OKX API guide. Used for: the three key permissions read, trade and withdraw, and that trade also covers funding transfers.
  9. Kraken support, last updated 6 October 2026. Stop loss orders. Used for: how a stop-loss works, and that in crypto a sell is likely to fill well below the stop price.
  10. US Commodity Futures Trading Commission (CFTC), customer advisory, no date on the page. Announced on 25 January 2024 in press release 8854-24. AI Won’t Turn Trading Bots into Money Machines. Used for: the checks on the company, the warning about AI trading bots, and the quoted sentence.
  11. Binance, no date on the page, read 11 October 2026. Binance Spot Test Network. Used for: funds there are virtual and cannot be moved in or out, and the GitHub login.
  12. Binance help, last updated 13 January 2025. Frequently Asked Questions on API. Used for: Binance calls entering an API key into a third-party platform a security risk.
  13. Binance help, last updated 29 September 2026: Binance Sub-Account Functions and Frequently Asked Questions. OKX help, published 22 August 2023, last updated 20 August 2026: What is sub-account?. Used for: these two exchanges offer sub-accounts, and what a sub-account is.

ForecastsPro is an AI crypto trading bot with a hard-coded risk manager. See it work in the live demo: it is free and uses sample data, not real money.

More from the blog