Is bnfcrconvert.com Safe?

What "Non-Custodial" Means Here

• We never hold your BNFCR or BNB. The swap is performed by Binance's official Futures Convert API on your own account; the assets stay in your Binance Futures wallet the whole time.
• There is no deposit step. You never transfer BNFCR to us — BNFCR cannot leave Binance at all. You only pay the service fee (0.5%, min 5.00, max 10.00 USDT/USDC) to our fee address.
• No account, no password. There is nothing to register and no login credentials of ours to breach.
• If bnfcrconvert.com disappeared tomorrow, your assets would still be exactly where they always were: in your own Binance account.

How Your API Credentials Are Handled

Our recommendation (from the Terms): create a dedicated Binance API key with minimum permissions — "Enable Futures" only — and restrict it to specific IPs. Revoke it after converting if you like; keys are disposable.

What Data the Site Collects

• No cookies, no analytics, no trackers — there is no Google Analytics, no pixels, no fingerprinting.
• No identity data — no name, postal address, phone number, or ID documents are collected.
• What is kept: invoice and conversion records (retained as tax evidence), server logs for 90 days, the truncated API-key hash, and — only if you choose to provide it — an email address for receipts.

The full table of data categories, retention periods, and your GDPR rights is in the Privacy Notice.

The Infrastructure It Runs On

• Binance — the swap itself runs through Binance's official Futures Convert API, on your own account.
• Bybit — fee payments are verified against Bybit's deposit-history API (the fee address is a deposit address; no personal data is sent).
• Solana, Polygon, BSC — the public networks on which the fee payment travels.
• HTTPS everywhere — all traffic is TLS-encrypted (Let's Encrypt).

What Could Go Wrong — Honestly

Risks on your side (the ones that actually bite)

• Fee payment doesn't match the invoice. Wrong amount (usually because your exchange deducted its withdrawal fee from what you sent), wrong chain, or wrong address — such payments cannot be credited automatically and may be unrecoverable. Always make the "Receive amount" equal the exact invoice amount, on the chain shown.
• Exchange-internal transfer instead of on-chain. Internal/"free" transfers bypass on-chain records and cannot be matched. Use a real on-chain withdrawal.
• Over-permissioned or leaked API key. The service only needs "Enable Futures". A key with withdrawal permissions that leaks — anywhere, not just here — endangers your account. Use minimum permissions and IP restriction.
• Phishing. Type or bookmark bnfcrconvert.com and check the URL before entering credentials. We will never contact you asking for your API secret.

Risks we minimize by design

• Server compromise: there are no user funds and no stored API secrets on the server to steal.
• Missed payment window: the 15-minute invoice window is backed by a 24-hour late-grace period during which arriving payments are still credited.
• Failed swap after payment: if the Binance-side swap fails transiently, you can retry the conversion on the same invoice; the Terms describe a best-effort refund path for fee-paid failures.

What the Service Is — and Is Not

• It is a non-custodial technical utility with a single, narrow function: instructing the Binance Futures API of your own account to swap BNFCR for BNB.
• It is not a cryptocurrency exchange in the regulatory sense — it does not match orders, set prices, hold an orderbook, or make markets.
• It is not a crypto-asset service provider (CASP) under MiCA Article 3(1)(15) — the actual exchange operation is performed by Binance on your own account.
• It does not hold, custody, or control user funds, and does not provide investment, financial, legal, or tax advice.
• It does not offer fiat on/off-ramps, deposit accounts, or money transmission.

These definitions come from our Terms of Service, which also cover the refund policy, your obligations (18+, lawful use of Binance Futures in your jurisdiction), and the governing law (Czech Republic).

KYC, AML & GDPR

• No KYC here. The service never holds, transfers, or trades user funds — it only sends instructions to the Binance API of your own account. There is no registration and no identity verification on this site; your identity was already verified by Binance when you opened your exchange account.
• AML position. The operator does not transfer or exchange funds on behalf of users. The only payment the operator receives is the service fee, which is documented with an invoice in the operator's accounting.
• GDPR. The only personal data processed (an optional e-mail address and invoice details) is used solely for issuing invoices and delivering receipts. Retention periods and your rights are listed in the Privacy Notice.

Who Operates This Service

The service is operated by ESA DEVELOPMENT s.r.o., a Czech limited liability company — Company ID (IČO): 23008393, registered office: Čelakovského 1074/18, 430 01 Chomutov, Czech Republic, registered in the Commercial Register kept by the Regional Court in Ústí nad Labem under file no. C 53630. The same identification appears on every invoice the service issues. You can verify the company in the public Czech Commercial Register.

How to Verify Us Yourself

• We never ask for your Binance password, 2FA codes, or wallet seed phrases — only a revocable API key you create.
• The fee schedule (0.5%, min 5.00, max 10.00) is published on every invoice before you pay — see fees & transparency.
• Everything above is stated, in binding form, in the public Terms of Service and Privacy Notice.
• Questions before you convert? Write to support@bnfcrconvert.com.

Summary

1. Non-custodial by design — BNFCR and BNB never leave your own Binance wallet.
2. No secrets kept — API secret never stored; API key kept only as a truncated hash.
3. Official APIs — Binance Futures Convert for the swap, Bybit deposit history for fee verification.
4. No tracking — no cookies, no analytics, minimal data, GDPR rights honored.
5. Honest failure modes — exact-amount fee matching is strict; the 24-hour grace window, retry flow, and refund policy exist for when things go wrong.