Verdict up front: MelzaPay (melzapay.com) badges itself a “European Licensed Payment Institution” and offers a personal IBAN, a virtual Visa card and crypto deposits. Luxembourg’s financial regulator, the CSSF, warned about the site on 2 September 2026. The domain was registered on 7 June 2026.
| Website | melzapay.com |
|---|---|
| What it claims | “European Licensed Payment Institution”; personal IBAN in 24h; virtual Visa card; BTC, LTC, USDT, ETH deposits |
| Also claims | “4.8★ Trustpilot”; “30+ countries”; “Full PSD2 compliance” |
| Regulator | CSSF (Luxembourg) warning, 2 September 2026 (via IOSCO I-SCAN, listed as “MelzaPlay S.A.”) |
| Domain registered | 7 June 2026 (NameCheap) — under four months old |
| Status | Live — page loads today |
A licence nobody can find
The first thing on the page is a green badge: “European Licensed Payment Institution”. Below it: “European personal IBAN, instant virtual Visa card, and crypto deposits — all in one account. Open in 5 minutes, no income requirements.” The site promises a “Personal MT IBAN within 24 hours” and “Full PSD2 compliance”.
A licensed payment institution names its regulator and licence number so customers can check them. The badge on MelzaPay’s homepage names neither — and Luxembourg’s regulator has warned about the site instead.
Contacted by someone from MelzaPay?
✎ FILE A COMPLAINT ABOUT MELZAPAY
The complaint form goes straight to our case team — include the website, what you paid and any screenshots. Never send passwords or seed phrases.
Crypto in, card out
The pitch is built around funding the account “with BTC, LTC, USDT, ETH” and spending with a “Visa Platinum” card. The mock card on the homepage shows the number “5374 9201 2345 6789” and the name “Melza Pay User”. Platforms like this ask for crypto deposits because crypto transfers cannot be reversed by a bank.
The domain was registered on 7 June 2026, three months before the CSSF warning.
⚠ Verified evidence
- Luxembourg’s CSSF warned about melzapay.com on 2 September 2026.
- The site calls itself a “European Licensed Payment Institution”.
- It takes crypto deposits in BTC, LTC, USDT and ETH.
- It claims a 4.8★ Trustpilot rating.
- melzapay.com was registered on 7 June 2026.
What the CSSF warning means
The CSSF publishes warnings about entities that claim or imply authorisation in Luxembourg without holding it. It is a regulator warning, not a court ruling.
What to do if you have dealt with MelzaPay
- Stop sending money, including any “fee”, “tax” or “release charge” asked for before a withdrawal.
- Keep every record: payment receipts, wallet addresses, chats, emails and screenshots of your account.
- Tell your bank or card provider straight away and ask about a chargeback or recall.
- Report it to the CSSF (cssf.lu) or your own national regulator and to your local police or fraud centre.
- Be wary of anyone who contacts you offering to recover the money for an upfront fee.
Contacted by someone from MelzaPay?
✎ FILE A COMPLAINT ABOUT MELZAPAY
The complaint form goes straight to our case team — include the website, what you paid and any screenshots. Never send passwords or seed phrases.
Sources, checked 29 September 2026: CSSF (Luxembourg) warning via IOSCO I-SCAN (2 September 2026) · RDAP registration record for melzapay.com · the live page at melzapay.com, read in full. A regulator warning is not a court ruling. Educational content — not financial advice.
