
Cryptora: AI-Powered Crypto Exchange Script with Spot, P2P and Binary Trading
Cryptora is complete, self-hosted crypto exchange software built with Next.js 14 and TypeScript. Your users get a modern exchange: spot trading with a live order book, binary trading, a P2P marketplace with escrow, Buy Crypto through 10 payment gateways, multi-currency wallets, KYC with face verification and a live chat with an AI support agent. You get an admin panel with more than 90 screens to run it.
What sets Cryptora apart is the intelligence behind the trading. AI watches for fraud, answers your users, explains market moves and translates your site, while a security layer finds duplicate identities, linked accounts and unusual activity before they cost you money.
Main Features

AI Fraud Detection: Risk Copilot
Every 5 minutes, Risk Copilot reads new deposits, withdrawals, trades and P2P chats for six patterns: money passing straight through, many small deposits that add up, signs of an account takeover, an unusual sign-in followed by a withdrawal, trades between linked accounts, and scam messages in P2P chats. Each finding becomes a case with the facts behind it, a severity and an AI-written summary for your reviewer. High-risk cases alert your team, and you can choose to hold that account's withdrawals until someone decides.

AI Support Agent
The AI agent answers visitors and users in the live chat straight away, at any hour. It hands the chat to a human agent when needed, opens support tickets for signed-in users and can reply by voice. When you allow it, it also reads a signed-in user's balances and history to answer questions about their account.
AI Market Insights
Short notes that explain why a coin is moving, written from the last 24 hours of market data and the news stories that name the coin. Every number in a note is checked against its sources before it is shown, and notes never give advice or forecasts. They appear on the trading screen ("Why is BTC up?"), the coins page and the home page.
AI Translations
Publish a page, a blog post or an announcement in English, and Cryptora translates it into Spanish, French and Arabic. When you edit it later, only the changed parts are translated again. Machine translations carry a note, and search engines see them only after a person has reviewed them. The member area ships in 7 languages, and you can add any other language from the admin panel: the AI translates every member screen into it.

Face Verification and Duplicate KYC Detection
Users record a short guided face video as part of KYC; on a desktop, they scan a QR code and record it on their phone. The biometrics worker included with Cryptora compares every face and every ID document against all other accounts, on your own server. Accounts that share a face or a document appear as one group, so you keep one account and retire the rest in a single logged action.

Risk and Abuse Detection
Cryptora links accounts by what they leave behind: payout addresses, phone numbers, email patterns, connected wallets, browsers and IP addresses. A hard identifier links two accounts on its own, while soft signals only count together, so a family or an office network does not look like an account farm. Every group gets a score with its evidence, and anomalies that fit no group are listed on their own.

Risk Controls and Global Kill Switch
Set per-user caps on open orders and daily withdrawals, rate limits for orders and trades, withdrawal limits for each KYC level, and holds on an exact amount in a user's wallet. One switch pauses trading on the whole exchange and signs every user out. Users see a clear "Trading is paused" page that opens trading again by itself as soon as you switch it back.
Geo-Fencing and Country Blocking
Block countries in soft or hard mode, draw fences on a map as polygons, rectangles or circles, and block IPv4 ranges. Test any IP address and read the log of every block. Works with MaxMind GeoLite2 or ip-api.

One-Click Updates with Automatic Rollback
Install a new version from the admin panel. Cryptora backs up your files and builds the new version beside the running site, so your exchange stays online during the build. Then it switches over and checks that the site answers. If any step fails, it restores your files and the previous build on its own.
Admin Panel Features

More than 90 screens, grouped the way you work.
Daily operations
- Dashboard: trading volume, deposits and withdrawals, new users and revenue, with charts.
- Pending center: every deposit, withdrawal, KYC review, ticket, live chat, P2P dispute and risk case waiting on an admin, on one screen.
- Notifications: alerts in the panel for the events that need you, and emails for high-risk cases.
Users and KYC
- Users: search, profiles, wallets and balances, balance adjustments, fund holds and bans.
- Log in as a user: see the site exactly as a user sees it to help them, with a visible bar while you do.
- KYC reviews: each submission with its documents and face video, to approve or reject.
- KYC builder: your own verification levels, fields and documents.
- Duplicate identities: accounts that share a face or an ID document, grouped, with the extra accounts retired in one logged action.
Risk and security
- Risk Copilot: cases with their facts, AI notes and history; assign, comment and decide; thresholds for each check, alert emails and an optional withdrawal hold.
- Risk and Abuse: linked-account groups with scores and evidence, and anomalies on their own list.
- Risk controls: per-user caps on open orders and daily withdrawals, and rate limits for orders and trades.
- Global kill switch for trading, and a maintenance mode with your own message.
- Security center: country rules, geo-fences, IPv4 range blocks, an IP tester, the block log and security settings.
Wallets and payments
- Deposits and withdrawals: review, approve or reject, with an overview of all wallets.
- Withdrawal policy: USD limits for each KYC level, rules for each asset, and withdrawal fees.
- Fiat and Buy Crypto: 10 payment gateways (Stripe, PayPal, Razorpay, Flutterwave, Paystack, PayU, Mollie, Skrill, Mercado Pago and 2Checkout), fiat methods and Buy Crypto settings.
- Deposit rewards: scratch-card campaigns for qualifying deposits, with the odds, the cost per card and the worst case worked out as you edit the prize table.
Trading
- Exchange integrations: connect Binance, KuCoin, XT, Bybit or OKX with your own API keys, then manage markets, coins, fiat currencies and trading fees.
- Spot orders and trades across the whole exchange.
- Binary trading: markets and payouts, trades, demo balances, and per-account restrictions for live or demo trading. Every trade settles on the market price at its expiry.
- P2P: payment methods, offers, trades, escrows, disputes, commissions, reviews and settings.
- Revenue: income from trading and withdrawal fees, with analytics.
Support
- Support dashboard, tickets and a live chat inbox.
- Canned responses, and a chat shield that pauses spam and abuse.
- AI agent settings: on or off, voice replies, and which account data it may read.
AI
- AI settings: your OpenAI key, stored encrypted and never sent to a browser; the model; a monthly token budget; and a connection test.
- Market Insights: the coins covered, how often notes refresh, each coin's note, and a note written or hidden on demand.
- Translations: languages and content types on or off, and every translation to review or edit.
Content and email
- Pages, a blog with SEO fields, a homepage layout editor, hero content, footer links and announcements.
- Email templates for every message, and bulk email.
Settings and system
- General and branding: site name and tagline, a text or image logo, a favicon, and the share image for link previews. Your site's name replaces Cryptora's everywhere, emails included.
- Theme: your brand colours, with site pictures that match the colour you pick.
- Languages: turn the shipped languages on or off, or add a new one translated by AI.
- Sign-up and sign-in: registration controls, email verification, a password policy and Google reCAPTCHA.
- Private admin address: an admin URL prefix of your choice.
- System: licence, one-click updates, system health and a Redis monitor.
User Features


Trading
- Spot trading: TradingView charts, a live order book, a depth chart and recent trades, with limit, market, stop-limit and stop-market orders.
- Binary trading: up or down trades on short timeframes, with a demo balance to practise first.
- P2P marketplace: offers with local payment methods, escrow on every trade, chat inside the trade, disputes, reviews, a dashboard for your own ads and a blacklist.
- Buy Crypto: pay through the 10 payment gateways, or from the fiat wallet.
Wallets
- Deposits: choose the coin and the network on one page, get the address and its QR code, and watch the deposit's status update live.
- Withdrawals: memo and destination tag fields, saved addresses and a withdrawal whitelist.
- Transfers between wallets, and the full history of every coin.
- A scratch card on a qualifying deposit, when a deposit reward campaign is running.
Verification and security
- KYC: verification levels with document upload and a guided face video.
- Account security: authenticator 2FA, an anti-phishing code, sign-in alerts, active devices with sign-out, recent IP addresses and an emergency lock.
- Close or deactivate the account at any time.
Support and information
- Live chat with the AI agent and human agents, with optional voice replies, and support tickets.
- Markets with live prices, coin pages, AI market notes, news, a blog, announcements, an FAQ and a fees page.
- A notification center on the site.
- API: personal API keys, stored hashed and shown once, and the API documentation.
Platform and Installation

- One-command installer for Ubuntu and Debian servers, then a setup wizard in the browser.
- One-click updates, with a backup first and automatic rollback.
- The member area in 7 languages: English, Spanish, French, Arabic (right to left), German, Japanese and Russian, plus any language you add with AI.
- Public pages translated by AI into Spanish, French and Arabic.
- Live prices, order books and chat over WebSocket, with Redis caching.
- Ready for search engines: page titles and descriptions, canonical and hreflang tags, a sitemap and structured data.
- Responsive on desktop, tablet and phone.
Live Demo
-> Website: https://cryptora.dev
-> Admin panel: https://cryptora.dev/admin
-> Admin email: [email protected]
-> Admin password: cryptora1234
-> Or press "Login as Demo Admin" on the admin login page.
-> The demo admin opens every screen read-only, with personal data blurred.
Technology Stack
- Next.js 14, React 18, TypeScript and Tailwind CSS.
- Node.js 20 or newer with PM2; the live data server runs in the same process.
- MariaDB or MySQL (tested with MariaDB 10.11 on Ubuntu 24.04 LTS), and Redis.
- A Python 3 worker for duplicate face and document detection (ONNX Runtime and OpenCV).
- The OpenAI API for the optional AI features.
What You Get
- The full source code of the exchange site, the admin panel and the live data server.
- The installer script, the setup wizard and the database file.
- The biometrics worker for duplicate KYC detection.
- The documentation in HTML.
- Future updates, and item support as described in Envato's item support policy.
Support

Installation, configuration and updates are explained step by step in the documentation included in the download.
Disclosures
AI Disclosure
Cryptora's AI features are optional: the AI Support Agent, Risk Copilot's case notes, Market Insights and AI Translations. Each stays off until an admin switches it on and enters their own OpenAI API key. Cryptora does not include, bundle or resell any AI subscription, model access or API key, and OpenAI bills the usage to the buyer directly. A monthly token budget in Admin > AI > Settings caps it. The default model is gpt-4o-mini; the optional voice replies use OpenAI's speech models with the same key.
- Support Agent: answers in the live chat, hands the chat to a human agent, opens a support ticket for a signed-in user and closes the chat when the user is done. Reading account data is off by default: when an admin allows it, the agent can read a signed-in user's balances, transactions and trades, and send them a PDF account summary after a one-time code check. It cannot place or cancel orders, move funds, approve withdrawals or change account settings, and it stops replying as soon as a human admin takes the chat.
- Risk Copilot: the checks themselves run without AI. With AI notes on, the facts of a case are sent to write its summary, with email and IP addresses removed, and flagged P2P chat messages are read too. Every decision on a case is made by an admin.
- Market Insights: sends public market figures and news stories about a coin; no user data.
- Translations: sends the text of the pages, posts, announcements and member screens being translated.
- AI answers can be wrong. Test each feature before you switch it on for your users.
Face Verification and Biometrics
Face verification records a short guided video of the applicant for a human reviewer to compare with their ID document. It is not automated liveness detection. Duplicate detection runs on your own server: the worker compares face captures and documents locally, and no image is sent to a third party. On its first run it downloads two face models from OpenCV Zoo: YuNet face detection (MIT licence) and SFace face recognition (Apache 2.0 licence), both free for commercial use.
Third-Party Services and Costs
Some features use outside services that are not part of this purchase. Depending on what you switch on, you need your own account with:
- A crypto exchange API for markets and liquidity: Binance, KuCoin, XT, Bybit or OKX.
- Payment gateways for Buy Crypto and fiat deposits: Stripe, PayPal, Razorpay, Flutterwave, Paystack, PayU, Mollie, Skrill, Mercado Pago or 2Checkout.
- OpenAI, for the optional AI features.
- MaxMind GeoLite2 (free licence key) or ip-api, for geo-blocking.
- An SMTP email service, and optionally Google reCAPTCHA.
- A server or VPS running Ubuntu or Debian.
You create these accounts, accept their terms and pay any fees they charge. Cryptora does not bundle, resell or cover the cost of any third-party service.
Preview Artwork Disclosure
The cover image, the description images and the browser frames around the screenshots are presentation artwork and are not part of the download. The screenshots are real pages of the live demo; the prices, balances, names and offers in them are demo data. The admin screenshots are taken as the demo admin, so email and IP addresses are masked and KYC pictures show as placeholders.
Buyer Responsibility and Regulatory Compliance
Cryptora is software. Running a crypto exchange is regulated in most countries, and you, as the buyer and operator, are solely responsible for any licensing or registration, anti-money-laundering and KYC duties, sanctions screening, tax, consumer protection and other rules that apply to your business, your users and your countries. The KYC, risk and geo-blocking tools help you operate, but they do not make you compliant on their own. Nothing in this item or its documentation is legal, tax or compliance advice.
Change Log
Version 1.0.0 (25-10-2026)
-> Initial release.
-> Spot trading with order book and charts, binary trading and a P2P marketplace with escrow.
-> Buy Crypto through 10 payment gateways, and multi-currency wallets.
-> AI: Risk Copilot fraud detection, support agent, market insights and translations.
-> KYC with face verification and duplicate KYC detection.
-> Risk and abuse detection, risk controls, geo-fencing and a global kill switch.
-> One-click updates with automatic rollback.
-> Member area in 7 languages, right-to-left ready.