ChangeNOW NOW AI Review: Security Lab Launch and Platform Integration

ChangeNOW introduced NOW AI on October 15, 2026, as an internal security initiative aimed at improving threat detection across its non-custodial swap platform. The launch followed the disclosure and repair of a website integration flaw discovered with external researchers. The incident exposed no customer funds and did not impact core transaction systems.

Platform Background and NOW AI Introduction

ChangeNOW operates as a non-custodial instant crypto swap service launched in 2017. It aggregates liquidity for over 1,500 cryptocurrencies across 110 blockchains and supports 70 fiat currencies through partner channels. Standard swaps complete in roughly one minute with a reported 98 percent success rate. The company maintains no order book and does not custody user assets during routine exchanges. Registered users number between five and eight million according to public reports.

NOW AI is positioned as a dedicated protection lab that applies artificial intelligence to earlier threat detection, phishing prevention, and vulnerability triage. Company statements indicate the October incident accelerated the timeline. No technical specifications, coverage scope, first customer deployments, or revenue model have been released yet. A dedicated page with further plans is expected on the official site in the coming weeks. Existing platform elements such as AML monitoring, selective KYC in regulated regions, and blockchain analytics remain separate from the new lab.

Additional ChangeNOW products include NOW Wallet, Pro subscription tiers offering cashback, staking, loans, and API or widget integrations for external services. The broader offering has expanded toward a crypto super app with separate AI hub and chat features that predate the Security Lab announcement.

Security Response, Integration, and Privacy Controls

The disclosed vulnerability affected one website integration and was limited to potential exposure of email addresses and transaction metadata. No evidence of exploitation appeared in public records. ChangeNOW stated it contacts users exclusively through support@changenow.io and never requests private keys or passwords. Users received guidance to verify communications and watch for phishing attempts referencing actual activity.

NOW AI integration into existing workflows has not been detailed. The lab is described internally as a defensive measure rather than a customer-facing product at this stage. Analysts note it functions more as a cost center focused on raising baseline standards than as a revenue-generating tool. The non-custodial model continues to limit direct fund exposure regardless of security tooling updates.

Privacy practices rely on the same selective KYC requirements applied in jurisdictions such as the EU and United States. No major prior incidents resulting in fund losses have been documented in independent reviews of the platform. Trustpilot aggregates around 13,000 reviews with an average score near 4.5 out of 5.

Limitations, Comparisons, and Current Assessment

NOW AI currently lacks published pricing, usage documentation, or measurable benchmarks. Roadmap items, API access details, and performance metrics remain unavailable as of late October 2026. This absence makes direct comparison with established security services difficult. Potential users must wait for the promised dedicated page to evaluate concrete capabilities.

Competitors in the instant swap space include services such as SimpleSwap and FixedFloat, which maintain similar non-custodial models and comparable asset coverage. None of these platforms have announced equivalent AI-driven security labs to date. ChangeNOW's scale, measured by user base and blockchain support, exceeds several smaller aggregators, yet the new lab adds no immediate functional differentiation beyond the stated intent.

Key constraints include the early-stage status of the initiative, absence of third-party audits specific to NOW AI, and reliance on future disclosures for assessment. The platform continues normal operations for swaps, wallet services, and API usage without reported disruption from the recent fix. Ongoing vigilance against phishing remains the primary user-side recommendation following the October announcement.