Coinmama is legitimate by any reasonable test. It has operated since 2013, which is older than most exchanges, and its operating company, Cmama Ltd., is registered in Ireland, registered with FinCEN as a money services business for its U.S. customers, and registered with FINTRAC in Canada. It verifies every customer with ID and a selfie before a first purchase. And it never holds your coins: every order is sent to the wallet address you enter, so there is no balance for a hack or an insolvency to take.
Its public reviews are middling rather than alarming: a Trustpilot profile around 3.6 out of 5 across roughly 880 reviews. The complaints are about cost, about accounts closed after verification with a slow refund, and about email replies that take a day or two. Those are process complaints, and they describe a company that is careful with compliance and thin on support, not a fraud. One thing Coinmama does not publish is a list of U.S. state money transmitter licenses of its own, which is why it excludes New York and Louisiana.
Anytime Capital is a U.S. money services business with a storefront in Atlanta and an office in Miami. The same identity checks and bank declines happen here, because they are part of the business. The difference is that a stuck order ends with a call to (470) 748-2530 rather than a 48-hour inbox.