How to Choose a Crypto Exchange Without Taking Hidden Risks

Where your coins sit decides your risk. A stock in a brokerage account is held for you under a set of US rules that has been tested through broker failures, while crypto at an exchange lives under a patchwork of state licenses, customer agreements and whatever the firm’s own records show.

So choosing an exchange is mostly a question of structure. Fees and features count for something, but neither helps much if the firm fails with your assets on its books.

Custody: who holds the keys

A private key controls a crypto asset. Whoever holds the key can move the coins.

On most exchanges, the exchange holds the keys and your account shows a balance. That balance is a record in the firm’s system. Some exchanges keep customer assets in segregated wallets, others pool them, and some lend them out or use them in other business, if the customer agreement allows it, and the only way to know which applies to you is to read the custody and insolvency sections of that agreement line by line.

A self-custody wallet puts the keys in your hands. Nobody can freeze your coins, and nobody can recover them if you lose the recovery phrase.

If the exchange fails

It’s the part the sign-up page skips.

Crypto held at an exchange is generally not covered by SIPC, which protects securities and cash held at member brokers, or by the FDIC, which insures deposits at insured banks. Cash is a separate case. Some exchanges hold cash balances at partner banks, and that cash may have deposit coverage under the FDIC’s rules while the coins in the same account have none.

If the customer agreement treats deposited crypto as the exchange’s property, you may be an unsecured creditor in a bankruptcy. You’d file a claim and wait alongside everyone else the firm owes money to, with no guarantee of getting all of it back, or any of it, and no say over how long the process takes. Losses from the trade itself are covered in whether you can lose more than you put in. This one’s separate. It can hit a position that was profitable.

Licensing in your state

No single federal license covers every crypto exchange. Many states require a money transmitter license, and some have their own crypto rules or charters. Find your state’s financial regulator, search for the exchange’s legal entity name exactly as it appears in the customer agreement, and confirm the license covers the state where you live, since a license held in one state says nothing about whether the firm may serve customers in another.

Some exchanges refuse residents of certain states. Believe them. Sign up anyway through a workaround and you have no regulator to complain to.

What trading really costs

Exchanges charge you in three places:

• Trading fees, often split into maker fees for orders that add liquidity and taker fees for orders that take it.
• The spread, which on simple buy and sell screens is often built into the quoted price.
• Withdrawal fees, charged per transfer and varying by coin and network.

Costs hide on the simple screen. It shows one price and a small fee, and the price itself may sit well above the market.

Before you buy, compare the quoted price with the exchange’s own order book or advanced screen. Then check withdrawal fees for the coins you hold. Moving coins off the exchange is your exit, and an exit that costs a lot is one you’ll keep putting off.

Security features

Many account takeovers start with a stolen password or a hijacked phone number. Look for two-factor authentication through an authenticator app or a hardware security key, both harder to hijack than text-message codes. Then look for a withdrawal address allowlist, a delay on new withdrawal addresses, and alerts for every login and every withdrawal, and switch every one of them on the day you open the account.

Tax records

The IRS treats digital assets as property. Selling crypto, swapping one coin for another and spending it can each be a taxable event, and to report each one you need the date, amount, cost basis and proceeds. Check that the exchange lets you download a full transaction history with basis, and export it at least once a year in case the firm, the account or your login disappears before you file. Current guidance is on the IRS page for digital assets. For the rest of the file, see what records a trader should keep for taxes.

Red flags

• Fixed returns promised on deposited coins.
• Insurance claims with no named insurer, limit or scope.
• No legal entity name or state license you can verify.
• Withdrawal pauses, or “maintenance” delays that drag on for days.
• Pressure to deposit fast for a bonus.
• A customer agreement that lets the firm use your assets without limits.

Keep it in proportion

On a phone screen a stock broker and a crypto exchange look alike, yet they sit under very different protection, so the checks in how to choose an online broker are only a starting point here. Keep on an exchange only what you’re actively trading, withdraw the rest to storage you control or shrink the position, and reread the agreement whenever the firm announces a change to it.