Choosing a cryptocurrency exchange is not only a question of finding the lowest trading fee or the largest selection of tokens.

An exchange may hold customer funds, process deposits and withdrawals, store personal identity information, provide leveraged products and control whether a user can access an account during periods of extreme market volatility.

This creates several types of exposure:

• market risk;
• custody risk;
• counterparty risk;
• cybersecurity risk;
• regulatory risk;
• operational risk;
• fraud risk.

Australian government guidance warns that many crypto providers may operate without the protections normally associated with licensed financial services, and users may have limited options if a platform fails or is hacked.

A professional website, mobile application or large social media following does not prove that an exchange is financially stable, appropriately authorised or capable of protecting customer assets.

This guide explains how to evaluate a cryptocurrency exchange before depositing money.

Key Takeaways

• Verify the legal entity behind the exchange rather than relying only on its trading name.
• Check whether the platform is permitted to offer the specific service in your jurisdiction.
• Registration, licensing and regulatory approval are not interchangeable terms.
• Compare complete trading costs, including spreads, withdrawal charges, funding and currency conversion.
• Review liquidity in the exact trading pair you intend to use.
• Understand whether the exchange controls the private keys to customer assets.
• Test the withdrawal process with a small amount before committing substantial capital.
• Security features reduce risk but do not guarantee that an exchange cannot fail or be hacked.
• Avoid platforms introduced through unexpected messages, guaranteed-return claims or requests for additional payments before withdrawal.
• Keep only the amount required for active trading on an exchange.

What Is a Cryptocurrency Exchange?

A cryptocurrency exchange is a platform that allows users to buy, sell or trade digital assets.

Depending on the platform, users may be able to exchange:

• fiat currency for cryptocurrency;
• one cryptocurrency for another;
• stablecoins for volatile assets;
• spot assets for immediate settlement;
• margin or derivative contracts;
• tokenised products.

Not every platform provides the same service.

Some businesses operate as brokers and quote their own purchase and sale prices. Others maintain an order book that matches buyers with sellers. Certain platforms combine brokerage, exchange, custody, staking, lending and derivatives within one account.

The business model affects:

• how prices are formed;
• which entity holds the assets;
• which fees apply;
• which legal protections may exist;
• what happens if the platform becomes insolvent.

Centralised vs Decentralised Exchanges

Cryptocurrency trading can occur through centralised or decentralised infrastructure.

Centralised Cryptocurrency Exchanges

A centralised exchange operates customer accounts and manages the trading infrastructure.

It may provide:

• account registration;
• identity verification;
• bank deposits;
• card purchases;
• order books;
• customer support;
• custodial wallets;
• transaction history;
• spot and derivative markets.

The exchange normally controls the private keys associated with assets held in customer accounts.

The user therefore depends on the platform to process withdrawals and maintain accurate internal balances.

Decentralised Exchanges

A decentralised exchange allows users to trade through blockchain-based smart contracts.

The user generally connects a compatible wallet and approves transactions directly.

A decentralised exchange may reduce dependence on a conventional custodial account, but it introduces other risks:

• malicious smart contracts;
• fake tokens;
• unsafe wallet approvals;
• bridge vulnerabilities;
• transaction errors;
• front-running;
• low liquidity;
• irreversible transfers.

A decentralised interface does not automatically mean that the service is safe, anonymous or legally unrestricted.

This article focuses primarily on centralised cryptocurrency exchanges because they commonly hold customer assets and provide fiat deposits.

Start With the Legal Entity

The first due diligence question should be:

Which company will actually hold my account and provide the service?

A trading brand may operate through several legal entities in different countries.

The website should disclose:

• the full company name;
• registration number;
• operating address;
• jurisdiction;
• applicable terms and conditions;
• entity responsible for customer assets;
• entity providing derivatives or other regulated products.

Do not assume that the company shown in a global website footer is the same company serving your account.

The applicable entity may depend on:

• country of residence;
• product selected;
• account type;
• website domain;
• mobile application;
• onboarding process.

Read the terms that apply during registration rather than relying only on the exchange’s general marketing pages.

Verify Company Details Independently

Company details should be checked through an independent official register where possible.

Look for consistency between:

• company name;
• registration number;
• domain name;
• physical address;
• customer support email;
• financial services authorisation;
• terms and conditions.

A registered company is not automatically a regulated financial service provider.

Company registration may only confirm that a legal entity exists. It may not permit that entity to operate an exchange, hold customer assets or offer derivatives.

Scammers may also copy the name, licence number and website design of a legitimate business. ASIC warned in June 2026 that criminals were increasingly impersonating licensed financial firms through cloned websites and advertisements.

Always verify that the website domain and contact details match the official register entry.

Understand Registration vs Licensing

The words registered, regulated and licensed are often used loosely in crypto marketing.

They can have materially different meanings.

Company registration

This normally confirms that a legal entity has been incorporated in a jurisdiction.

It does not necessarily authorise financial activity.

Anti-money-laundering registration

A platform may be registered for anti-money-laundering and identity-verification obligations.

This does not automatically mean that:

• customer deposits are guaranteed;
• the regulator has approved every token;
• the platform’s finances have been audited;
• the regulator will reimburse losses;
• every investment product is authorised.

Financial services licence

A licence may permit a business to provide specified financial services.

The permitted activities may be limited.

For example, an entity may have permission for one type of service but not for leveraged derivatives offered through another part of the website.

Crypto-asset service authorisation

In the European Union, MiCA establishes an authorisation framework for crypto-asset service providers, and ESMA maintains a central register containing authorised providers and other relevant records.

Authorisation can improve transparency and impose governance or conduct requirements. It does not remove market, custody, cyber or insolvency risk.

Check the Exact Product

Do not verify only the exchange brand.

Verify the specific product you intend to use.

An exchange may offer:

• spot cryptocurrency;
• margin trading;
• perpetual futures;
• dated futures;
• options;
• staking;
• lending;
• tokenised securities;
• copy trading.

Different products may be operated by different entities and subject to different rules.

A platform permitted to provide ordinary crypto exchange services may not necessarily be permitted to offer high-leverage derivatives in your jurisdiction.

ASIC has previously issued investor alerts concerning crypto futures products offered to Australians without the relevant authorisation.

Before opening a product, confirm:

• which entity provides it;
• whether it is available legally in your location;
• whether losses can exceed the initial amount;
• which dispute process applies;
• whether the asset is held directly or represented by a contract.

Review the Exchange’s Operating History

A longer operating history does not guarantee safety, but it provides more evidence to examine.

Consider:

• year of launch;
• changes in ownership;
• headquarters;
• previous names;
• acquisition history;
• regulatory actions;
• security incidents;
• withdrawal suspensions;
• major service outages.

A recently created platform may be legitimate. It simply has less public operating evidence.

Be cautious when a platform claims many years of experience but:

• the domain was registered recently;
• no archived history is visible;
• corporate records do not support the claim;
• leadership cannot be verified;
• published articles appear copied.

Examine Leadership and Ownership

Established exchanges should provide reasonable information about the people or organisations controlling the business.

Research:

• founders;
• senior executives;
• directors;
• major owners;
• parent company;
• previous businesses;
• professional history.

Anonymous ownership creates additional counterparty risk when the platform controls customer funds.

A public founder does not guarantee financial stability. It provides an additional layer of accountability and information.

Look for unexplained changes in:

• chief executive;
• legal entity;
• headquarters;
• bank relationships;
• terms and conditions.

Frequent structural changes can make it difficult to determine which company remains responsible to customers.

Compare Complete Trading Costs

The advertised trading fee is only one part of the cost.

A complete comparison should include:

• maker fee;
• taker fee;
• bid-and-ask spread;
• card deposit fee;
• bank deposit fee;
• currency conversion;
• cryptocurrency withdrawal fee;
• blockchain network fee;
• margin interest;
• perpetual futures funding;
• liquidation fees;
• inactivity or account charges.

Maker and Taker Fees

A maker order normally adds liquidity to the order book.

A taker order removes available liquidity.

Exchanges may charge different rates for each.

Fee tiers can depend on:

• monthly trading volume;
• account level;
• native exchange token holdings;
• subscription plan;
• product type.

Do not assume that the lowest advertised tier applies to a new account.

Spread

The spread is the difference between the best available buying and selling prices.

A platform may advertise zero commission while earning revenue through a wider spread.

Compare the actual amount of cryptocurrency received for the same fiat purchase across platforms.

A zero-fee purchase can be more expensive than a transparent exchange commission.

Withdrawal Fees

Some exchanges apply a fixed cryptocurrency withdrawal fee that differs from the actual blockchain network fee.

This can make small withdrawals uneconomical.

Check:

• minimum withdrawal amount;
• exchange withdrawal fee;
• supported networks;
• processing time;
• additional verification requirements.

The cheapest trading exchange is not necessarily the cheapest platform for depositing, trading and withdrawing the complete position.

Evaluate Liquidity

Liquidity determines how easily an asset can be traded without causing a substantial price movement.

A liquid market normally has:

• narrow spreads;
• deep order books;
• active buyers and sellers;
• lower slippage;
• consistent execution.

Liquidity must be checked in the exact pair being traded.

BTC/USD liquidity does not prove that a smaller ALT/EUR pair is liquid.

Look Beyond Reported Volume

A large reported 24-hour volume can be misleading.

Evaluate:

• order-book depth near the current price;
• normal spread;
• size available at each level;
• consistency throughout the day;
• volume distribution across pairs;
• whether activity appears concentrated in unusual trades.

A useful test is to estimate the average price at which your intended order would execute.

The visible last price may apply to only a very small amount.

Check Fiat Deposit Options

Fiat access affects cost and operational reliability.

Review:

• supported currencies;
• bank transfer methods;
• card support;
• deposit processing time;
• minimum deposit;
• deposit fee;
• name-matching requirements;
• third-party payment processors.

A bank transfer to an unrelated company or individual should be treated as a serious warning sign.

The payment recipient should be consistent with the disclosed exchange entity or an identified regulated payment partner.

Understand Custody

When cryptocurrency remains on a centralised exchange, the user normally does not control the private keys.

The account balance represents a claim against the platform’s internal system.

This is commonly summarised as:

Not your keys, not your coins.

The phrase is useful but incomplete.

Self-custody removes some exchange risk while introducing personal security and recovery responsibilities.

The relevant question is whether the custody arrangement is appropriate for the purpose of the funds.

Questions About Exchange Custody

Ask:

• Who legally holds customer assets?
• Are customer and company assets separated?
• Are most assets stored offline?
• Who controls withdrawal keys?
• Is an independent custodian used?
• Are customer liabilities independently verified?
• What happens during insolvency?
• Does the exchange lend or pledge customer assets?
• Can the terms be changed without direct consent?

Marketing statements about cold storage should not replace legal information about ownership and insolvency.

Proof of Reserves

Some exchanges publish proof-of-reserves reports or cryptographic attestations.

These can provide information about assets held at a particular time.

They may not show:

• complete liabilities;
• off-chain debts;
• related-party obligations;
• pledged assets;
• quality of internal controls;
• future solvency.

A reserve snapshot is not the same as a complete financial audit.

Review:

• who prepared the report;
• what date it covers;
• whether liabilities are included;
• whether customers can verify inclusion;
• whether the methodology is explained;
• how frequently it is updated.

Proof of reserves can be one due diligence input, not conclusive evidence of safety.

Review Account Security Features

A suitable exchange should provide practical controls that reduce unauthorised account access.

Useful features include:

• authenticator-app two-factor authentication;
• hardware security key support;
• withdrawal address allowlisting;
• anti-phishing codes;
• device and session management;
• withdrawal confirmation;
• account activity alerts;
• API permission controls;
• temporary withdrawal lock after security changes.

SMS verification alone may be vulnerable to SIM-swap attacks.

Security features are only effective when the user enables and manages them correctly.

Examine API Security

Traders may connect exchange accounts to:

• trading bots;
• portfolio trackers;
• tax software;
• analytical tools.

An API key can grant access without sharing the account password.

Permissions should be limited to what the service requires.

A portfolio tracker may need read-only access. A trading bot may need trading permission but should not normally require withdrawal rights.

Review and remove unused API keys regularly.

A compromised API with trading access can still cause losses through unauthorised orders even when withdrawals are disabled.

Test Deposits and Withdrawals

Before transferring substantial capital:

1. Create and secure the account.
2. Deposit a small amount.
3. Complete a simple trade.
4. Withdraw a small amount.
5. Confirm the asset arrives correctly.
6. Review the complete cost and processing time.

A successful small withdrawal does not guarantee that future withdrawals will always work.

It helps verify that:

• the account is functional;
• the address format is correct;
• the chosen network is supported;
• the platform does not impose an unexpected restriction.

Review Withdrawal Rules Before Depositing

Do not wait until you need to withdraw to read the policy.

Check for:

• minimum withdrawal amounts;
• daily limits;
• verification requirements;
• waiting periods;
• supported networks;
• manual review;
• restrictions after password changes;
• source-of-funds requests;
• regional limitations.

Additional compliance checks can be legitimate.

Repeated demands for new deposits, taxes or unlocking payments before funds can be released are a major scam warning.

A genuine tax obligation is normally handled through the relevant tax authority, not by sending cryptocurrency to an unknown wallet selected by a platform representative.

Customer Support Quality

Customer support becomes important when:

• a deposit is delayed;
• a withdrawal is suspended;
• the account is restricted;
• identity verification fails;
• an unauthorised login occurs.

Evaluate:

• available communication channels;
• support hours;
• ticket tracking;
• published response expectations;
• official support domains;
• escalation process.

Be cautious of supposed support agents contacting users through direct messages.

Scammers frequently impersonate exchange employees and ask for:

• passwords;
• two-factor authentication codes;
• seed phrases;
• remote device access;
• wallet transfers.

A legitimate support process should never require a wallet recovery phrase.

Read the Terms and Conditions

The terms determine the contractual relationship.

Review provisions covering:

• custody;
• asset ownership;
• account suspension;
• withdrawal restrictions;
• fees;
• service termination;
• dispute resolution;
• governing law;
• liability limits;
• data use;
• treatment during insolvency.

Pay particular attention to language allowing the platform to:

• lend customer assets;
• use affiliates;
• change fees;
• close positions;
• suspend withdrawals;
• terminate support for a token;
• reverse or cancel transactions.

Users often accept these terms without understanding how much operational discretion the exchange retains.

Review the Privacy Policy

Crypto exchanges collect sensitive information, including:

• identity documents;
• facial images;
• residential address;
• bank details;
• transaction history;
• device information.

Check:

• which entity controls the data;
• where it is stored;
• which service providers receive it;
• how long it is retained;
• whether biometric information is collected;
• what happens after account closure.

A platform can be financially reliable and still expose users to privacy risk.

Understand Insurance Claims

An exchange may state that assets are insured.

The statement requires clarification.

Ask:

• Which assets are covered?
• Is the policy held by the exchange or custodian?
• Does it cover hot-wallet theft?
• Does it cover account compromise?
• Does it cover employee misconduct?
• What is the maximum policy amount?
• Is coverage shared among all customers?
• Does it apply during insolvency?

Insurance rarely means that every customer loss will be reimbursed.

Read the scope rather than relying on the word insured.

Evaluate Available Cryptocurrencies

A large token selection can be convenient.

It can also expose users to low-quality or illiquid assets.

Review the exchange’s listing standards:

• Are project identities checked?
• Is liquidity evaluated?
• Are smart contracts reviewed?
• Are delisting rules published?
• How are token migrations handled?

Listing on a recognised exchange is not proof that a token is safe or fundamentally valuable.

Exchanges earn trading revenue and can have commercial incentives to add popular assets.

Delisting Risk

An exchange may remove a cryptocurrency because of:

• low liquidity;
• project inactivity;
• legal concerns;
• security incidents;
• network problems;
• failure to meet listing standards.

A delisting can reduce liquidity and create a withdrawal deadline.

Users should monitor announcements for every asset held on an exchange.

Holding a token on one platform creates additional risk when that platform represents most of its liquidity.

Evaluate the Trading Interface

A good interface should make risk visible rather than encourage impulsive activity.

Review:

• order confirmation;
• fee visibility;
• stop-order support;
• position-size display;
• leverage warnings;
• liquidation-price display;
• transaction history;
• export functionality.

Complex interfaces increase the probability of operational errors.

Common mistakes include:

• buying the wrong pair;
• selecting futures instead of spot;
• entering the wrong quantity;
• using cross margin accidentally;
• placing a stop in the wrong direction.

The interface should support the trader’s actual experience level.

Mobile Application Safety

Install mobile applications only through verified links from the official website or recognised application store.

Check:

• publisher name;
• number of downloads;
• review history;
• permissions;
• update history.

Fake exchange applications may imitate logos, charts and account balances.

An application displaying profit does not prove that real assets exist or can be withdrawn.

Warning Signs of a Fake Crypto Exchange

ASIC maintains investment scam alerts and recommends checking official warning lists before engaging with an entity.

Potential warning signs include:

• unexpected contact through social media or messaging applications;
• guaranteed profits;
• risk-free trading claims;
• pressure to deposit quickly;
• personal account manager promising returns;
• celebrity or government impersonation;
• recently created website;
• missing legal entity;
• copied licence details;
• fake account profits;
• inability to withdraw;
• demand for additional payment before withdrawal;
• remote-access software requests;
• instruction to keep the opportunity secret.

Moneysmart specifically warns that unexpected investment contact and requests involving crypto should be treated cautiously because transferred funds can be difficult to recover.

Romance and Social-Media Investment Scams

A common scam begins with contact that appears unrelated to investment.

The person may build trust over days or weeks before introducing a crypto platform.

The victim is guided through:

• creating an account;
• making a small deposit;
• viewing fabricated profit;
• depositing a larger amount;
• paying a supposed tax or fee;
• losing access to the funds.

The FTC warns that a person met through a dating application who offers to teach crypto investing or asks for cryptocurrency should be treated as a scammer.

Never select an exchange solely because an online contact recommends it.

Fake Profit Dashboards

A fake exchange can display any account balance it chooses.

The dashboard may show:

• profitable trades;
• staking rewards;
• bonus deposits;
• rapidly increasing returns.

These figures may not correspond to blockchain assets or real market activity.

The relevant test is whether funds can be withdrawn without paying invented charges.

Even a successful early withdrawal can be part of the scam. A small payment may be allowed to encourage a much larger deposit.

Guaranteed Returns

No cryptocurrency exchange can guarantee that a user will profit from market trading.

Warning language includes:

• guaranteed daily return;
• zero-risk investment;
• fixed AI trading income;
• insured trading profit;
• automatic recovery of losses;
• exclusive institutional strategy.

Government scam guidance consistently identifies guaranteed or unusually high return claims as a warning sign.

An exchange provides market access. It does not control the future price of the assets traded.

Exchange Comparison Checklist

Area	Questions to ask
Legal entity	Which company operates the account?
Jurisdiction	Where is the entity registered and supervised?
Authorisation	Is the specific product permitted in my country?
Ownership	Are founders, directors and major owners identifiable?
Fees	What is the complete cost of depositing, trading and withdrawing?
Liquidity	Can my intended order execute without substantial slippage?
Custody	Who controls the private keys and customer assets?
Reserves	Are assets and liabilities independently assessed?
Security	Are strong two-factor authentication and withdrawal controls available?
Withdrawals	What limits, reviews and fees apply?
Support	Can the company be contacted through verified channels?
History	Has it experienced hacks, outages or regulatory action?
Privacy	How are identity and transaction data used?
Derivatives	What leverage, funding and liquidation rules apply?
Scam checks	Does the domain appear on any official warning list?

A Practical Exchange Selection Process

Step 1: Define the Required Service

Decide whether you need:

• fiat purchase;
• spot trading;
• recurring purchases;
• derivatives;
• API access;
• institutional account;
• self-custody withdrawal.

Do not select a complex derivatives exchange when the actual need is a simple Bitcoin purchase.

Step 2: Create a Shortlist

Select several platforms that appear to serve your jurisdiction and required product.

Avoid making a decision based on one sponsored comparison.

Step 3: Verify Each Legal Entity

Check:

• corporate register;
• financial services register;
• official warning lists;
• terms and conditions;
• domain name.

Step 4: Compare Complete Costs

Estimate the full cost of a realistic transaction:

1. deposit fiat;
2. buy the asset;
3. sell or convert it;
4. withdraw the funds.

Step 5: Check Liquidity

Review the spread and order-book depth in the intended trading pair.

Do this during normal and volatile market conditions where possible.

Step 6: Review Security and Custody

Confirm available security controls and understand who holds the private keys.

Step 7: Test the Platform

Use a small deposit, trade and withdrawal.

Do not increase the balance until the complete workflow is understood.

Step 8: Limit Ongoing Exposure

Keep only the capital needed for the intended exchange activity.

Periodically review:

• account security;
• exchange terms;
• withdrawal access;
• API keys;
• platform announcements.

Should You Use More Than One Crypto Exchange?

Using several exchanges can reduce dependence on one platform.

It may provide:

• alternative liquidity;
• backup fiat access;
• access during an outage;
• separation of trading strategies.

It also creates:

• more passwords and security keys;
• additional identity exposure;
• fragmented records;
• increased operational complexity;
• more counterparties.

Diversifying across exchanges reduces concentration but does not remove exchange risk.

Each additional account should have a clear purpose.

How Much Crypto Should Be Kept on an Exchange?

There is no universal amount.

The balance should reflect:

• trading frequency;
• withdrawal cost;
• custody ability;
• platform risk;
• capital required for open orders.

Long-term assets not required for trading may be moved to a suitable custody arrangement.

Self-custody should only be used when the owner understands:

• seed phrase security;
• wallet backups;
• blockchain networks;
• transaction verification;
• inheritance or recovery planning.

Removing assets from an exchange replaces counterparty risk with personal custody risk.

What to Do if an Exchange Freezes Withdrawals

A withdrawal suspension does not always prove fraud.

It may result from:

• technical maintenance;
• blockchain congestion;
• security review;
• identity verification;
• legal restriction;
• liquidity problems.

Take the following steps:

1. Save account records and communications.
2. Verify announcements through official channels.
3. Do not trust direct messages claiming to offer support.
4. Request a written explanation.
5. Check the applicable terms.
6. Contact the relevant regulator or complaint body.
7. Do not send additional funds to unlock the account.
8. Report suspected fraud promptly.

Speed matters because cryptocurrency transfers can be difficult to reverse.

Frequently Asked Questions

What is the safest cryptocurrency exchange?

No exchange can be described as completely safe.

A stronger candidate normally has a verifiable legal entity, appropriate authorisation, substantial liquidity, transparent fees, robust security and a reliable withdrawal history.

Does a crypto licence guarantee my money?

No.

Licensing or registration may impose requirements, but it does not guarantee asset value, prevent every hack or ensure reimbursement after insolvency.

Are large crypto exchanges safer?

Size can provide liquidity and infrastructure.

Large platforms can still experience security, operational, legal or financial failure.

Is proof of reserves enough?

No.

Proof of reserves may show certain assets at a particular time but may not reveal complete liabilities or financial obligations.

Should I choose the exchange with the lowest fees?

Fees are one factor.

A low-cost platform may have poor liquidity, weak support, limited withdrawal options or unclear custody arrangements.

Is it safe to leave cryptocurrency on an exchange?

Leaving assets on an exchange exposes the user to platform and custody risk.

Self-custody introduces personal security and recovery risk. The appropriate choice depends on the purpose and the user’s competence.

Can an exchange prevent me from withdrawing?

Exchanges may suspend or review withdrawals under their terms, security procedures or legal obligations.

A repeated demand for additional deposits before withdrawal is a strong scam warning.

How can I check whether an exchange is regulated?

Identify the exact legal entity and search the relevant official financial services or crypto-provider register.

Confirm that the authorised domain and permitted activities match the service offered.

Are decentralised exchanges safer?

They reduce some centralised custody risks but introduce smart contract, wallet, token and transaction risks.

They are not automatically safer.

Should beginners use crypto derivatives exchanges?

Derivative products introduce leverage, funding and liquidation risk.

Beginners can obtain cryptocurrency market exposure without leverage through ordinary spot trading.

Final Thoughts

Choosing a cryptocurrency exchange is a counterparty decision, not merely a software preference.

The platform may control account access, customer assets, personal information and execution during the exact market conditions when reliability matters most.

A practical selection process should verify:

• the legal entity;
• applicable authorisation;
• complete fees;
• real liquidity;
• custody arrangements;
• security controls;
• withdrawal rules;
• customer support;
• operating history.

The exchange with the largest token list or most aggressive promotion is not necessarily the strongest choice.

The objective is not to find a platform with no risk. Such a platform does not exist.

The objective is to identify the relevant risks, avoid obvious warning signs and limit the amount of capital exposed to any one provider.

Financial education notice: This article provides general educational information and does not constitute personal financial, legal or investment advice. Cryptocurrency exchanges and digital assets involve market, custody, cybersecurity, regulatory and total-loss risk.