wardcrest

How to buy crypto safely

A step-by-step first purchase: choosing a regulated exchange, securing the account, understanding fees and spreads, and moving coins to your own wallet safely.

Updated 14 Sept 2026 · Beginner · 4 min read

In short

  • Buy through a regulated exchange or broker that you reached by typing its address yourself, never through a link, an advert or someone who contacted you.
  • Secure the account with an authenticator app or security key before you deposit anything.
  • Know the full cost, including the spread, and send a small test before moving coins to your own wallet.

Before you buy

Decide how much you can afford to lose and where you will keep the coins afterwards. Crypto prices can fall sharply, so money you need for rent or bills should stay out. This guide covers the mechanics of buying safely; it is not financial advice.

Look at what you are buying first. The markets page shows each coin’s price, market cap and trading volume, and understanding prices and market cap explains what those numbers do and do not tell you.

Step 1: choose where to buy

  • Regulated where you live. In the EU, firms offering crypto services need authorisation under MiCA, and ESMA publishes a register of them. In the UK, check the FCA register. In the US, check that the exchange is licensed to operate in your state.
  • Found by you. Type the exchange’s address yourself or use its official app. Search adverts, social media messages and “account managers” who contact you first are how fake platforms find their victims.
  • Clear about fees. Look for the trading fee, any card or deposit fee, and the fee for withdrawing coins to your own wallet.
  • Honest about withdrawals. Some apps let you trade crypto prices without ever letting you withdraw the coins. That may suit you, but know which you are getting.

Step 2: secure the account

  1. Use a long, unique password, ideally generated by a password manager.
  2. Turn on two-factor authentication with an authenticator app or a hardware security key. Avoid SMS codes: criminals can take over a phone number by persuading a mobile operator to move it to their SIM card.
  3. Turn on the withdrawal address allowlist if the exchange offers one, so coins can only go to addresses you have approved, usually after a waiting period.
  4. Treat any email or text about “suspicious activity” that contains a link as suspicious in itself. Open the app or type the address instead.

Step 3: know what you really pay

The cost has layers. There is the trading fee, usually a percentage. There is the spread, the gap between the price you buy at and the price you could sell at, which “instant buy” buttons often widen quietly. And paying by card usually costs more than a bank transfer.

crypto received ≈ amount paid × (1 − fee) ÷ (1 + spread)
Illustrative numbers: $500 with a 0.5% fee and a 1% spread buys about $492.57 of crypto at the market price. Selling later costs a fee and a spread again.

Compare the exchange’s quote with the reference price in our converter; a large gap is a cost. The profit calculator shows the price you would need to sell at just to break even after fees on both sides.

Step 4: start small

Make your first purchase a small one and go through the whole cycle: buy, withdraw a little to your own wallet and, if you like, sell a little back. You learn how long each step takes and what it really costs while mistakes are still cheap.

Step 5: move it to your own wallet

  1. Set up a wallet you control, and for larger amounts a hardware wallet. Crypto wallets explained compares the options, and exchanges vs self-custody explains why it matters.
  2. Copy a receive address from the wallet and check it with our address validator, which names the network and catches typos.
  3. Choose the matching network in the exchange’s withdrawal form. The same token can exist on several networks, and sending on one your wallet does not support is a common way to strand funds.
  4. Send a small test and confirm it arrives before sending the rest.
  5. Before every large withdrawal, check the pasted address character by character, or on your hardware wallet’s screen. Clipboard malware can swap an address after you copy it.

Red flags

  • Anyone who offers to help you buy, trade or “recover” crypto after contacting you first.
  • A platform that promises fixed high returns, or shows large gains but wants a “tax” or “release fee” before you can withdraw.
  • A request to install remote-access software, or to share your screen while you sign in.
  • Any request for your seed phrase. The answer is always no.

How to spot crypto scams covers more patterns, and how to check an address or a token before you pay.

Put it into practice