This is not investment advice. The information provided is for educational and informational purposes only and does not constitute a recommendation to buy or sell any financial product.
Picking a crypto exchange is mostly an exercise in avoiding failure modes. The good ones are good in similar ways; the bad ones fail differently. A few large, regulated exchanges (Coinbase, Kraken, Interactive Brokers for some markets) have been operating for 8+ years without losing customer funds. The long tail of small or unregulated exchanges is where most of the user losses have happened.
The aim here is a practical 7-point checklist that catches the structural risks before you deposit.
1. Where is the exchange regulated, and by whom?
This is the single most important factor. Tier-1 regulators (FinCEN-registered MSBs in the US with state money transmitter licenses, FCA in the UK, BaFin in Germany, FINMA in Switzerland, ASIC in Australia, MAS in Singapore) impose capital requirements, segregation rules, and audit obligations. An exchange registered with a tier-1 regulator is materially safer than one registered only in an offshore jurisdiction (Seychelles, BVI, Marshall Islands).
Practical check: the exchange's footer should show a registration number. Look it up on the regulator's website. If the registration is offshore, treat it as a higher-risk venue regardless of how long it's been operating.
2. How is customer money held?
The standard is segregated customer funds in a separate bank account from the company's operating funds. This is required by tier-1 regulators. If the exchange goes bankrupt, customer funds are supposed to be returned, not absorbed into the estate.
Not all exchanges do this. Some pool customer funds with their own treasury. The 2022 FTX collapse is the textbook example of what happens when segregation is missing. Before depositing, look for:
- A statement on the exchange's website about segregated client funds
- Audit reports (some exchanges publish third-party audits)
- Cold storage practices (the bulk of customer crypto should be in cold wallets, not hot wallets)
3. What coins are listed, and how does the exchange decide?
The exchange's listings tell you about its risk appetite. A venue listing only Bitcoin, Ethereum, and the top 30 tokens by market cap has done at least some diligence on the projects. A venue listing 600 altcoins, including pre-sales and freshly minted tokens, has not.
A practical rule: if you only plan to trade the top 20-30 tokens by market cap, this doesn't matter much — the top venues list all of them. If you want to trade smaller or newer tokens, you'll need a venue with a wider listing, and the regulatory scrutiny of that venue will be weaker.
4. What are the withdrawal limits and fees?
The fee structure tells you a lot. Tier-1 regulated exchanges compete on fees, with maker-taker fees of 0.05-0.30% on spot trades and reasonable withdrawal fees. Some venues advertise "0% fees" but compensate with wider spreads or higher withdrawal costs.
A practical test: deposit a small amount ($100-200), make a trade, and withdraw. The total cost tells you the real fee. If the actual cost is much higher than the website suggests, the venue isn't being honest.
5. What is the KYC and account verification experience?
A venue with proper KYC asks for your passport, proof of address, and sometimes a selfie. This is a feature, not a bug — it means the venue is complying with anti-money-laundering rules, which is correlated with regulatory oversight.
A venue that doesn't ask for KYC, or only asks for an email address, is operating outside most regulatory regimes. That doesn't make it a scam, but it does mean no recourse if something goes wrong and withdrawal limits are likely low.
6. How long has the exchange been operating, and what is its track record?
Operating history is informative. The 2014 Mt. Gox hack, the 2019 QuadrigaCX collapse, the 2022 FTX collapse — these were all "established" exchanges at the time. So track record alone isn't enough. But combined with regulatory status, it's a useful signal.
Coinbase has operated since 2012, Kraken since 2011, Bitstamp since 2011, Gemini since 2014. None of them have lost customer funds (Gemini had a small incident in 2023 with the Earn program, related to Genesis, but main customer funds were safe). For longer histories, the regulatory regime has often changed, so the early years of these exchanges are less informative than the last 5-7 years.
7. What is the customer support experience like?
This is the most underrated factor. Most exchanges have terrible customer support, but the level of terrible varies. A venue with a working live chat and email response within 24 hours is materially better than one with only a contact form and a 2-week response time.
You can test this before depositing: send the support team a question. The speed and quality of the response tells you a lot about what happens when something goes wrong.
Putting it together
A reasonable profile of a low-risk exchange:
- Regulated in a tier-1 jurisdiction (US, UK, EU, Australia, Canada, Japan, Singapore, Switzerland)
- Segregated customer funds with a published audit
- Top 30+ tokens listed, plus a small selection of vetted altcoins
- Spot fees of 0.05-0.30%, withdrawal fees of $1-15 per transaction
- KYC required (passport + proof of address)
- 5+ years of operating history with no major customer-fund loss
- Live chat support and email response within 24 hours
What to avoid
- Exchanges offering leverage above 1:5 on retail crypto without regulatory justification
- Exchanges advertising "0% fees" without explaining how they make money
- Exchanges with offices only in jurisdictions with weak oversight
- Exchanges that won't tell you where they're regulated
- Exchanges whose customer support takes more than 48 hours to respond
- Any exchange recommended via Telegram DMs
FAQ
What's the safest crypto exchange?
Depends on your jurisdiction. In the US, Coinbase and Kraken are the safest large options. In the EU, Kraken and Bitstamp (the longest-running EU exchanges). In the UK, Kraken and Coinbase UK. The common factor: tier-1 regulation, segregated funds, and a long operating history.
Should I use a broker instead of an exchange for crypto?
For most retail traders, yes. A regulated broker that offers crypto (Interactive Brokers, Saxo, Kraken via its broker arm) gives you access to spot crypto with the same regulatory protection as the rest of your trading account. The cost may be slightly higher than a pure crypto exchange, but the integration with your other investments is worth it for most people.
What about DEXes for safety?
DEXes are safer in one specific way: no counterparty risk from the venue itself. They're less safe in others: smart contract risk, no regulatory recourse, more user error exposure. For most retail traders, a regulated CEX is the better default.
How much crypto should I keep on an exchange?
As little as possible. Hold what you'll trade in the next 1-3 months on the exchange. Hold the rest in a hardware wallet. The exchange is for trading, not custody.
Related resources
Where to start
If you want a regulated platform that offers crypto alongside traditional assets, see our broker table — we filter for exchanges and brokers with proper crypto regulation.