How to choose a crypto exchange: security, fees, access

How to choose a crypto exchange: first confirm the exchange legally serves residents of your country and supports a funding method you can actually use; then check how it holds customer money (Proof of Reserves, hack history, segregation of funds); only after that compare fees, liquidity and coin selection. A low trading fee is worth nothing if withdrawals get frozen or the platform goes bankrupt, so the order of the checks matters more than any "best exchange" list.

Choosing an exchange is really a custody decision

A centralized exchange is not just a place to buy bitcoin. While your coins sit in your account, the exchange holds them and you hold an entry in its database. The U.S. SEC's investor alert puts it plainly: crypto platforms often combine exchange, broker-dealer and custody functions that traditional finance splits across separately regulated firms, and that commingling creates conflicts of interest. The same alert notes that there is no SIPC- or FDIC-style protection for accounts at crypto firms.

Two reminders that this is not theoretical:

• FTX. According to the second interim report by bankruptcy CEO John J. Ray III (June 2023), FTX.com owed customers about $8.7 billion, and customer assets had been commingled with company funds and misused (FXStreet).
• Bybit. On or about February 21, 2025, roughly $1.5 billion in crypto was stolen from the exchange; the FBI attributed the attack to North Korea (IC3). Chainalysis and TRM Labs estimated total crypto theft in 2025 at $2.7 billion, as reported by TechCrunch.

Bybit kept operating after the hack; FTX did not. The difference is exactly what you are checking for: whether a platform has enough reserves to cover everything it owes customers.

Step 1: Is the exchange available where you live?

This filter removes half the options before you ever compare fees. Check three things:

1. Terms of service. The "Restricted Jurisdictions" section lists countries whose residents the exchange will not serve. Signing up through a VPN breaches the terms, and an account can be closed during identity checks.
2. A local license. In the EU, the longest MiCA transition period ended on July 1, 2026. ESMA maintains an interim register of authorized crypto-asset service providers (CASPs) plus a list of non-compliant entities. Regulators in the UK, Japan, Singapore, the UAE and elsewhere publish similar registers; in the U.S., check state money-transmitter licensing and whether the platform serves your state.
3. Deposits and withdrawals in your currency. Bank transfer, card and P2P each have their own costs and blocking risks. Find out withdrawal limits before you deposit, not after.

Access rules change often, especially for users in sanctioned or restricted regions. We cover those changes in our news section.

Step 2: How the exchange holds your money — Proof of Reserves

Proof of Reserves (PoR) is evidence that an exchange's wallets hold at least as many coins as it owes customers. A solid setup looks like the one Kraken describes: an independent auditor snapshots all customer balances into a Merkle tree, the exchange signs messages proving control of its on-chain addresses, and each customer can verify their own balance is included. For its June 30, 2026 snapshot, Kraken reports BTC reserves at 102.9% of customer balances.

Know the limits. Kraken lists them on the same page: PoR is a point-in-time picture, it cannot see hidden liabilities, and it cannot prove the funds were not borrowed just to pass the review. The SEC alert likewise warns that such reports may not provide meaningful assurance. Treat PoR as the minimum bar, not a seal of quality:

• Does it include liabilities (a Merkle tree), not just wallet addresses?
• Who is the auditor, and how independent are they?
• How often is it published, and can you verify your own balance?

Step 3: Crypto exchange fees — what you actually pay

The cost of a trade has several layers, and the headline trading fee is often not the biggest one.

Example using Kraken's fee schedule as of October 21, 2026: the base Kraken Pro rate is roughly 0.4% maker and 0.8% taker, while an instant buy in the app costs 1% plus spread and payment-method fees. On a $1,000 purchase, a resting limit order costs about $4; an instant buy starts at $10. That is a multiple on the same exchange, so compare the specific way you will buy, not just exchange A versus exchange B. On most platforms fees fall as your 30-day volume rises.

Step 4: Liquidity and volume — what it looked like on October 21, 2026

Liquidity is how deep the order book is: whether you can buy or sell a given amount without moving the price much. Volume is a rough proxy, and volume is not the same as trustworthiness.

Our exchange ranking is ordered by CoinGecko's Trust Score (a 1⁠–⁠10 scale covering liquidity, regulation, cybersecurity, past incidents and Proof of Reserves). As of 2:00 PM ET on October 21, 2026:

• Coinbase Exchange ranked first (Trust Score 10) with about 19,100 BTC in 24-hour volume;
• Binance (also 10, ranked third) did about 106,600 BTC — roughly 30% of the combined volume of the 22 exchanges in the table;
• Bybit, with a Trust Score of 9, ranked tenth on about 24,300 BTC.

The takeaway: the biggest volume does not make an exchange the most trusted, and for a purchase of hundreds or a few thousand dollars, any exchange near the top of the ranking has more than enough liquidity. For large orders, look at the order book for the specific pair, not headline turnover.

Step 5: Coins, products and support

Coin selection matters if you want more than BTC and ETH. In our data as of 9:15 AM ET on October 21, 2026, MEXC listed 386 coins from our catalog against USDT, KuCoin 335, Binance 255 and Bybit 225. A wide listing is convenient, but the more small tokens there are, the larger the share of thinly traded projects — that is a property of the market, not of the exchange.

If you are new, derivatives and leverage should not drive your choice: on futures, a position can be force-closed after a move of a few percent. Better questions: is support available in your language, does it give real answers (ask something before you deposit), and does the exchange offer withdrawal address whitelisting?

Checklist before your first deposit

1. Your country is not on the restricted list, and the license appears in the regulator's register.
2. There is a recent Proof of Reserves report with liabilities and self-verification.
3. You know the exchange's history: hacks, withdrawal pauses, and how customers were made whole.
4. You have priced the full cost: the fee for your buying method, deposit and withdrawal.
5. You have enabled app-based two-factor authentication (not SMS), an anti-phishing code and an address whitelist.
6. You have run a test cycle: small deposit, buy, withdraw to your own wallet.
7. You plan to keep long-term holdings in your own wallet rather than on the exchange.

Common mistakes

• Picking by sign-up bonus. The bonus is one-off; custody risk is ongoing. Some links in our ranking are affiliate links — this is disclosed on the page and does not change the data in the table.
• Confusing the exchange with the in-app broker. The "Buy" button is almost always pricier than the order book on the same platform.
• Keeping everything on one exchange. Even a sound platform can freeze withdrawals during an investigation or a document review.
• Signing up via VPN from a restricted country. That is a breach of terms, not a hack.
• Trusting undated rankings. Fees, licenses and country access change; check them on the day you sign up.

FAQ

What is the safest crypto exchange? There is no universal answer: it depends on licensing where you live, reserve transparency and incident history. You can compare large platforms by Trust Score in the CoinLab ranking.

Is it safe to keep bitcoin on an exchange? Reasonable for active trading, risky for long-term storage: the exchange controls the keys. As the SEC notes, there is no deposit insurance for crypto accounts.

Should I use more than one exchange? Yes, it spreads risk: one platform for local-currency deposits, another for trading, and your own wallet for storage.

Where can I check the bitcoin price before buying? See the aggregated price and market indicators on the CoinLab dashboard and the bitcoin page; compare it with the in-app price to see the spread.

This is not investment advice.