DeFi Market
If you're searching how to buy crypto safely, start with this: no purchase is risk-free, but most beginners who lose money don't lose it to the market. They lose it to the route they took to buy. Use a platform you've checked is registered, get to it by typing the address yourself, protect the account with an authenticator app, and start with a small test buy. And never buy through someone you met online, a "mentor," or a bitcoin ATM someone told you to use.
Why the way you buy matters more than what you buy
Crypto losses reported to the FBI keep climbing. The FBI's 2025 Internet Crime Report, released in April 2026, counted 181,565 crypto-related complaints and $11.4 billion in losses. Crypto investment fraud alone was $7.2 billion, the largest loss category of any kind.
Little of that came from someone buying on a registered exchange and watching the price fall. It came from fake platforms, fake support agents, fake apps and online "friends" who walked people through the purchase. The buying step is where a scammer needs you to follow instructions, so that's where your checks belong.
Before you buy: the 5-minute check
Do this once, before you open an account anywhere.
| Minute | Check | Pass | Stop if |
|---|---|---|---|
| 1 | How did you hear about this platform? | You found it yourself, or a friend you know in person uses it | A stranger, a "mentor," a dating match or a DM sent you the link |
| 2 | Search the company's legal name at FinCEN's MSB Registrant Search | It's listed, with an address you can check | No listing, or the name on the site doesn't match any record |
| 3 | Check your state: NMLS Consumer Access, or the NYDFS list if you live in New York | It's licensed or registered where you live | It isn't, and it can't tell you why |
| 4 | Search the name plus "scam," and check the CFTC RED List and California's Crypto Scam Tracker | Nothing on the warning lists | It appears on any warning list |
| 5 | Find the official app through the company's own site, then check the publisher name in the app store | The publisher matches the company's legal name | The publisher is a name you've never seen, or the app came from a link |
One warning about minute 2. A listing proves less than it looks. FinCEN's MSB Registrant Search says plainly that inclusion "is not a recommendation, certification of legitimacy, or endorsement of the business by any government agency," and that FinCEN doesn't vet what registrants submit. So treat registration as the minimum. Missing it is a stop sign. Having it is a starting point.
State licensing is the stronger check. NMLS Consumer Access is the free public lookup most state regulators use. New York runs its own system: the NYDFS virtual currency page lists every firm it has licensed or chartered, with the date granted. For a deeper look at a platform, our crypto due diligence checklist goes further.
How to buy crypto for beginners: step by step
- Pick a platform and run the 5-minute check. We don't rank platforms, and you shouldn't trust anyone who ranks them while earning a referral fee. What matters is that it's registered where you live and you found it on your own.
- Get there yourself. Type the web address by hand, then bookmark it. Don't click a search ad. The FBI warned in a December 2022 alert that criminals buy search ads that look like real exchanges and lead to lookalike login pages. On a phone, open the app store yourself and check the publisher before you install.
- Lock the account before you add money. Use a password you've never used anywhere else. Turn on two-factor authentication with an authenticator app or a hardware security key, not text messages. In 2021 alone the FBI received 1,611 SIM swapping complaints with more than $68 million in losses, according to its February 2022 alert. In a SIM swap, a criminal takes over your phone number and receives your text codes.
- Verify your identity. A registered US platform will ask for your ID and personal details. That's normal.
- Fund it from your own bank account. A bank transfer or a debit card in your name. Read the full cost breakdown on the confirmation screen before you tap buy (fees are covered below).
- Make a small test buy. Buy an amount you'd be fine losing. Then try a small withdrawal back to your bank, so you know the exit works before you put real money in.
- Decide where it lives. Leaving it on the platform is fine for many beginners. Moving it to your own wallet is optional, and the section below covers when it makes sense.
Where your money goes, and where it disappears
A real purchase and a scam purchase often start at the same real exchange. They split at one step: the address you send to.
Scammers are happy for you to use a real exchange. Their job is getting you to send what you bought to an address they control. The FTC says crypto payments usually can't be reversed, and the only way to get money back is if the person you paid sends it back.
Never buy crypto this way
If any of these describe how you're about to buy, stop.
- Through someone you met online. The FBI says crypto investment fraud often starts this way, and it was the largest loss category in its 2025 report.
- Through a "mentor," "coach" or trading group. Anyone who wants to guide you through each step, share their screen or pick the platform is steering you toward the address that matters to them.
- At a bitcoin ATM because someone told you to. The FBI's May 2026 alert counted more than 13,400 kiosk complaints and over $388 million in losses in 2025. The CFTC's August 2026 advisory says no government agency, real bank or reputable company will tell you to move money with a crypto ATM. Our guide on how a bitcoin ATM works explains why scammers love them.
- From a link in a DM, text or email. Even when it looks like your exchange. Close the message and open the app yourself.
- Because someone on the phone says your money is at risk. The FTC says no legitimate business or government agency will tell you to protect your money, pay taxes or pay fines with crypto.
⚠ Red flag
"Support" will never ask you to buy crypto and send it somewhere. Chainalysis found impersonation scams grew more than 1,400% in 2025, fraudsters posing as companies, banks and officials. If someone you didn't contact first is helping you buy, hang up and call the company on the number from its own app or website.
Red flags of a fake crypto platform
Some fake platforms look polished. Judge them by how they behave.
| Registered platform | Fake platform |
|---|---|
| You found it yourself | Someone sent you the link or the app |
| Legal name matches a state license or registration | No registration, or a name that matches nobody |
| App publisher matches the company | App from a link, or a publisher with an unrelated name |
| Your balance moves with the market, up and down | Your balance only goes up, steadily |
| Withdrawals go to your own bank account in your name | Withdrawals need a "tax," "fee" or "verification deposit" first |
| Support is reachable through the company's own site | Support only works through chat, WhatsApp or Telegram |
The withdrawal row settles most cases. A real platform doesn't charge you new money to release old money. FBI alerts on fake crypto apps describe victims told to pay "taxes" before withdrawing, and the FBI says paying doesn't release the money. The same logic applies to tokens: if you're thinking of buying something a stranger pitched, read how to check a meme coin first.
Not sure whether a platform or a message is a scam? Try our one-minute is this a scam? quiz, or browse the DMJ Scams hub for every guide in one place.
Prefer to watch? The scam checks for your first crypto buy, in under a minute.
Read the video transcript
How to buy crypto safely starts before you buy. Most beginners who lose money lose it to the route they took. The FBI counted eleven point four billion dollars in crypto-related losses in 2025. Five checks. One: look up the platform with your state regulator, or NMLS Consumer Access. A FinCEN listing alone proves little. Two: type the address yourself. No search ads, no links in texts or DMs. On a phone, check the app's publisher. Three: turn on two-factor with an authenticator app, not text messages. SIM swappers can steal your texts. Four: make a small test buy, then withdraw a little back to your bank. Five: ask who chose the address you're sending to. If it's a mentor, a new online friend, or someone telling you to use a bitcoin ATM, stop. That's the scam. Has anyone ever offered to walk you through your first buy? Comment below, and hit like and subscribe.
What fees to expect
Honest platforms differ most on fees. You'll usually meet some mix of these.
| Fee | Where it shows up | What to check |
|---|---|---|
| Trading fee | A flat charge or a percentage per buy | The total on the confirmation screen, not the advertised rate |
| Spread | The gap between the buy and sell price | Compare the price you pay with the price you'd get selling right now |
| Payment method fee | Cards often cost more than bank transfers | Whether a bank transfer is cheaper for the same buy |
| Network or withdrawal fee | When you move crypto off the platform | The fee before you send, and whether it's fixed or varies |
| Kiosk markup | Bitcoin ATMs | The rate on screen versus the market price |
Bitcoin ATMs are the expensive end. California, for one, caps kiosk charges at the greater of $5 or 15% of the transaction and limits customers to $1,000 a day, according to the state's Department of Financial Protection and Innovation. When you later sell, our guide on how to turn crypto into cash covers the costs on the way out.
Do you need your own wallet?
Not for a first buy. Moving crypto to your own wallet is optional, and for a beginner holding a small amount it can add risk, because a wrong address or a lost recovery phrase can't be fixed by anyone.
Know what you give up by leaving it on the platform, though. The FTC says crypto held in accounts isn't insured by a government the way dollars in an FDIC-insured bank account are.
Your own wallet starts to make sense when the amount would hurt to lose, when you plan to hold for years, and when you're ready to store a recovery phrase offline and never type it into anything. Our hot wallet vs cold wallet guide explains the trade-off.
Rob's take
I've held Bitcoin since 2011. The way people lose money buying it has barely changed: somebody else picks the platform, the app or the address. If you remember one thing, make it this. Every step of your first buy should be one you started yourself. The minute someone is helping you, slow down.
Want the platform checks on one page? Get our free Is This Site Legit? one-page check when you join the Sunday Briefing.
How to buy crypto safely: FAQ
What is the safest way to buy bitcoin?
No route is risk-free, but the lower-risk route is a platform licensed or registered where you live, reached by typing its address yourself, with app-based two-factor authentication and a small first buy. The riskiest routes are buying through someone you met online or at a bitcoin ATM because someone told you to.
How do I know if a crypto exchange is legit?
Check its legal name on NMLS Consumer Access or your state regulator's site, and on FinCEN's MSB Registrant Search. A FinCEN listing isn't an endorsement, so treat it as a minimum.
How much crypto should a beginner buy first?
A small amount you could lose without it hurting. Treat the first buy as a test of the platform, the fees and the withdrawal process.
Should I use a bitcoin ATM to buy crypto?
They're often the most expensive way to buy, and the FBI counted over $388 million in kiosk losses in 2025. Never use one because someone told you to.
Do I need a crypto wallet to buy crypto?
No. Registered platforms hold it in your account. Your own wallet is optional and makes more sense for larger amounts you plan to hold for years, once you're ready to store a recovery phrase offline.
Is crypto on an exchange insured?
Not like a bank deposit. The FTC says crypto held in accounts isn't insured by a government the way dollars in an FDIC-insured bank are.