How to Buy Crypto Safely for the First Time
Buying crypto for the first time can take five minutes on an app. Doing it safely means a few extra checks before you tap "buy": who you're buying from, what it really costs, how your account is protected, and how much you can afford to lose. This guide walks through those steps in order. It doesn't tell you what to buy or where. We don't recommend coins or platforms, and we have no affiliate deals with any.
Step 0: Decide your "can lose it" number
Before anything else, decide how much money you could lose entirely without it affecting bills, emergency savings or debt payments. Crypto prices can drop sharply and stay down. A useful piece of arithmetic: a 50% loss needs a 100% gain just to get back to even. Starting small also makes your early mistakes cheaper.
Nobody can promise you a profit. The FTC is explicit: "Only scammers will guarantee profits or big returns" (FTC).
Step 1: Check the platform before you sign up
Fake platforms and look-alike apps are a big part of crypto fraud. Spend ten minutes on these checks:
- Find the legal company name. It's in the terms of service, usually near the top or bottom.
- Search FinCEN's MSB Registrant Search. Businesses that transmit money, including many crypto platforms, register with FinCEN as money services businesses. Search the exact legal name at msb.fincen.gov. Two cautions from FinCEN itself: the list shows information "exactly as provided by the registrant," and inclusion "is not a recommendation, certification of legitimacy, or endorsement." Treat it as a minimum check, not a seal of approval.
- Check state licensing. States license money transmitters separately. New York, for example, publishes a list of companies holding a virtual currency license or trust charter (NYDFS). Your state's financial regulator website is the place to look.
- Search for complaints and enforcement. Search the company name with words like "complaint," "lawsuit" or "withdrawal frozen." The SEC's custody bulletin also suggests researching how a custodian is regulated and what happens to your assets if it fails (Investor.gov).
- Get the app from the official source. Type the company's web address yourself and follow its link to the app store. Don't use search ads or links from messages.
Walk away if someone you met online sent you to the platform, if it promises fixed returns, or if it's only reachable through a link in a chat.
Step 2: Understand what's (not) protected
- FDIC: deposit insurance doesn't cover crypto assets, and doesn't protect you if a crypto company fails (FDIC).
- SIPC: generally doesn't protect crypto that isn't a registered security, even if held at a SIPC-member broker (SIPC).
If a platform says your crypto is "insured," read exactly what's covered (often it's the company's own losses from certain hacks, not your losses from price drops or from the company failing).
Step 3: Secure your account before you deposit
- Use a unique, strong password, ideally from a password manager.
- Turn on the strongest two-factor login the platform offers. CISA calls text-message codes the weakest option because of phishing and SIM-swap attacks; an authenticator app is stronger, and passkeys or hardware security keys are strongest (CISA).
- Secure your email first. It can reset everything else.
- Turn on withdrawal protections if offered, such as an address allowlist or a delay on new withdrawal addresses.
Step 4: Work out the all-in cost
A first purchase can carry several costs: - Platform fee: a flat fee or a percentage. - Spread: the difference between your price and the market price. "Zero-fee" apps may earn here. - Payment method fee: card purchases often cost more than bank transfers. - Network/withdrawal fee: to move crypto to your own wallet.
A hypothetical example (made-up numbers): you spend $100. A 1.49% fee takes $1.49. The remaining $98.51 buys crypto at a price 0.5% above market, so you get about $98.02 of crypto at market value. Withdrawing it to your own wallet costs a $2.00 network fee. You hold about $96.02. That's roughly 4% gone before the price moves. Selling later usually costs fees and spread again.
What to do: find the platform's fee schedule, and read the order preview screen, which should show the total cost before you confirm. Compare it with the market price shown on an independent price page.
Step 5: Place a small first order
- Start with a small test purchase to learn the process.
- Know your order type. A market order fills right away at the current price; a limit order fills only at your price or better and may never fill.
- Double-check the asset name and ticker. Some scam tokens copy the names of well-known ones.
- Save the confirmation (date, amount, price and fees). You'll need it for taxes.
Step 6: Decide where it will be kept
Leaving crypto on the platform is custodial storage: convenient, but exposed to company risk. Moving it to your own wallet is self-custody: you control it, but there's no password reset. Read Custodial vs. non-custodial wallets and How to set up a crypto wallet safely before you move anything. If you do move it, send a small test amount first on the correct network.
Step 7: Keep records for taxes
Buying with dollars and holding isn't a taxable sale, but selling, swapping or spending crypto later can be (IRS). Keep the date, amount, price and fees of every purchase from day one. See Crypto taxes for beginners.
Scams that target first-time buyers
- "Mentors" and friendly strangers who offer to walk you through your first purchase on a specific app. A relationship investment scam often starts this way (CFTC).
- Fake support that messages you when you post a question publicly.
- Requests to buy crypto to pay someone (a bill, a fine, a job fee). The FTC says only scammers demand payment in crypto.
- Bitcoin ATM instructions from a caller. The FTC: "'Go to a Bitcoin ATM' is a scam" (FTC).
More in Common crypto scams.
First-purchase checklist
- [ ] I know my "can lose it" number.
- [ ] I checked the platform's legal name, FinCEN registration and state licensing.
- [ ] I understand crypto there isn't FDIC-insured.
- [ ] My email and account use unique passwords and strong two-factor login.
- [ ] I know the all-in cost from the order preview.
- [ ] I'm placing a small first order and saving the confirmation.
- [ ] Nobody I met online told me to do this.
Go step by step
The free 5-Day Crypto Safety Starter covers custody, recovery phrases, fake support, real costs and relationship scams. The full Catalysts Creative Crypto course covers this ground in Module 3 (Choosing a reputable U.S. exchange) and Module 4 (Buying crypto step by step), both included in every tier. See the curriculum.
FAQ
How do I know if a crypto exchange is legit?
Find its legal name in the terms of service, search it in FinCEN's MSB Registrant Search and your state regulator's license lookup, and search for complaints and enforcement actions. A registration isn't an endorsement, but a missing one is a red flag.
Is crypto FDIC insured?
No. The FDIC says deposit insurance doesn't cover crypto assets and doesn't protect against the failure of crypto exchanges, custodians or wallet providers.
What's the cheapest way to buy crypto for the first time?
Costs depend on the platform's fee, the spread, the payment method and any withdrawal fee. Compare the total shown on the order preview screen with the market price; bank transfers often cost less than cards.
Should I move my crypto off the exchange after buying?
It depends on whether you're ready to manage your own keys. Leaving it on the exchange carries company risk; self-custody carries the risk of losing your recovery phrase. Learn both before deciding, and test with a small amount first.
Do I pay tax when I buy crypto?
Buying crypto with U.S. dollars and holding it isn't a taxable sale. Selling, swapping or spending it later can create a gain or loss you must report, so keep records from your first purchase.
Sources
- FinCEN, MSB Registrant Search: https://msb.fincen.gov/msbstateselector.php
- NYDFS, Virtual Currency Business Licensing: https://www.dfs.ny.gov/virtual_currency_businesses
- FDIC, crypto fact sheet: https://www.fdic.gov/news/fact-sheets/crypto-fact-sheet-7-28-22.html
- SIPC, "What SIPC Protects": https://www.sipc.org/for-investors/what-sipc-protects
- SEC/Investor.gov, "Crypto Asset Custody Basics for Retail Investors": https://www.investor.gov/introduction-investing/general-resources/news-alerts/alerts-bulletins/investor-bulletins/crypto-asset-custody-basics-retail-investors-investor-bulletin-0
- CISA, "Implementing Phishing-Resistant MFA": https://www.cisa.gov/sites/default/files/publications/fact-sheet-implementing-phishing-resistant-mfa-508c.pdf
- FTC consumer pages: https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-scams and https://consumer.ftc.gov/consumer-alerts/2024/03/sure-ways-spot-scammer
- CFTC, "Relationship Investment Scams": https://www.cftc.gov/LearnAndProtect/AdvisoriesAndArticles/RelationshipInvestmentScam.html
- IRS, "Digital assets": https://www.irs.gov/filing/digital-assets
Education only, not financial advice. Crypto is volatile and you can lose money. Catalysts Creative Crypto doesn't recommend specific coins, exchanges or wallets.