How to Evaluate a Crypto Exchange: Fees, Custody, Licensing and Risk

A crypto exchange looks like a simple storefront: pick a coin, press buy. Behind it is a business with its own fees, its own custody arrangements, its own licenses and its own risks. Those details decide how much a trade really costs and what happens to your assets if the company runs into trouble.

This guide explains how exchanges work and how to compare them. It does not recommend any platform or any asset.

What an exchange actually does

Exchanges generally provide some combination of four services:

• Matching. Buyers and sellers post orders, and the exchange's order book pairs them.
• On-ramp and off-ramp. You move US dollars in by bank transfer or card and withdraw them later.
• Custody. The exchange holds the assets in accounts it controls.
• Extra products. Staking, lending, margin, derivatives, debit cards and more, depending on the platform and your state.

Many people use only the first three. The extras are where risk usually rises.

How exchanges make money

Understanding the business model shows you where the costs hide.

A platform advertising "zero fees" may be earning through the spread or other channels. The question is not whether you pay, but how and how much.

Reading a fee schedule

Fee pages can be dense. Check these items:

1. Maker and taker fees. Makers add orders to the book; takers match existing ones. Takers often pay more.
2. Tiered pricing. Fees often fall as your 30-day trading volume rises.
3. Simple vs. advanced trading. The same exchange may charge very different rates on its beginner interface and its advanced one.
4. Deposit methods. Bank transfers are often cheaper than debit or credit cards.
5. Withdrawal fees. Some platforms charge a flat network fee per asset; others add their own margin.
6. Inactivity or account fees. Check whether any exist.

A practical test: price a small hypothetical trade on two platforms, then compare the total you would receive after every charge. Differences that look tiny in percentage terms can matter if you trade often.

Custody: who holds the keys?

When you leave assets on an exchange, you usually own a claim on the exchange, not the keys themselves. That has consequences.

• If the exchange is hacked, your balance may depend on the company's reserves and its response.
• If the exchange fails, customers can become creditors in a bankruptcy process. Past failures have shown that customers may wait a long time to recover part or all of their assets, and outcomes depend on the facts and the terms of service.
• If you lose your password, a custodial exchange can often help you recover access. Self-custody does not offer that.

For a deeper look at the alternatives, see our guide to crypto wallets and custody.

Questions worth asking about any platform:

• Does it say whether customer assets are segregated from company funds?
• How much is held in "cold" storage that is offline?
• Does it publish audited financial statements or a proof-of-reserves report, and by whom?
• What does its terms of service say about lending or reusing customer assets?

Proof of reserves is a snapshot that tries to show an exchange holds the assets it says it holds. It is useful but incomplete: it may not show the exchange's liabilities, so look for statements that cover both sides of the balance sheet and come from an independent firm.

Licensing and regulation in the US

Crypto is regulated by several agencies at once, and no single license means "safe." You can see how responsibilities divide in our explainer on who regulates crypto in the US. For exchanges in particular, look for:

• FinCEN registration as a money services business, which relates to anti-money-laundering obligations.
• State money transmitter licenses, which are issued state by state. Some states have their own regimes for virtual currency businesses.
• SEC or CFTC registration where an exchange lists assets or products that fall under their authority, such as securities or derivatives.
• Identity verification. Know-your-customer checks are standard on US-regulated platforms. An exchange that lets you trade large amounts with no verification is a warning sign for US users.

A license shows the company meets certain requirements. It does not guarantee solvency or protect you from price losses.

What is and is not protected

This is the most misunderstood area.

• FDIC insurance covers deposits at insured banks. It does not cover crypto assets or protect you if a crypto company fails.
• SIPC protects customers of member brokerage firms if the firm fails and assets are missing. It does not protect against market losses and generally does not cover crypto.
• Pass-through coverage can apply to US dollar balances if an exchange holds them in custodial accounts at insured banks and meets certain conditions. Read the language carefully, because it is narrow.
• Exchange insurance funds and crime policies exist at some platforms, but coverage varies in scope and amount, and often applies only to specific events such as theft from cold storage.

Our explainer on SIPC and what protects a brokerage account shows how traditional brokerage protections work by comparison.

Security basics that separate platforms

You cannot audit an exchange's systems, but you can check what it offers you.

• Two-factor authentication with an authenticator app or security key, rather than text messages alone.
• Withdrawal allow-lists and delays for new addresses.
• Login and withdrawal alerts.
• A clear incident history, including how the company communicated after any past breach.
• Customer support that is reachable and documented.

On your side, use a unique password, enable the strongest two-factor option available and bookmark the exchange's real website. Fake exchanges and phishing pages are common, as covered in our guide to crypto scams.

Choosing between a few platforms: a checklist

Use this list to compare, rather than relying on ads or social media recommendations.

1. Total cost. Run the same sample trade and withdrawal on each platform.
2. Licensing. Confirm registration and state availability on the company's own site and, where possible, regulators' databases.
3. Custody terms. Read what the company says about segregation, reuse of assets and what happens in insolvency.
4. Assets listed. More listings are not better. Each one is an asset you should be able to understand.
5. Features you will not use. Margin, leveraged products and yield programs raise risk; skip them unless you understand them.
6. Withdrawal process. Check how easy it is to move assets out, and whether limits apply.
7. Track record and transparency. Look at financial disclosures, past incidents and public reporting.
8. Tax tools. Reports and forms can save time at filing season, though you remain responsible for accuracy.

A final point on risk

An exchange's quality cannot protect you from the volatility of the assets themselves. Prices can move sharply in either direction, and some assets disappear entirely. Treat the platform choice as a way to reduce avoidable operational risks, such as hidden fees, weak custody and poor security, while accepting that market risk remains. Only commit money you could afford to see fall in value, and keep records of every transaction for tax purposes.