What to Know Before Your First Crypto Purchase

A first crypto purchase comes down to three decisions: what you buy (coins held by a platform, or shares of a fund that holds coins), where you buy it (a venue checked against public licensing records) and how you pay (funding method, order type, fees and spreads). In the illustrative $500 example below, those choices move the result from about $488 to about $499 of exposure. Holding risks are set aside here: platform balances are not FDIC- or SIPC-insured, prices can fall sharply and on-chain transfers generally cannot be reversed, as one payment app's cryptocurrency terms spell out.

Key takeaways

A spot bitcoin or ether ETP gives you fund shares, not coins; each sponsor-fee payment reduces the crypto behind them.
FinCEN does not verify money services business registrations, and state rules differ: Georgia licenses some virtual currency services, while Tennessee's financial regulator does not regulate them.
In the illustrative $500 example, an instant buy (1.5% spread, 1% fee) leaves $487.68 of coin, a limit order at a new account's 0.8% taker fee $495.75, and a 0.25% ETP $498.75 after a flat year.
Card issuers may code crypto purchases as cash advances; in agreements the CFPB reviewed, the most common terms were the greater of $10 or 5% and a 30% APR from day one.

Where you can buy, and what you own

Three kinds of US venues sell crypto exposure. A crypto exchange runs an order book where buyers' and sellers' orders meet. A broker-style or payment app, including the instant-buy screens on many exchanges, quotes one all-in price and fills the order itself. A brokerage can sell shares of a spot exchange-traded product (ETP), a trust listed on a stock exchange that holds the coin.

The SEC approved spot bitcoin ETPs on January 10, 2024, though Chair Gensler's statement stressed it "did not approve or endorse bitcoin"; ether ETPs followed in a May 23, 2024 order.

The SEC's investor bulletin on bitcoin and ether ETPs describes them as exposure "without direct investment in the underlying asset"; each sponsor-fee payment lowers the crypto behind a share. Payment-app balances differ again: under PayPal's terms (updated May 19, 2026), crypto sits pooled in omnibus accounts and the customer does "not own any specific, identifiable" crypto asset.

Venue type	What you end up with	How the cost is charged	Trading hours	Can you move it out?
Crypto exchange (order book)	A coin balance recorded by the exchange	Maker or taker fee on each fill; bid and ask visible	Generally around the clock	Usually, to an outside wallet, for a network fee
Instant-buy or payment app	A balance claim, often pooled with other customers'	Spread in the quoted price, often plus a fee	Generally around the clock	Depends on the app's terms
Brokerage, spot ETP shares	Fund shares; the trust holds the coins	Commission (often $0), bid-ask spread, yearly sponsor fee	Stock-exchange hours	No; you sell the shares for dollars

Checking a venue before signing up

No single database says a crypto platform is safe; each lookup answers a narrower question.

Lookup	What a match shows	What it does not show
FinCEN MSB Registrant Search	The business filed a federal money services business registration; the list is updated weekly	Any verification: FinCEN does not verify submissions, and a listing is not a recommendation, certification of legitimacy or endorsement
NMLS Consumer Access	State licenses held through the national licensing system, by state	Whether your state licenses crypto activity at all; some do not
NYDFS regulated entities list	For New York residents: firms holding a BitLicense or a limited purpose trust charter, with the date granted	Anything about firms' standing in other states
FINRA BrokerCheck	Registration, licenses and disclosures (disputes, disciplinary events) for brokerage firms, brokers and investment advisers	Most crypto-only platforms, which are not broker-dealers

Those caveats appear in FinCEN's notes on the registration list. Its May 2019 guidance says businesses exchanging virtual currency for money generally qualify as money transmitters, so a US-facing exchange missing from the search is worth questioning. Two exceptions: banks, including state-chartered trust companies, and firms registered with and regulated by the SEC or CFTC fall outside the money services business definition, so a trust-chartered venue or a brokerage may not appear.

State results need the most care. Georgia's banking department says some virtual currency providers must hold its money transmitter license and points consumers to NMLS Consumer Access. Tennessee's regulator says it does not regulate virtual currency, and its license and surety bond do not cover it. The same platform can show a license in one state and nothing in the next.

Account setup and security

Why the identity check is required

Expect to provide your name, date of birth, address, Social Security number and usually a photo ID. FinCEN requires every money services business to keep an anti-money-laundering program, which covers verifying customer identification to the extent the rules apply to that business. Brokerages fall under a separate customer identification program rule: before an account opens, they must collect at least name, date of birth, address and, for a US person, a taxpayer identification number (or confirm that one has been applied for).

Locking the account before money arrives

Use a unique password, then turn on the strongest second factor the venue supports. CISA's fact sheet Implementing Phishing-Resistant MFA (October 2022) ranks the options. SMS or voice codes are exposed to phishing, SIM swaps and phone-network (SS7) attacks and "should only be used as a last resort". App-generated codes are not exposed to SIM swaps but can still be phished. FIDO/WebAuthn, using a physical security key or an authenticator built into a phone or laptop, is the only widely available phishing-resistant method. Any second factor is still better than none.

Then look for withdrawal controls. Kraken's help article for its Classic interface, for example, says it emails a confirmation link for each new withdrawal address. After a password change, it holds withdrawals to new addresses for 24 hours on accounts without sign-in 2FA or a Kraken Master Key. It also offers an optional settings lock that blocks adding new addresses. A fake login page can collect the password and the code together, so sign in only through the venue's app or a typed address, never a link in a message.

Funding: bank, wire or card

The payment method changes the cost and how long money is tied up. One venue's October 2026 terms show the pattern; the deposit screen shows the actual fee.

Method	Example cost (Kraken, US, October 2026)	Speed and holds	Watch for
ACH bank transfer	Free deposit	Usable for trading near-instantly; withdrawals held 7 days	The hold covers coins bought with the deposit, not just the cash
Wire transfer	Free deposit at the venue	0–1 business days; no withdrawal hold	Your own bank may charge an outgoing wire fee
Debit card	$0.25 + 3.75% ($19.00 on $500)	Near-instant; 72-hour withdrawal hold may apply	The fee comes on top of any trading fee or spread
Credit card, where accepted	Venue card fee plus possible issuer cash-advance charges	Near-instant	Cash-advance fee and interest from day one

The ACH, wire and debit figures come from Kraken's deposit options page (updated October 1, 2026). For credit cards, the CFPB's December 16, 2024 data spotlight lists buying cryptocurrency among transactions that issuers may treat as "cash equivalents." In agreements from seven large issuers, the most common cash-advance fee was the greater of $10 or 5% and the most common APR 30%. Interest ran from the transaction date, even for cardholders who would not normally pay interest on purchases. On $500 coded that way, that is a $25 fee plus about $12 to $13 of interest over 30 days, before the venue's card fee. The CFPB's consumer page on cash advances says that interest starts right away; your card agreement shows your actual terms.

Placing the order: fees and spreads

Market, limit, maker and taker

A market order buys at once at the best prices on offer; a large one can fill at several rising prices. A limit order sets the highest price you will pay and may fill at once, later or never. Gemini's ActiveTrader schedule (September 1, 2026) defines taker orders as those that "match immediately" and maker orders as those resting on the book, so a limit order at or above the ask pays the taker fee.

Fee tiers fall with 30-day volume, so a new account pays the top rate. On the Gemini schedule, an account with no trading history pays 0.600% maker and 1.200% taker. Kraken's fee explainer (updated October 1, 2026) gives a range from −0.02% for makers to 0.80% for takers, depending on volume and pair.

The spread inside an instant-buy price

Instant-buy screens usually charge twice. Kraken's fee schedule lists a 1% fee on instant and recurring trades, and the quoted price also includes a spread, "the difference between the market rate and the rate you receive." PayPal's terms state an estimated 1.00% spread, which can be higher or lower and is not disclosed separately for each transaction, plus a separate fee.

Illustrative example: $500 bought three ways

Assumptions, all hypothetical: a mid-market price of $1,000; fees come out of the $500; the price is flat for a year (not a forecast, only a way to isolate costs); no platform custody fee; the ETP is bought at net asset value with $0 commission, ignoring its small bid-ask spread.

A. Instant buy: 1% fee and a 1.5% spread above mid.
B. Limit order on an exchange: priced at the ask, 0.05% above mid, so it fills at once and pays a 0.8% taker fee, the top of Kraken's range.
C. Spot ETP: 0.25% yearly expense ratio, held one year.

Coin units  = (Amount − Fee) ÷ (Mid price × (1 + Markup))
Value       = Coin units × Mid price

Amount  = dollars spent (here $500)
Fee     = explicit trading fee in dollars
Markup  = how far above mid the fill price is (spread or ask)
ETP value after n years = Amount × (1 − Expense ratio)^n

Route	Explicit fee	Coin units (or equivalent)	Value at mid price	Total cost
A. Instant buy	$5.00	0.48768	$487.68	$12.32 (2.46%)
B. Limit order, 0.8% taker	$4.00	0.49575	$495.75	$4.25 (0.85%)
C. ETP, after one year	$0 at purchase	0.49875 equivalent (shares, not coins)	$498.75	$1.25 (0.25%)

Route A works out as $495 ÷ $1,015 = 0.48768 units; route B as $496 ÷ $1,000.50 = 0.49575 units. Most of route A's cost is the spread ($7.32), not the visible fee ($5.00). At Gemini's 1.2% entry taker rate, route B costs $6.25, still about half of route A. A maker order resting below the ask pays a lower rate on both schedules but may never fill. The ETP's fee, by contrast, recurs: it overtakes route B's one-time cost after about 3.4 years and route A's after about 10. Selling later adds another round of costs on every route.

Where it sits and what to save

After the purchase, coins either stay on the platform or move to a wallet you control. If you move them, confirm that the address and network match the asset, send a small test amount, wait for it to arrive, then send the rest; each transfer pays a network fee. ETP shares stay in the brokerage account.

Keep the trade confirmation for every purchase: date, amount, price, fee and venue. The IRS digital assets page (updated September 2, 2026) tells holders to keep records of each purchase, sale or other disposition, and says basis is generally the cost in US dollars. Download statements while the account is open.

Frequently asked questions

Is a spot bitcoin ETP the same as an ordinary ETF?

Not legally. The SEC bulletin explains that spot bitcoin and ether ETPs are exchange-traded commodity trusts, not investment companies registered under the Investment Company Act of 1940. So that Act's valuation and custody requirements do not apply, even if the product calls itself an ETF.

Why can an ETP's price differ from the coin's price?

The SEC bulletin notes that share prices may deviate from the coin's price because of changing demand for the shares, issues affecting the sponsor, or events in crypto markets. Because the shares trade only during exchange hours, a weekend move in the coin reaches the share price only when the exchange reopens.

Can I move crypto bought in a payment app to my own wallet?

It depends on the app's terms. PayPal's terms, for example, allow external transfers to a wallet you own or to someone else's. They also state that a transfer is irreversible even while it is still unconfirmed and pending, so check the address before sending.

Why can't I withdraw coins I just bought?

Many venues hold withdrawals until the funding payment can no longer be reversed. Kraken's withdrawal hold article (updated October 8, 2026) describes a 72-hour hold after card and digital-wallet purchases and a seven-day hold after Plaid ACH deposits, covering only an amount equal to the purchase. Trading continues meanwhile.

Does a platform with no trading fee give the best price?

Not necessarily, because the cost can sit in the price. PayPal charges no fee to sell crypto at checkout but does charge a spread. Kraken's subscription waives trading fees on up to $10,000 a month, but "spreads and card processing fees still apply." Comparing the coin units each preview shows for the same dollar amount captures both.

Questions to answer before buying

Do I want coins, or price exposure through ETP shares in a brokerage account?
Is the venue in FinCEN's registrant search, and does my state regulator (or NYDFS in New York) list a license?
Is my password unique, and is my second factor an app or security key rather than SMS?
What does my funding method cost, and how long are withdrawals held?
If paying by credit card, will my issuer treat it as a cash advance?
Which order type am I using, and how many coin units does the preview show?
If I move coins to my own wallet, will I send a test transfer first?
Where will I save the trade confirmation?