How to pick an exchange · seven dimensions, and fees are the least important one

Fee comparison is the most popular way to choose an exchange, and it is the least useful. Fees are visible, denominated in basis points, and easy to put on a single line. Liquidity, withdrawal reliability, security history and support quality are none of those things — they are diffuse, often only visible during a crisis, and rarely comparable in a single screenshot. That is exactly why the dimensions nobody compares are the ones that determine whether you walk away whole. Seven dimensions in this scorecard. Fees are the seventh, weighted at six percent of the total.

§1 · Dimension 1 · Liquidity depth (weight 25%)

Liquidity is the first thing that breaks when an exchange is in trouble. In the week before FTX collapsed in November 2022, traders in Telegram groups were posting screenshots of stuck withdrawals. The signal was already there — most people just chose not to read it. A thinly-traded exchange will hit you in two ways, and neither is recoverable after the fact:

• Slippage. You place a market buy for 1 BTC. The fill comes back 1-3% above the screen quote. That difference is real money you handed to the order book, and it does not show up as a fee — it shows up as a worse cost basis.
• Wicks. A single large order in a thin book can punch price down 10-20% in seconds, trigger your stop-loss or liquidate your position, and then the book heals as if nothing happened. On second-tier exchanges this happens weekly. On third-tier exchanges it happens almost daily, and the exchange will not refund you.

The simplest single indicator of liquidity depth is the bid-ask spread on the perpetual futures order book. On Binance, OKX or Bybit, BTC perp spread is typically under fifty cents. On a second-tier venue you are looking at $5. On a third-tier venue, $20 or worse. The slippage cost of trading on the third-tier venue is roughly forty times the spread cost on the first-tier venue, before fees enter the picture.

Numbers move with the market but the ordinal ranking has been stable for years. For new traders, the difference between rank one and rank two does not matter — pick any first-tier venue. The exchanges where it does matter are the third-tier ones, which are fine for first-day token listings if you are doing IEO sniping, but should not be used for any position you plan to hold overnight.

The dumb way to measure liquidity yourself

Run a one-night test. At a typical liquid hour — 9 PM London, 4 PM New York, 11 PM Singapore — go to the BTC/USDT spot book on each exchange you are considering. First, place a $5,000 buy and note the fill versus the screen price. Then place a $100,000 buy and note the same. Any exchange where the second test slips more than 0.2% has structurally thin depth at that hour, and slippage will quietly erode your P&L on every trade. The whole test takes about ten minutes per venue and is more accurate than any review I have ever read.

Worth looking at the depth heatmap as well. Most exchanges publish a visualisation of the order book. Healthy books are roughly symmetric and the depth ramps up gradually as you move away from mid-price. Watch out for one wall that looks abnormally large at a specific price (say, 100,000 BTC parked at one level when the surrounding levels are 50× thinner). Almost always, that is fake liquidity placed by an inbound market-maker to win an incentive program, and it disappears the moment a real order tries to take it. The wall is for show, not for you.

§2 · Dimension 2 · Fiat rails (weight 18%)

Fiat rails are the bridge between dollars, euros, pounds, yen, won, and stablecoins or BTC. From 2017 onward, the regulatory regime in each major jurisdiction has hardened, and exchanges have adapted in different directions. The two dominant access methods today, across most global jurisdictions, are:

• P2P (peer-to-peer). You trade with another user through the exchange's escrow service — they send you fiat through a local payment method (bank transfer, PayPal, Revolut, Wise, etc.), the exchange releases USDT or BTC into your account. This is dominant in Asia, Latin America, parts of Africa, and increasingly Eastern Europe.
• Card and bank rails. Visa, Mastercard, SEPA, Faster Payments (UK), ACH (US), Wire transfers. Higher fees on cards (2-4%) but instant. Bank rails are cheaper (often free or a few dollars) but slower (1-3 business days for ACH, same-day for Wire in the US, instant for SEPA Instant in the EU).

For US, UK and EU readers, card and bank rails are almost always the right answer. Coinbase, Kraken and Gemini all run domestic fiat rails directly — Coinbase ACH is free and works in 1-3 business days, wire transfers are same-day with a $10 fee, debit-card buys are instant but cost 3.99%. For users in jurisdictions where direct fiat rails are restricted, P2P through one of the major global venues is the default, and the three things to check before using it are:

1. Merchant density at your price point. The more concurrent listings at a similar price, the deeper the local liquidity. A single merchant offering tight pricing is fragile.
2. Spread to spot. The implied USD-to-USDT spread on P2P should be within 0-1% of the spot stablecoin price. Anything above that means you are paying a stealth premium.
3. Payment method coverage. The more local methods supported, the easier it is to route around any one of them being blocked or slow.

Beyond P2P · the standard fiat-in methods

Outside P2P, here is what is generally available across the major venues:

• Visa / Mastercard direct buys. High fees (2-4%) but instant settlement. Useful for first deposits and for users without a local bank-rail option.
• SEPA / SEPA Instant. Default for EU users. Free or near-free, settles in seconds (Instant) or 1 business day (regular SEPA). Bitstamp, Bitvavo, Coinbase Europe, Kraken EU all support it.
• ACH / Wire. Default for US users. ACH is free at most venues but takes 1-3 days; Wire is same-day for a flat fee.
• Faster Payments (UK). Available on Kraken UK, Coinbase UK, Bitstamp UK, Gemini UK. Real-time and free at most venues.
• Apple Pay / Google Pay. Available at Binance, Coinbase, and a handful of others. Convenience-priced like cards.
• Stablecoin transfer in. The cheapest method if you already have crypto somewhere else. Send USDT or USDC from a wallet or another exchange directly to the receiving address; the only cost is the on-chain gas fee.

Local fiat coverage matters disproportionately if you are in a smaller market. Binance supports 80+ currencies, OKX 60+, Bybit 50+. Most of the second-tier exchanges only support USD and EUR, which is fine for European traders but a friction tax for users in markets like Brazil, Turkey or Nigeria.

§3 · Dimension 3 · Withdrawal speed + chain coverage (weight 15%)

Withdrawal speed is the most reliable single signal of an exchange's actual operational health. New traders underrate this; experienced traders monitor it. The moment of need usually arrives the same day you are stressed about something else (a crash, a rumor, a tax deadline), and that is exactly when an exchange that has been quietly degrading will discover its withdrawal queue has tripled.

Three sub-indicators

• Processing time: from your withdrawal click to the on-chain transaction hash appearing. A healthy exchange does this in under five minutes for routine amounts. Thirty minutes is the warning threshold — that means risk review is involved, which may be legitimate (large amount, new device, KYC re-trigger) or may be the exchange stalling its way through a liquidity problem.
• Chain support: USDT should be available on at least Ethereum (ERC-20), Tron (TRC-20) and BSC; major coins should have at least 2 chain options. The more chains, the more flexibility on fees and speed. Binance supports nine USDT chains; Gate and MEXC support five. The thin coverage on smaller exchanges becomes painful when you are trying to move funds during a network congestion event.
• Daily withdrawal limits: standard verification typically caps at 50 BTC/day; advanced tiers go to 100 BTC+. Find out before you size up — a limit can quietly cap your ability to exit a position.

Where "risk review" stops being legitimate

A 50 BTC withdrawal getting held for a few hours of manual review is normal. The exchange wants to verify you are not a compromised account. A six- to twenty-four-hour delay sits inside the band of "annoying but defensible." Forty-eight hours with vague support replies is the danger threshold — historically, that is where insolvency begins to be visible from the outside. In the week before FTX collapsed, multiple users on Twitter were reporting withdrawal delays of 24-72 hours that had been instant the month before. That pattern — sudden slowdown of an operation that used to be reliable — was the cleanest single tell.

The detection method that works: track your normal withdrawal latency over months, with small test withdrawals every few weeks. If the median jumps from two minutes to twenty minutes and stays elevated for a week, that is a physical signal worth taking seriously. Move a portion of your stack out — not all of it, in case the slowdown is benign — and reassess in another week. The cost of being wrong is small (you moved coins to self-custody, which you should be doing anyway). The cost of ignoring a real signal is total.

§4 · Dimension 4 · Security record + proof of reserves (weight 20%)

This is the dimension that the FTX collapse forced back to the top of every serious trader's list. An exchange can be expensive, slow, and difficult — but it must hold your money safely. Four things to check:

1. Hack history and what was done about it

Has the exchange been hacked? How much was lost? Did they make users whole? Binance was hacked for 7,000 BTC in 2019; the SAFU fund made everyone whole within days. Mt.Gox was hacked for 850,000 BTC in 2014; ten years later the bankruptcy claims process is still in motion. FTX was not hacked at all — it was looted from the inside, used customer deposits as collateral for Alameda's trading positions, and went into Chapter 11 in November 2022. Always look up an exchange's incident history and remediation before opening a serious account.

2. Proof of reserves

Post-FTX, every credible exchange has started publishing some form of proof of reserves — a cryptographic attestation that "the customer balances we owe are fully backed by on-chain assets we control." Binance, OKX, Bybit, Bitget, HTX and Kraken all publish PoR reports on at least a monthly cadence. The minimum bar is 100% (full backing in the same asset). OKX has consistently published 105%+ (over-reserved on USDT and BTC). Coinbase as a US-listed public company audits to a different standard — its 10-K filings show the segregation of customer assets, and customer crypto custody assets are reported as a liability matched by a corresponding asset on the balance sheet. That is structurally stricter than PoR. An exchange without any PoR or equivalent audit in 2026 is, by default, not trustworthy at scale.

3. Cold-wallet share

Major exchanges typically disclose something like "95% of assets in cold storage, 5% in hot wallets for withdrawal liquidity." Higher is safer, but there is a real tradeoff with withdrawal speed. Binance, OKX, Coinbase and Kraken all maintain 95%+ cold storage on an ongoing basis. That is the floor for a venue you trust at scale.

4. Regulatory licenses

Licenses do not guarantee safety — Mt.Gox was nominally regulated in Japan when it failed — but they raise the cost of misconduct and create real accountability paths. Coinbase is a Nasdaq-listed public company (ticker: COIN), regulated as a Money Services Business by FinCEN, holds NY BitLicense, and is subject to SEC reporting requirements. Kraken is FinCEN-registered in the US, holds an FCA registration in the UK and a CASP authorization in the EU (through Kraken EU based in Ireland). Gemini holds a NYDFS BitLicense and operates as a New York Trust Company. Binance has obtained licenses across the EU member states under MiCA, plus separate licenses in Japan, Dubai, El Salvador and a handful of other jurisdictions; Binance.US is a separately operated FinCEN-registered MSB. Bitstamp is licensed in Luxembourg under MiCA and FinCEN-registered in the US. An exchange domiciled in Seychelles or BVI with no listed regulatory oversight is a structural red flag — when something goes wrong, there is no legal venue to recover anything.

The dumb way to check security history

Four sources, ranked by usefulness:

• CoinGecko and CoinMarketCap Trust Score. Composite score, far from perfect, but a useful starting line. Anything under 8 deserves additional scrutiny.
• CryptoCompare Exchange Benchmark. Academic-style methodology. A-grade and above maps to the first-tier venues you already know.
• The exchange's own engineering blog. Venues that publish post-incident reviews, periodic PoR reports, hot/cold disclosures — that public discipline is highly correlated with operational quality. Venues that publish nothing usually have nothing to say because there is nothing being measured.
• Twitter/X search for "exchange-name down" or "exchange-name hack" filtered to the last 30 days. The fastest possible read of whether something is currently breaking, because users post in real time and the chatter precedes any official acknowledgment by hours or days.

Remember: "no incidents on record" does not mean "safe." Mt.Gox was the largest exchange on earth the year before it failed. FTX's CEO was testifying in front of the US Congress the year before the collapse. History does not bind the future. The defensive move that actually works is portfolio-level: distribute holdings across multiple exchanges, keep long-term holds in self-custody, and never park more than a few weeks of trading capital in any single venue.

§5 · Dimension 5 · Support quality and crisis response (weight 8%)

On a normal day, support quality is irrelevant. During a crisis it becomes the most expensive single variable. Three things to measure:

• Response time. First reply under five minutes is excellent (typically auto-routing or chatbot). Human escalation under thirty minutes is the threshold for "good."
• Language coverage. Native support in your primary language, ideally 24/7. Major exchanges cover English, Chinese, Spanish, Russian, Korean, Japanese, Turkish, Vietnamese, French, German.
• Real resolution rate. The difference between "we have escalated your case, expect a reply in 3-5 business days" and an agent who actually solves the problem on the call.

My own measured experience: Binance English chat replies in 1-3 minutes for first contact; human escalation can take 30+ minutes during high-volatility windows. Coinbase has dramatically improved its phone support since 2023 — direct human agent within 5-10 minutes for verified premium-tier accounts (Coinbase One). Kraken's email-based support is slow but high-resolution: replies take hours, but when they come, they actually solve the problem. OKX averages 5-10 minutes for first reply with fast human escalation. Bybit English support is high-quality but suffers queue depth during volatility spikes. MEXC support is mostly canned templates with low resolution.

§6 · Dimension 6 · Derivatives spec (weight 8%)

If you only buy and hold spot, you can skip this section. If you trade perps, futures, options or leveraged tokens, the venue you choose will materially affect your edge.

• Product breadth. USDT-margined and coin-margined perps, dated quarterly futures, options. The more complete, the more strategies are available without bridging across venues.
• Maximum leverage. BTC/ETH usually 100-125×, altcoins 20-50×. The headline number matters less than whether the leverage tiers are sensible — 3×, 5×, 10×, 20× should all be selectable; jumping from 5× to 25× in one click is bad UX and worse risk management.
• Funding rates. Charged every 8 hours. On Binance and OKX, BTC perp funding is typically within ±0.01% per 8h in normal conditions; second-tier venues drift further. Higher and more volatile funding compounds against directional positions, especially overnight ones.
• Mark-price protection. Major venues use a separate mark price (typically an index of multiple spot venues) to determine liquidations, so a wick on the local order book cannot liquidate you. Second-tier venues without this feature are unsafe for any sizable leveraged position.

The hidden derivatives parameters that matter

The leverage / position / liquidation price you see on the UI are the public outputs of a stack of parameters that the platform documents but rarely highlights. The ones that determine the realised outcome:

• Maintenance margin tiers. Each position-size tier has a different maintenance margin ratio. At the same 10× leverage, a $10,000 position and a $1,000,000 position have different liquidation prices, because the larger position is in a higher-MMR tier. Big positions liquidate earlier than the napkin math suggests.
• Risk limits per coin per user. Maximum position size for any single user is capped, and beyond it, leverage is forcibly reduced. Always check before you scale up an idea.
• Insurance fund. When a liquidation is at a worse price than bankruptcy, the loss is absorbed by the exchange's insurance fund. When the fund is depleted, the exchange triggers ADL (auto-deleveraging) — winning positions are force-closed against losers. Binance and OKX maintain insurance funds in the $500M-$1B range. Smaller venues run insurance funds in the low millions, which means ADL during extreme moves is realistic, and your winning position can be unwound at the exchange's discretion.
• Funding rate clamps. Normal funding is ±0.01% per 8h. Under stress, exchanges can raise the cap to ±0.5% or ±1% per 8h — that is 1.5-3% per day in funding alone. Multi-day directional perp holds under stressed funding can quietly burn 5-10% of the position to funding before the price has moved.

Binance and OKX publish these parameters with the most transparency. Bybit and Bitget are next. Smaller venues mostly do not publish enough to know what you are signing up for. The single most useful pre-trade habit, if you are doing derivatives, is to read the relevant rules pages on whichever venue you are using before you size up any new product — not after the position is on.

§7 · Dimension 7 · Policy and jurisdiction risk (weight 6%)

The least-discussed dimension, and historically the source of the most surprising losses. Three things to track:

• Active enforcement actions and settlements. Binance settled with the DOJ for $4.3B in November 2023 and Changpeng Zhao stepped down. Coinbase faced an SEC lawsuit filed in June 2023 (largely dismissed in 2024 under the new SEC posture). Kraken paid the SEC $30M and ended its US staking program in 2023. These actions directly determine which products are available to you.
• Geographic restrictions. Binance.com does not serve US, Canada or Netherlands residents (separately, Binance.US is the US-only entity). Bybit does not serve US, UK, Canada, France. OKX does not serve US, Canada, UK. Coinbase does not serve a long list of sanctioned jurisdictions. Always verify the latest geography rules — they change.
• Travel rule and KYT. More venues now require Know-Your-Transaction screening on outbound transfers; sending to a self-custody wallet you do not own (a friend's address) may trigger an additional verification step. The EU MiCA transfer-of-funds rules came fully into effect at the end of 2024 and now require originator/beneficiary information on EU-touching crypto transfers.

What "not available in your jurisdiction" actually means

Most exchanges have explicit geo-rules. The on-the-ground reality has historically been one of three states:

• Registration and trading allowed, products restricted. Most common state. You can open an account, but derivatives, staking or specific tokens may be hidden in your jurisdiction.
• Registration restricted, existing accounts continue. Some venues stop accepting new users from a jurisdiction but allow existing users to continue trading or withdraw.
• Full block. Rare. Trading is suspended, withdrawals only. This happened for OKX with US users in 2023 and for Binance with Netherlands users in 2023.

The structural risk is that whatever the current state is, it can change. The defenses that actually work are unchanged across cycles: do not park long-term holdings on any single exchange, distribute trading capital across 2-3 venues, hold real long-term stack in self-custody, and verify your withdrawal flow works (test withdrawals every few weeks) so that you are not learning the process during a crisis.

§8 · 7-dimension scorecard · five major venues side by side

The "small exchange with a huge sign-up bonus" question

Every few months an unfamiliar exchange runs a campaign — "100 USDT for new accounts", "double your first deposit", "no fees for 90 days." The decision rule is straightforward:

• Who is paying for it? If it is the platform's own capital, the program is unsustainable and may be a Ponzi-style structure where new deposits cover the bonuses. If it is pre-IPO marketing burn (the more legitimate version), the venue is at least solvent — but its long-term incentives are to lock you in via fee-tier requirements.
• Withdrawal conditions on the bonus. Many programs require trading volume of $X thousand before you can withdraw the bonus. That means you are not getting the bonus until you have paid back its value in fees. Read the terms before you opt in.
• Can you withdraw at all after the bonus clears? Test with a small amount. The track record of small-exchange bonus programs is poor — FCoin, Hotbit and CoinTiger all attracted heavy retail flow this way and ultimately failed or restructured under poor conditions.

My posture on these: treat them as free trials. Take the bonus if the terms are reasonable, run a couple of trades to test the venue, then withdraw and move on. Do not park real capital in a small exchange for the bonus economics — the historical EV is negative.

§9 · Strategy by user profile

Pure beginner · long-term BTC/ETH DCA

Pick one of Coinbase, Kraken, Binance or OKX based on jurisdiction. US: Coinbase (or Kraken). EU: Kraken EU, Bitstamp, Bitvavo, Coinbase Europe. UK: Coinbase UK, Kraken UK, Gemini UK, Bitstamp UK. Rest of world: Binance or OKX. The fee difference compounds to a few hundred dollars a year at most — negligible compared to the slippage and operational cost of choosing a thinner venue. Buy, then transfer to a self-custody wallet (see the wallet article). The exchange is an on-ramp, not a savings account.

Active trader · spot with occasional swing

Use one primary venue plus one backup. Primary: a top-three depth venue for your jurisdiction (Coinbase Advanced, Kraken Pro, Binance, OKX). Backup: a venue with different listings or strengths — Bybit for derivatives, Bitget for copy trading, Bitstamp for European fiat rails. Diversification reduces single-venue downtime risk during volatility windows.

Derivatives-focused trader

Binance or Bybit globally; for US-based traders, the options are CME futures through TastyTrade or Interactive Brokers (cash-settled, regulated), Kraken Pro futures (limited to non-US for derivatives), or offshore venues with a different jurisdictional setup. Avoid second-tier derivatives venues — the wick risk and insurance-fund risk make them measurably worse expected value at the same nominal leverage.

Small-cap and newly-listed token sniping

New tokens often list first on Gate or MEXC before showing up on Binance or OKX a few weeks later. If you specifically trade IEO and first-listing flows, keep a small, lightly-funded account at one of those venues for that purpose only. Never park sizable balances there — historical operational risk is much higher.

§10 · US & European reader perspective

The first nine sections of this article are jurisdiction-agnostic. For US, UK and EU readers, the venue choice looks materially different because the regulatory framework is more developed and the available products are different. This section is the one that does not appear in the Chinese version.

Coinbase · the US default

Coinbase (NASDAQ: COIN) is the US compliance gold standard. Founded 2012, IPO 2021. Regulated as a Money Services Business by FinCEN, holds a New York BitLicense, and as a Nasdaq-listed company is subject to SEC reporting (10-K, 10-Q, 8-K). USD balances are held in FDIC-insured partner banks with pass-through insurance up to $250,000 per user — not the same as a brokerage account's SIPC coverage, but materially stronger than no protection at all. Crypto custody is segregated and held primarily in cold storage. Fees on the main consumer Coinbase app are high (typically a spread plus a flat fee that works out to 1.5-2% for small buys). Coinbase Advanced (the renamed Coinbase Pro) drops that to a 0.4-0.6% maker/taker structure — at scale, basically every active trader uses Advanced rather than the main app. Coinbase Custody is the chosen custodian for most US spot Bitcoin ETFs (IBIT, FBTC, ARKB), which makes Coinbase structurally central to the entire US ETF apparatus. A Coinbase outage during a high-volatility window has spillover effects on ETF NAV and primary-market creation/redemption mechanics.

Kraken · the long-running serious-trader venue

Kraken was founded in 2011 and is one of two US exchanges (along with Coinbase) that has never been hacked at the customer-funds layer. FinCEN-registered in the US, FCA-registered in the UK, CASP-authorized in the EU through Kraken EU (Ireland based). Kraken Pro offers institutional-grade fees competitive with Binance. The trade-off: support is email-based (slower first response than chat), and some derivatives products are restricted by jurisdiction (US futures available only via Kraken Futures with KYC). Kraken settled with the SEC in February 2023, paying $30M and ending its US staking-as-a-service program. Outside the US, Kraken still offers staking.

Gemini · NY-regulated, conservative

Gemini was founded by the Winklevoss twins in 2014 and is regulated as a New York Trust Company under NYDFS BitLicense. The most conservative of the major US venues — fewer listings, higher fees on the main app, but strong on operational discipline and never hacked at the custody layer. Gemini's Earn program collapsed alongside Genesis in 2022-2023; customers eventually recovered through the bankruptcy process, but the episode was a black mark on the firm's reputation that took time to recover from. Best fit for users who specifically want a NY-domiciled, BitLicense-supervised venue and are willing to trade some product breadth for that.

Binance.US vs. Binance.com

These are different legal entities with different cap tables, different licenses, and different product offerings. Binance.com does not serve US persons. US-IP access is blocked, and KYC will reject US-issued ID. Binance.US is a US-only, FinCEN-registered MSB with state-by-state licensing. After the November 2023 DOJ settlement against Binance Holdings ($4.3B total), Binance.US restructured its operations and trading volume dropped sharply. Binance.US still operates, but with limited products (spot only, no derivatives, fewer altcoins) and reduced liquidity. For most active US traders, Coinbase or Kraken is operationally superior to Binance.US today, even though Binance.com remains the global depth leader.

EU after MiCA · December 2024 onward

The Markets in Crypto-Assets Regulation (MiCA) became fully applicable across the EU at the end of December 2024. Any exchange operating in the EU now requires a CASP (Crypto-Asset Service Provider) authorization issued by an EU national supervisor and effective EU-wide via passporting. The compliant venues for EU readers are:

• Bitstamp (Luxembourg). One of the oldest exchanges still operating, CASP-authorized through Luxembourg's CSSF, with deep SEPA Instant rails. Acquired by Robinhood in 2024.
• Bitvavo (Netherlands). CASP-authorized through Dutch DNB. The default Netherlands-based venue; very strong on Euro rails.
• Coinbase Europe (Ireland). The EU arm of Coinbase, CASP-authorized through the Central Bank of Ireland.
• Kraken EU (Ireland). CASP-authorized through the Central Bank of Ireland. Same trading engine as Kraken global.
• Binance EU. Operating through a network of country-specific MiCA authorizations (Binance France, Binance Spain, Binance Italy, etc., each registered with the local supervisor).

The other MiCA effect that has bitten EU users is the stablecoin reserve rules. Tether (USDT) declined to apply for MiCA compliance; Circle (USDC) is fully compliant. The practical result: most regulated EU venues have delisted or restricted USDT, and USDC is now the de facto MiCA-compliant stablecoin for European users. If you want a stablecoin parking spot during a cycle bottom and you are in the EU, USDC is the cleaner option from a regulatory standpoint.

UK after FCA registration · separate regime

Post-Brexit, the UK is outside MiCA and runs its own FCA registration regime for crypto firms. The FCA-registered list is shorter than the EU CASP list. Coinbase UK, Kraken UK, Bitstamp UK and Gemini UK are the most relevant venues for retail UK readers. The FCA also imposes promotional rules — crypto firms cannot run unrestricted advertising in the UK, and onboarding flows for UK users include cooling-off periods and explicit risk-warning consents. Expect a more friction-heavy first-day experience than in the EU or US.

Offshore for derivatives · the workaround

US retail cannot trade leveraged perps on Coinbase, Kraken or Gemini. The CFTC-regulated alternative is CME Bitcoin futures, which are cash-settled, regulated, accessible via TastyTrade or Interactive Brokers, and have a different mechanic from offshore perps (no funding rate, but quarterly settlement, and you pay a basis premium that compresses or expands with sentiment). Some US traders use offshore venues (Bybit Dubai-licensed via VARA, OKX with its non-US operations) by routing through a non-US entity — that is a personal compliance call and not something this article will recommend either way. Be aware that exchange terms of service explicitly prohibit US persons from those venues, and the consequences if you are caught range from account closure with frozen balances to enforcement exposure. For European readers, MiCA-authorized venues like Kraken EU offer perpetuals up to 5× leverage (lower than the offshore 100×, but enough for any non-degenerate strategy).

2024 lessons · custodial risk is real

The Voyager, Celsius, BlockFi and FTX cascade in 2022-2023 cost US retail tens of billions in trapped or destroyed deposits. Voyager customers recovered partial cents-on-the-dollar through a long bankruptcy process. Celsius's claim distribution was likewise partial and slow. BlockFi paid out roughly 50% to general unsecured creditors. FTX bankruptcy proceedings are still in motion as of 2026, with the eventual recovery believed to be material thanks to recovered Anthropic equity and other assets — but the timeline is years. The lesson is unchanged from 2014 Mt.Gox: an exchange is a tool, not a savings account. Long-horizon stack belongs in self-custody. For traders who genuinely need exchange custody — for instance to use stop-losses or perpetuals — never leave more on the exchange than you can afford to lose in a worst-case scenario. For US readers specifically, the spot ETFs in regulated brokerage accounts have created a structurally safer custody path that did not exist before 2024. For long-term BTC exposure, a Coinbase Custody-backed spot ETF inside a regular brokerage account is operationally far safer than a balance sitting on an exchange.

Tax reporting · US, UK, EU

US: Coinbase, Kraken and Gemini issue Form 1099-MISC (for staking and rewards) and from tax year 2025 onward, Form 1099-DA (digital asset broker reporting) for spot trades. You are still responsible for accurate reporting of cost basis on transfers between exchanges — the 1099 only covers the in-venue activity.
UK: HMRC treats crypto disposals as Capital Gains Tax events. Self-assessment requires you to track cost basis across all venues. Bed-and-breakfasting (selling and rebuying within 30 days) anti-avoidance rules apply.
EU: tax treatment varies enormously by country. Germany still allows tax-free disposal of crypto held for over 12 months by individual holders. Portugal tightened in 2023 but remains favorable for long holds. France treats crypto-to-crypto as taxable. Italy moved to 26% on gains above €2,000. There is no MiCA-level tax harmonization, and there is no current plan for one.

US/EU 5-dimension comparison · key venues

§11 · "Affiliate links and fee rebates" — the common question

Using an affiliate link to register at an exchange typically gives you an immediate fee discount (usually 10-30%), and bundles in an attribution to the referrer (the person whose link you used). The referrer earns a slice of the trading fees you pay going forward — this is the standard mechanic at every major venue (Binance, OKX, Bybit, Bitget, Coinbase, Kraken — Coinbase calls it "Coinbase One Verified" with referrer rewards; the mechanic is the same).

A concrete example: $10,000 in monthly volume × 0.1% fee = $10 in fees. Affiliate-discounted = $7 to you, $3 split between the referrer and the platform's referral pool. You saved $3, the referrer earned roughly $3. Net positive for both sides; the only "loser" is the exchange's referral budget, which is designed to be spent. If you registered without an affiliate link and want to add one retroactively, some exchanges (Binance's "Fee Back" program is the clearest example) let you bind to a referrer through a support ticket without re-registering.

"Wait, isn't a high affiliate rebate a red flag?"

Common misconception. The affiliate mechanic is an industry standard, not a back-door arrangement. The referrer's cut does not change the exchange's reliability, the spread you pay, or the security of your funds — it only changes which marketing budget pocket the share goes into. Using an affiliate link is strictly weakly preferable to not using one — you get a fee discount that you would not otherwise have. The only thing worth avoiding: secondary-market "high rebate" accounts being sold by third parties claiming to give you a higher share. These typically involve re-binding to obscure parent accounts and create unnecessary security risk on your KYC. Stick to first-party affiliate links from people you have a reason to trust.

§12 · Real-world mistakes I have made

1. Wrong-chain withdrawal · lost 5,000 USDT for three weeks

Early in my crypto career, I sent USDT from exchange A on TRC-20 to an address at exchange B that only supported ERC-20. The USDT was visible on chain but unrecognized by exchange B's deposit listener. Three weeks of support tickets and a $50 manual recovery fee later, exchange B recovered the deposit for me — only because USDT is a recoverable asset; if it had been a coin without that infrastructure, the funds would have been permanently lost. Lesson: every withdrawal, first copy the receiving address from the destination exchange and check which chain it expects, then go to the source exchange and match it. Confirm chain compatibility on both sides before pressing send.

2. Small exchange held a withdrawal for 72 hours

I tried to withdraw from a smaller, no-name exchange. The withdrawal sat in "processing" for three days. Live support was auto-replies; human escalation was unresponsive. The withdrawal was only released after I tagged the exchange's official Twitter account publicly. Lesson: do not park balances on small exchanges. After any trade you do on a small venue, withdraw immediately. The premium you might capture on a thin-listing token is small compared to the operational risk of leaving funds behind.

3. P2P deposit got my bank account frozen

I sold USDT on a P2P market. The buyer paid me in local currency. The next day, the bank flagged the deposit as "suspicious transaction pattern" and froze the account. Two months of communication with the bank to unfreeze, including providing trade records and KYC from the exchange. Lesson: large P2P trades go through bank rails (you can document the trade and dispute the freeze with the bank); small P2P trades go through fast payment apps. Never mix the two paths in a way that creates an unexplained large transaction in your bank account.

4. Large 3 AM withdrawal · 18-hour risk-review hold

At 3 AM local time I initiated a 30 BTC withdrawal to self-custody. The withdrawal triggered the exchange's risk-review queue and sat for 18 hours. The support response was "queued for manual review, please wait." Lesson: large withdrawals during normal business hours, not at 3 AM. Support is staffed differently overnight, escalation paths are slower, and the queue depth is worse. The withdrawal itself is identical, but the operational SLA is not.

5. Single email across multiple exchanges · AML cross-flag

I had registered four exchanges using the same Gmail address. One exchange's AML system flagged my account as part of a "linked account pattern" (probably from device fingerprinting), and within a few weeks, two of the other three exchanges requested re-verification. Lesson: use a different email per exchange (Gmail's "+1", "+2" alias trick works). It costs nothing and decouples cross-exchange AML risk.

§13 · Closing

The default failure mode in exchange selection is over-indexing on fees. Fees are visible, comparable in basis points, and easy to talk about, so they win the conversation. But the real arithmetic for an active trader is roughly: a 0.05% fee difference on $10,000 monthly volume is $5 per month. A 0.5% slippage cost from thin liquidity on the same volume is $50 per month. A security incident is the entire balance. Those three numbers tell you what to optimize for.

The mature approach: pick one or two first-tier venues as your primary tools — selecting them by jurisdiction and compliance fit rather than fees. Treat affiliate codes and bonuses as second-order optimizations. Diversify across two to three venues for trading capital. Keep long-horizon holdings in self-custody (see the wallet article). These habits, learned across the 2017 and 2021 cycles, are the closest thing to a default playbook that has held up across regimes.

One last line worth carrying: an exchange is a tool, not a home. A tool is something you pick up when you need it and put down when you do not. Coins in your own custody are the coins you actually own.