Personal Finance

Don't buy your bitcoin from a place that could disappear overnight

Key Points
  • There are at least 190 exchanges to chose from.
  • Here's how to decide on the right one for you.
How to choose the right crypto exchange for you
VIDEO1:1301:13
How to choose the right crypto exchange for you

Your first step into the new world of cryptocurrencies is often through an exchange, a marketplace in which buyers and sellers interact. In theory, that's not all that different from a stock exchange.

The reality can sometimes be quite different.

To get started, investors sign up with an online exchange using their bank account, credit card or digital currency.

Yet instead of relying on a third party like a broker to execute a transaction as you typically do with a stock, bond or ETF, cryptocurrencies trade on decentralized platforms with no middle man.

Is it a fly-by-night operation operating out of a P.O. box in the Bahamas or is it a genuine operation, of which we have many? 
Emin Gün Sirer
a professor at Cornell who writes about bitcoin

There are at least 190 exchanges in operation, with new ones popping up every day.

Most of them don't operate under any rules, regulations or obligation to replace your digital money should it lose all value, get lost, stolen or hacked. One of the first exchanges to go mainstream – Mt. Gox – ended in bankruptcy.

Here's what you should consider about where you buy and sell your cryptocurrencies.

Always remember: These assets are incredibly volatile (In December, bitcoin was trading at more than $19,000. As of Tuesday, it was at $8,860). And so never invest more than you can afford to lose.

In addition, the IRS has labelled these currencies a property, meaning every transaction needs to be recorded and eventually taxed at your capital gains rate.

Find the right exchange for your location

In the past few months, San Francisco-based Coinbase has poached key executives from LinkedIn, Twitter, Facebook and the NYSE and has doubled the size of its full-time engineering team.
Michael Short | Bloomberg | Getty Images

Experts say if you're in the United States, you would be wise to pick an exchange based in the United States.

Look for an address for the company. If you can't find one, that should be a red flag.

If you don't know where your exchange is located, "when you get hacked it's going to be very difficult for you to even find the right jurisdiction in which you should sue the people who stole your money," said Emin Gün Sirer, an associate professor of computer science at Cornell University who writes about bitcoin.

Check the relevant policies 

Visual representation of the cryptocurrency Bitcoin on February 1, 2018.
Chesnot | Getty Images

Not all cryptocurrency exchanges accept U.S. dollars. If you don't have any digital tokens yet, like most people, you'll need to find an exchange that takes cash.

Make sure the exchange will work with you. For example, one of the biggest exchanges, Bitfinex, doesn't accept United States payments, citing, among other reasons, a challenging regulatory landscape.

To that point, check your state's stance on exchanges. In 2015, New York designed rules that require cryptocurrency companies to meet certain regulatory standards.

Recently, the U.S. Securities and Exchange Commission has focused its attention on exchanges, requiring that certain ones register with the department. In the meantime, the agency warns investors not to assume that these exchanges' meet SEC standards.

Look into the reputation 

Hackers participate in the Wikimania Hackathon at George Washington University in Washington, D.C.
Jim Watson | AFP | Getty Images

"Is it a fly-by-night operation operating out of a P.O. box or is it a genuine operation, of which we have many?" Gün Sirer said.

A simple Google search can turn up some telling results about potential problems. For example, when you search, "Bitfinex hack," you'll quickly see a Wikipedia page dedicated to the event. You should also try to speak to other users of an exchange and inquire about their experience.

Online forums have become a magnet for cryptocurrency exchange information as well.

"There are a lot exchanges that have been hacked," said Timothy Tam, co-founder and CEO of CoinFi, a cryptocurrency market intelligence platform. "Get yourself educated."

Confirm that there's enough security 

Major bitcoin exchanges hit by cyberattacks as record rally makes them a target
VIDEO0:3800:38
Major bitcoin exchanges hit by cyberattacks as record rally makes them a target

Experts say cryptocurrency exchanges should follow what are called "know your customer" (KYC) and "anti-money laundering" (AML) procedures, which are designed to reduce the risk of illegal or fraudulent activity by certifying customers' identity.

"If it's really easy to open an account, and it's really easy to shield your cryptocurrencies from the IRS, then it's going to be just as difficult to get your money back when things go south," Gün Sirer said.

Make sure the exchange keeps the majority of its assets offline. At least 95 percent of the exchange's assets should be offline, said Tam. Coinbase, for example, says it keeps 98 percent of its customers' funds off the internet.

Fees and "volume" 

Why is the price of bitcoin different on different exchanges?
VIDEO1:3201:32
Why is the price of bitcoin different on different exchanges?

Most exchanges make you weigh fees against protection, experts say.

The more secure exchanges charge a higher transaction rate. Coinbase charges a base rate of up to 4 percent for all transactions, for example, while other exchanges — with fewer guarantees, perhaps — can charge as low as 0.2 percent.

You also want to pick an exchange with high volume (you can check exchanges by volume on coinmarketcap.com). A higher volume tends to lead to higher price accuracy, experts say, since the exchange is processing many transactions at once rather than a few an hour — over the course of which these volatile investments can lose or gain thousands of dollars.

No matter how much you've researched and verified an exchange, don't keep too much money on it for too long, said Matti Kon, CEO of financial software company InfoTech. Instead, transfer the digital coins offline and into a hardware wallet, safe from hackers.

"Do your thing and get off quick," Kon said.

More from Personal Finance:
Bitcoin, once 'sketchy,' becomes more mainstream
Some cryptocurrency-backed debit cards dropped from Visa network, leaving users scrambling
Bitcoin is too risky to treat as a 'serious' investment, financial advisers say