A crypto exchange is a platform where you buy, sell, and swap cryptocurrencies, either for other cryptocurrencies or for traditional money like dollars or euros. Choosing the right one matters more than most beginners expect. The exchange holds your funds, and its failure is your loss.
None of that is theoretical. FTX collapsed in November 2022 while ranking among the largest exchanges in the world. Customers who had done nothing wrong lost access to their assets. The exchange you pick is the largest counterparty risk most crypto users ever take. Pick carefully.
How a crypto exchange works
Centralized exchanges function much like a stockbroker. You deposit funds. The platform holds them, and you trade against an order book that matches your order with someone taking the other side.
Behind that interface, three things happen.
- Custody. The exchange holds your assets and controls the private keys.
- Matching. Its engine pairs buy and sell orders by price and time.
- Settlement. Balances update internally. Nothing touches the blockchain until you withdraw.
That third point surprises people. Trades inside an exchange are database entries, not on-chain transactions, which is why they settle instantly and cost less than moving funds yourself.
The main types
| Type | How it works | Custody |
|---|---|---|
| Centralized (CEX) | Company operates an order book and holds funds | Exchange holds your keys |
| Decentralized (DEX) | Smart contracts price trades against liquidity pools | You hold your keys |
| Peer-to-peer (P2P) | Platform matches individuals who settle directly | Usually escrow during the trade |
| Broker | Sells you crypto at a quoted price, no order book | Varies by provider |
Because fiat deposits, customer support, and a recoverable account are difficult to replicate anywhere else, most people start on a centralized exchange.
How to choose a crypto exchange
Work through these in order. The first is not a preference.
1. Regulation. Check which authority licenses the platform and in which jurisdiction. A regulated exchange operates under capital requirements, reporting obligations, and supervision, and there is a body you can escalate to when something goes wrong. An unregulated platform offers none of that, whatever its marketing says. Verify the licence on the regulator's own register rather than taking the website's word for it.
2. Custody and proof of reserves. Ask where assets are held, whether client funds are segregated from company funds, and whether the platform publishes proof of reserves. Commingling customer and corporate money is exactly what failed at FTX.
3. Security track record. Look for independent security audits, cold storage practices, and whether the platform has ever been breached. Published audit scores from firms like Hacken or CertiK are verifiable. Self-reported claims are not.
4. Real liquidity. Deep liquidity means your orders fill near the quoted price. Thin books cost you on every trade through slippage. That slippage frequently exceeds the headline fee.
5. Total fees. Compare maker and taker fees, deposit and withdrawal charges, and the spread. The advertised rate is only part of it.
6. Fiat access. Check which deposit methods and currencies are supported. Then check what a withdrawal back to your bank actually costs.
7. Asset selection. More listings does not automatically mean better. A curated list means someone reviewed what got listed, and thousands of tokens usually means nobody did.
8. Support and jurisdiction. Find out whether support is reachable. Check which country's law governs your account.
Regulation, in more detail
Regulation heads the list. Being specific about what it changes is worth the space.
A licensed exchange typically must hold capital reserves, segregate client assets, run KYC and anti-money laundering programmes, submit to audits, and report to its regulator. Those obligations cost money. That is precisely why unregulated platforms undercut on fees.
Recourse is what it buys you. It only exists before you need it. Where a regulated firm fails or misbehaves, a supervisory authority exists with the power to investigate and act. When an offshore platform stops processing withdrawals, there is frequently nobody to call.
Checking is straightforward. Regulators publish public registers of licensed entities, so a licence can be verified rather than trusted.
Warning signs
- Guaranteed returns of any size, which no legitimate exchange offers
- No named regulator, or vague claims about being "compliant" without naming an authority
- No identity verification, since every licensed platform requires it
- Withdrawal problems reported by users, historically the earliest signal of insolvency
- Anonymous leadership, or a team page with no verifiable names
- Pressure tactics, countdown offers, or bonuses for larger deposits
Where mb.io fits
Apply that checklist to mb.io. It is a regulated crypto spot exchange, licensed by VARA in the UAE and AUSTRAC in Australia. Behind it stands MultiBank Group, a financial institution founded in 2005 that serves more than 2 million clients across 100+ countries.
- Regulated by VARA in the UAE and AUSTRAC in Australia, verifiable on both registers
- 10/10 security score from Hacken, an independent blockchain security auditor
- Institutional-grade MPC custody powered by Fireblocks, with segregated client funds
- A curated list of assets, so you're not sorting through thousands of tokens to find the ones worth trading
- Buy, sell, and swap in three steps, from sign-up to purchase
- 24/7 customer support, on web and on the iOS and Android apps
Open your account and start trading on mb.io.
Frequently asked questions
What is the safest type of crypto exchange?
A regulated centralized exchange with segregated client funds and published security audits carries the lowest operational risk for most users. Decentralized exchanges remove custody risk entirely and replace it with smart contract risk and no recourse if you make a mistake.
How do I check if a crypto exchange is regulated?
Look up the licence on the regulator's public register directly. Authorities including VARA in the UAE and AUSTRAC in Australia publish searchable lists of licensed entities, so a claim on an exchange's website can be verified independently.
What happens to my crypto if an exchange collapses?
It depends on whether client funds were segregated. Where assets were properly separated and the platform was regulated, recovery is far more likely. FTX customers in November 2022 discovered client and company funds had been commingled, and recovery took years.
Do I need to complete KYC on a crypto exchange?
On any licensed centralized exchange, yes. Identity verification is a legal requirement under anti-money laundering rules in every major jurisdiction, and platforms advertising no verification are operating outside those frameworks.
Which is cheaper, a centralized or decentralized exchange?
It depends on the trade. Centralized exchanges usually offer tighter spreads and deeper liquidity on major pairs. Decentralized exchanges avoid account fees and add network gas costs, which makes them expensive for small trades.
Should I leave my crypto on an exchange?
Exchange custody means the platform holds your keys, and self-custody means you do. Each carries a distinct risk: platform failure on one side, permanent loss from a mislaid key on the other. Which suits you depends on amount, frequency of trading, and your own security practices.
What is the difference between a crypto exchange and a broker?
An exchange matches your order against other traders through an order book. A broker sells you crypto directly at a quoted price. Simpler, and usually a wider spread.
