Course 04 · Lesson 01

Choosing a Regulated Exchange

~8 min readLesson 01/7Free

The exchange you choose is one of the most consequential decisions in your crypto journey - not because of the features it offers, but because of what happens if it fails. The collapse of FTX in November 2022 - the world's third largest exchange at the time - erased approximately $8 billion of customer assets. Celsius, Voyager, BlockFi, and Mt. Gox all followed the same pattern: exchanges holding customer funds failed, and customers lost access to their assets for months or years - often permanently. The first and most important step in buying crypto is choosing a platform where the probability of this outcome is as low as possible. This lesson shows you exactly what to look for.

Why Regulation Matters

Regulation does not guarantee safety - FTX was operating in some regulated jurisdictions when it collapsed. But regulation creates a framework of oversight, capital requirements, segregation of customer funds, and reporting obligations that significantly reduces (though does not eliminate) the risk of exchange failure and customer fund loss.

An unregulated exchange faces no external requirement to maintain adequate reserves, segregate customer funds from company funds, submit to regular audits, or maintain minimum capital ratios. When an unregulated exchange fails - as many have - customers have no regulatory body to appeal to, no insurance scheme to claim against, and typically recover a fraction of their assets through lengthy and uncertain legal processes.

What Regulation Actually Means

Different regulatory regimes provide different levels of protection. Regulation in major financial jurisdictions - the US (SEC, CFTC, state money transmitter licences), UK (FCA), EU (MiCA), Australia (ASIC), and Singapore (MAS) - requires exchanges to meet meaningful standards. Regulation in offshore jurisdictions may provide nominal compliance without meaningful oversight. In these major jurisdictions, completing KYC (Know Your Customer) and complying with AML (Anti-Money Laundering) laws are standard operating procedures for any Regulated Exchange.

REGULATORY JURISDICTIONS - COMPARISON

United States:
• Regulators: SEC, CFTC, FinCEN, state-level money transmitter licences.
• Requirements: Strict KYC/AML, capital adequacy, segregation of customer funds.
• Examples: Coinbase (publicly listed, SEC-registered), Kraken.
• Protection level: HIGH.

United Kingdom:
• Regulator: FCA (Financial Conduct Authority).
• Requirements: Registration, AML compliance, consumer protection rules.
• Protection level: HIGH.

European Union:
• Regulation: MiCA (Markets in Crypto-Assets) framework.
• Requirements: Comprehensive - capital, custody, disclosure requirements.
• Protection level: HIGH.

Australia:
• Regulator: ASIC.
• Requirements: Australian Financial Services Licence for certain activities.
• Protection level: MODERATE-HIGH.

Offshore (Cayman Islands, Seychelles, etc.):
• Requirements: Minimal to none.
• Protection level: LOW - regulatory arbitrage jurisdiction.

Key Factors When Choosing

EXCHANGE SELECTION CRITERIA

Regulatory status: Is the exchange licensed in your jurisdiction or a major financial centre? Not just "registered" - actively licensed.
Track record: How long has the exchange operated? Has it experienced hacks or insolvency issues? How were they handled?
Proof of Reserves: Does the exchange publish regular, independently verified proof that it holds customer assets? Post-FTX, this is non-negotiable.
Liquidity and volume: Higher volume = tighter spreads, faster execution, and evidence of genuine user adoption.
Security practices: Does it offer app-based two-factor authentication? Cold storage for the majority of funds? Insurance on hot wallet holdings?
Fee structure: Trading fees, withdrawal fees, and deposit methods - compare across exchanges for your specific usage pattern.

Red Flags to Avoid

EXCHANGE RED FLAGS

No verifiable regulatory licence: "We comply with all applicable laws" without specifying a specific licence from a named authority.
Offshore jurisdiction only: Registered in Seychelles, Cayman Islands, or similar with no major market licence. Regulatory arbitrage, not compliance.
Unrealistically high yields: Offering 20%+ APY on stablecoins or crypto deposits. These are funded by unsustainable mechanisms.
No proof of reserves: Refusing to publish or verify customer asset backing.
Withdrawal restrictions: Any history of restricting withdrawals without clear, legitimate explanation. This is the first sign of insolvency.
Pressure to keep funds on platform: Incentives, fees, or lock-up structures designed to prevent you from withdrawing to self-custody.

The safest approach is to use a regulated exchange for buying and selling - and to transfer assets you intend to hold long-term to self-custody rather than leaving them on the exchange. A major reason to check Liquidity before executing large purchases is to prevent price impact, but once the purchase is made, the asset should be secured.

This separates the counterparty risk of the exchange (acceptable when actively trading) from the custody risk of long-term storage (unacceptable - use your own wallet). The exchange is a marketplace for buying and selling, not a safe for storing. Treat it accordingly.

KEY TAKEAWAYS
Exchange failure is a real and recurring risk - FTX, Celsius, Voyager, Mt. Gox all failed with significant customer losses.
Regulation reduces (not eliminates) risk - major jurisdiction licences (US, UK, EU, Australia) provide meaningful protections.
Key selection criteria: regulatory licence, track record, proof of reserves, liquidity, security practices, fee structure.
Red flags: offshore jurisdiction only, high yield promises, no proof of reserves, withdrawal restrictions.
Use exchanges for buying and selling. Move long-term holdings to self-custody. The exchange is a marketplace, not a vault.