How to Buy and Secure Bitcoin: A Careful Beginner's Guide

Key takeaways

• You can buy bitcoin through a regulated exchange or broker, or in some cases through other channels. Compare fees, security and reputation, and be wary of anyone who contacts you first.
• Bitcoin on an exchange is held by the exchange. Bitcoin in a wallet where you keep the keys is held by you. Each has different risks.
• Your recovery phrase is the key to your bitcoin. Write it on paper or metal, store it offline and never type it into a website or share it.
• Nearly all bitcoin scams rely on urgency, secrecy or a promise of guaranteed returns.
• Start with an amount you could afford to lose, and do a small test transaction first.

Before you buy anything

If you have not read it yet, What Is Bitcoin? covers the basics, and the Start Here path lists the core guides. Then work through a few honest questions.

• Can you afford to lose what you plan to spend? Bitcoin’s price can drop sharply, and it is not insured.
• Do you have an emergency fund and any high-interest debt paid down? Those usually come first.
• Are you buying because you understand it, or because of fear of missing out?

Nothing here is personalized advice. A qualified financial professional can help you decide whether and how much bitcoin fits your circumstances.

Ways to buy

Regulated crypto exchanges. These are the most common route for US buyers. You create an account, verify your identity, link a bank account or card and place an order. Verification, known as KYC, is required by law for most US platforms. See Is Bitcoin Regulated in the US?.

Brokerage accounts. Some brokerages let customers buy bitcoin directly, and US-listed spot Bitcoin ETFs, available since January 2024, can be bought like any other fund. An ETF gives you price exposure but not the coins themselves, so you cannot withdraw or spend them. See Bitcoin ETFs: What They Are and What They Mean for Investors.

Peer-to-peer and Bitcoin ATMs. These exist but tend to carry higher fees or higher scam risk. Beginners are generally better off with a regulated platform.

We do not recommend or rank specific companies. When you compare options, look at:

• Fees: trading fees, spreads (the gap between buy and sell prices), and withdrawal fees.
• Security track record and whether the company publishes how it stores customer assets.
• Whether it is registered and available in your state.
• Whether you can withdraw bitcoin to your own wallet.
• Quality of customer support.

Fees change often, so check the current fee page yourself.

Buying, step by step

1. Choose a platform and read its fee schedule.
2. Create an account with a unique, strong password and turn on two-factor authentication using an authenticator app or a hardware security key. Text-message codes are weaker because phone numbers can be hijacked.
3. Complete identity verification.
4. Fund the account and place a small first order.
5. Consider whether to keep the bitcoin there or move it to a wallet (see next section).

Keep records of each purchase, including date, amount and price. You may need them for taxes, and the IRS treats bitcoin as property in general terms. Details depend on your situation, so see a tax professional or check the IRS website at irs.gov.

Exchange or wallet?

When you leave bitcoin on an exchange, the exchange holds the keys and you hold a claim against the company. This is convenient and easy to recover if you forget a password. The risk is that exchanges can be hacked, freeze withdrawals or fail. Several well-known ones have.

With a self-custody wallet, you hold the keys. Nobody can freeze your coins, but nobody can rescue you either if you lose your backup. Many people split the two: a small spending amount on an exchange and long-term holdings in self-custody.

Wallet types, roughly from most convenient to most secure:

• Mobile or desktop software wallets: free and simple, but they live on a device that connects to the internet.
• Hardware wallets: small dedicated devices that keep keys offline and sign transactions. Buy directly from the manufacturer, never from a reseller or a used listing.
• Multisignature setups: require more than one key to spend. They add safety but also complexity.

The full picture is in The Power of Self-Custody: Owning Your Own Keys.

Back up your recovery phrase

When you set up a wallet, you are shown a recovery phrase, typically 12 or 24 words. This phrase can rebuild your wallet on any compatible device, and it also lets anyone who sees it take your bitcoin.

• Write it on paper or stamp it into metal. Do not take a photo and do not store it in cloud notes, email or a password manager entry on a synced device.
• Keep it offline in a secure place. Some people keep a second copy in a separate location in case of fire or flood.
• Never type it into a website, app or chat window. Real support staff and wallet makers will never ask for it.
• Test recovery with a small amount before trusting the setup with a large one.

Also think about what happens if you die or become incapacitated. Someone you trust needs a way to find and use the bitcoin, and this is covered in the self-custody guide.

Do a test transaction

Whenever you send bitcoin to a new address, send a small amount first and confirm it arrives. Bitcoin payments are generally irreversible. Check the address carefully, since malware can swap addresses that you copy and paste.

Common scams

Scammers target newcomers because mistakes cannot be undone. Warning signs include:

• Guaranteed or unusually high returns, or “trading bots” and “mining pools” that promise profit.
• Unsolicited contact by text, social media, dating apps or fake customer support.
• Urgency and secrecy, such as “act now” or “don’t tell your bank.”
• Requests for your recovery phrase or remote access to your computer.
• Fake exchange or wallet websites and apps, often promoted by search ads. Type the address yourself or use a bookmark.
• Payment demands in bitcoin from someone claiming to be a government agency, a utility or a relative in trouble. Real agencies do not demand bitcoin payments.
• Giveaways that ask you to send bitcoin to receive more back. They always steal it.

If you are scammed, stop sending money, keep records and report it. The Federal Trade Commission and the FBI’s Internet Crime Complaint Center accept reports. Recovery is often not possible, which is the strongest reason to prevent it.

Where to go next

• How Does Bitcoin Work? Blocks, Miners and Keys Explained: what your keys actually do.
• The Power of Self-Custody: Owning Your Own Keys: hardware wallets, multisig and inheritance.
• Is Bitcoin Regulated in the US?: KYC, taxes and who oversees what.
• Bitcoin ETFs: What They Are and What They Mean for Investors: another way to get exposure.