Coinculb

Blog

  • How to choose a crypto exchange

    How to choose a crypto exchange

    The exchange you choose is the most consequential practical decision a newcomer makes, and it is usually made in about four minutes based on an advertisement.

    Criteria that matter

    1. Regulatory standing where you actually live

    Check your own national regulator’s public register rather than the platform’s marketing. “Regulated” is often technically true of an unrelated entity in an unrelated jurisdiction. What matters is whether the entity serving you is registered to do so.

    This determines what happens when things go wrong — whether you have any recourse, and whether customer assets are required to be segregated.

    2. Security and failure history

    Search the platform’s name alongside “hack”, “outage”, “withdrawal” and “insolvency”. You are looking for two things: whether incidents happened, and how the company behaved afterwards. A platform that was breached, disclosed it promptly and made customers whole is a better signal than one with no incidents and an opaque history.

    Where available, look for published proof of reserves — ideally with a liabilities attestation, since reserves alone prove nothing about what is owed.

    3. Total cost

    Four components: commission, spread, deposit fee, withdrawal fee. The spread is the one that hides. A platform advertising “0% commission” with a 2–3% spread is considerably more expensive than one charging 0.2% on a tight spread.

    Test it directly: note the buy price and the sell price for the same asset at the same moment. The gap is what a round trip costs you.

    4. Can you get money out?

    Withdrawal is where platforms most often disappoint — delays, sudden extra verification, minimums, or unexplained holds. Before committing anything meaningful, deposit a small amount and withdraw it. The experiment costs a little in fees and tells you more than any review, including ours.

    5. Support that exists

    Find out whether there is a route to a human, and search for recent user reports about response times. When something goes wrong with your money, this stops being an abstract feature.

    Criteria that do not matter as much as you think

    • Number of coins listed. Thousands of listings is not a benefit for a beginner; it mostly signals loose listing standards.
    • Sign-up bonuses. Marketing spend, usually recovered through the spread.
    • Advanced trading features. Irrelevant if you are buying and holding, and leverage in particular is a way to lose everything faster.
    • Celebrity endorsements. Several heavily endorsed platforms have failed. An endorsement is a payment, not an assessment.
    • App polish. Pleasant, but unrelated to whether your funds are safe.

    Warning signs

    • Guaranteed or fixed returns on deposits — impossible, and the clearest single red flag.
    • Pressure to deposit more, or an “account manager” who contacts you.
    • No clear corporate entity, address or regulatory registration.
    • Withdrawal problems reported by multiple users.
    • Requiring a fee before you can withdraw. This is always a scam.

    How we assess them

    Our reviews open a real account on each platform, deposit, trade and withdraw, and score against fixed published criteria — fees, security, usability, coverage, support and regulatory standing. The full method is on our editorial guidelines page, and any commercial relationship is disclosed at the top of the review itself.

    What to read next

    Next: understanding crypto fees.

  • How to buy your first crypto

    How to buy your first crypto

    Before anything else: there is no rush. Nothing is running out, no window is closing, and any message telling you otherwise is trying to stop you thinking. A first purchase made a week later after reading properly is strictly better than one made today under pressure.

    Step 1: Decide the amount first

    Decide what you are willing to lose entirely, before you look at any prices. Crypto assets have fallen 70–90% historically, so this is a realistic outcome rather than a disclaimer.

    For a first purchase, a small amount is genuinely the right answer. The purpose is to learn the mechanics — buying, fees, withdrawing, custody — not to build a position. You can always add later; you cannot un-learn an expensive mistake.

    Step 2: Choose a platform

    You will almost certainly need a centralised exchange, since that is what connects ordinary money to crypto. The criteria that matter:

    • Available and registered where you live. Check your national regulator’s register rather than the platform’s own claims.
    • Long operating history and no unresolved withdrawal problems.
    • Total cost, not headline commission — see step 4.
    • Withdrawals actually work. This is what our reviews test specifically.

    Step 3: Verify your identity

    Regulated platforms require identity documents. This is a legal obligation for anyone handling conventional money, not a warning sign — in fact a platform offering large fiat purchases with no verification is the one to be suspicious of.

    Expect to provide photo ID and sometimes proof of address. Use the official app or website, reached directly.

    Step 4: Understand what you are actually paying

    This is where most beginners lose money without noticing. Your real cost is:

    • Trading fee — the advertised commission.
    • The spread — the gap between buy and sell price. Often the largest component, and where “zero commission” platforms earn.
    • Deposit fee — card deposits typically cost much more than bank transfers.
    • Withdrawal fee — charged when moving crypto off the platform, sometimes marked well above the real network cost.

    To compare honestly, check the buy price and sell price for the same asset at the same moment on two platforms. That round-trip difference is your true cost, and it frequently bears no relation to the advertised fee.

    Step 5: Place the order

    If the platform offers both, prefer a limit order over a market order — it lets you set the price you are willing to pay rather than accepting whatever is available. On a simple “buy” interface you are usually getting a market order plus a spread.

    Start with a small test purchase. Confirm the amount that arrives matches what you expected after fees. That reconciliation teaches you more about the platform’s real cost than any comparison table.

    Step 6: Decide where it lives

    This is the step people skip, and it is the one with lasting consequences. Leaving crypto on the exchange means the platform holds it. Moving it to your own wallet means you do.

    For a small first purchase, leaving it on a reputable exchange while you learn is defensible. As the amount grows, move it. Our guide on self-custody vs leaving crypto on an exchange covers the trade-off properly, and how to set up your first crypto wallet covers the practical steps.

    If you do withdraw, send a small test amount first and confirm it arrives before moving the rest.

    Things not to do

    • Do not buy because a price is rising quickly. That is FOMO, and it means you are paying more.
    • Do not borrow to buy, or use money you need in the next few years.
    • Do not use leverage. It converts a normal fall into a total loss.
    • Do not follow a stranger’s recommendation, however confident or credentialed they appear.
    • Do not buy an obscure token as a first purchase.

    What to read next

    Next: how to choose a crypto exchange.

  • Self-custody vs leaving crypto on an exchange

    Self-custody vs leaving crypto on an exchange

    “Not your keys, not your coins” is the most repeated phrase in crypto. It is also frequently deployed without acknowledging that self-custody has genuine downsides. Here is the honest version.

    What an exchange balance actually is

    When you buy crypto and leave it on a platform, you generally do not hold crypto. You hold a claim against that company for a quantity of crypto. The company holds the keys and maintains an internal ledger.

    In normal operation the distinction is invisible — you can withdraw, so it feels like possession. The distinction becomes very visible when the company stops honouring withdrawals.

    What has actually gone wrong

    This is not hypothetical. Multiple large platforms have failed, taking customer funds with them. In several cases customers were treated as unsecured creditors in bankruptcy — behind secured lenders, recovering a fraction of their balance years later, if at all. Others have been hacked, and some froze withdrawals with no warning while insisting publicly that everything was fine.

    The pattern is consistent enough to be a planning assumption rather than a tail risk: platforms that look healthy can stop honouring withdrawals with little notice.

    The case for keeping some on an exchange

    Being fair to the other side:

    • You cannot lose it to your own mistake. No seed phrase to lose, no address to mistype. For a beginner this genuinely prevents a category of permanent error.
    • Recovery exists. Forgotten password, lost phone, compromised account — support can often help. Self-custody has none of that.
    • Convenience. Trading, converting to ordinary money and moving between assets are all far easier.
    • Some protections may apply in some jurisdictions, though far fewer than for bank deposits and rarely covering the crypto itself.

    The case for self-custody

    • No counterparty. No company can freeze, lend out or lose your assets. Platform failure becomes irrelevant.
    • No permission needed. You can transact regardless of account reviews, regional restrictions or policy changes.
    • You can verify it. Your balance is on a public ledger, not in a company’s database.

    The honest downside of self-custody

    It transfers every risk to you, and the failure modes are permanent. Lost seed phrase: gone. Sent to a wrong address: gone. Signed a malicious approval: gone. There is no support desk and no reversal.

    A meaningful proportion of self-custodied crypto has been lost to simple human error rather than theft. Self-custody is not automatically safer — it is safer if you are disciplined about backups and cautious about what you sign. If you are not, an exchange may genuinely be the lower-risk option for you today.

    How to decide

    A workable framework:

    • Actively trading small amounts? An exchange is reasonable. Use app-based two-factor authentication, not SMS.
    • Holding for the long term? Self-custody. There is no reason for long-term holdings to sit on a trading platform.
    • Amount that would materially affect your life? Self-custody, hardware wallet, metal backup, two locations.
    • Not yet confident with seed phrases? Keep the amount small, practise self-custody with a little, and move more across as your confidence grows. Learning on an amount you can afford to lose is exactly the right approach.

    If you do use an exchange

    Favour long operating history, meaningful regulatory standing where you live, and published proof of reserves. Enable two-factor authentication with an authenticator app rather than SMS — SIM-swap attacks are common and effective. And ask yourself periodically whether the balance sitting there is one you would be comfortable losing.

    What to read next

    You have finished the Wallets & Security path. Next, how to buy your first crypto puts this into practice.

  • How to use a hardware wallet

    How to use a hardware wallet

    A hardware wallet is the most effective single upgrade to crypto security available to an ordinary user. It is also easy to use in ways that quietly defeat the point.

    What it actually does

    The device stores your private key in a chip and never releases it. To send crypto, your computer builds an unsigned transaction and passes it to the device. You review it on the device’s own screen, press its physical buttons to approve, and only the signature returns.

    This matters because your computer is assumed to be untrustworthy. Even if it is fully compromised, the attacker cannot extract a key that never arrives — and because you verify the destination on the device’s screen, malware that swaps the address is visible before you approve.

    Buying one safely

    Buy direct from the manufacturer

    Never buy a hardware wallet second-hand, from a marketplace listing, or from an unauthorised reseller. A tampered device can be pre-loaded with a seed the seller already knows. Every coin you send to it goes straight to them, often months later.

    Two rules make this concrete. A genuine device always generates the seed phrase itself, on first setup, in front of you. If a device arrives with a phrase already printed on a card, or instructions to use a supplied phrase, it is a theft — return it and report it. And run the manufacturer’s genuine-device check during setup; both major vendors provide one.

    Setting it up

    1. Download the official companion app from the manufacturer’s site, typed directly. Not from a search advertisement.
    2. Choose “set up as new device”. Let it generate the seed.
    3. Write the seed phrase down — paper or metal, two copies, two locations. See seed phrases: how to back up properly.
    4. Set a device PIN. This protects against someone who physically takes the device; it is not the seed.
    5. Verify the backup, then send a small test transaction before moving anything meaningful.

    Using it day to day

    The habit that matters most: read the device screen every time. Your computer’s display can be manipulated; the device’s cannot. Before approving, check the destination address and the amount on the device itself, comparing at minimum the first and last several characters against where you intended to send.

    This is the single behaviour that defeats address-swapping malware, and skipping it removes most of the protection you paid for.

    What it does not protect against

    • Giving away your seed phrase. If you type it into a phishing site, the device is irrelevant. This is still the most common way hardware wallet users lose funds.
    • Approving a malicious contract. If you deliberately sign a transaction granting unlimited spending to a hostile contract, the device faithfully signs it. Read what you approve.
    • Losing the seed phrase. A broken or lost device is recoverable from the phrase. A lost phrase and a lost device is not.
    • Physical coercion. A PIN slows an attacker who has the device, but the seed phrase in your house is the real target.

    If the device breaks or is lost

    Nothing is lost. Buy a replacement — from the manufacturer — and restore from your seed phrase. This is exactly the scenario the backup exists for, and it is why testing the backup beforehand matters.

    What to read next

    Next: self-custody vs leaving crypto on an exchange.

  • Hot vs cold wallets: which do you actually need?

    Hot vs cold wallets: which do you actually need?

    People often treat this as a binary decision. It is better understood as an allocation question: how much should be immediately accessible, and how much should be deliberately difficult to reach?

    Hot wallets

    A hot wallet is any wallet whose keys sit on an internet-connected device — a phone app, a browser extension, a desktop wallet.

    Strengths: immediate access, easy to use, works with decentralised applications, free.

    Weaknesses: the key exists on a device that can be compromised. Malware, a malicious browser extension, or a phishing site that persuades you to sign an approval can all reach it. The wallet is only as secure as the machine it runs on and the judgement of the person using it.

    Cold wallets

    Cold storage keeps the key on a device that never connects to the internet — most commonly a hardware wallet.

    Strengths: remote attacks do not apply, because there is no network path to the key. Transactions are signed on the device, and you confirm the destination on its own screen — which also defeats clipboard-swapping malware.

    Weaknesses: costs money, adds friction to every transaction, and shifts your risk to physical security and backup discipline. A hardware wallet does not protect you from typing your seed phrase into a phishing site.

    What each actually protects against

    Threat Hot wallet Cold wallet
    Malware reading your device Vulnerable Protected
    Clipboard address swapping Vulnerable Protected (confirm on device)
    Exchange failure Protected Protected
    Phishing for your seed phrase Vulnerable Vulnerable
    Signing a malicious approval Vulnerable Partly — you still approve it
    Losing your seed phrase Vulnerable Vulnerable

    Note the bottom rows. Cold storage is not a substitute for judgement, and neither form protects a phrase you have given away or lost.

    A simple way to decide

    Think of it as a wallet and a safe. You carry some cash for daily use and keep the rest somewhere secure.

    • Small amounts you actively use — a hot wallet is fine. Treat the balance as money you could afford to lose.
    • Holdings you would be upset to lose — cold storage. The friction is a feature.
    • Amounts that would materially affect your life — cold storage, metal seed backup, two locations, and a documented plan.

    A reasonable starting rule: if losing the balance would ruin your month, it does not belong in a hot wallet.

    Using both together

    Most experienced users run a hot wallet for interacting with applications and a cold wallet holding the bulk, moving funds across as needed. This limits what any single mistake can cost: a bad signature in the hot wallet cannot touch the cold one.

    What to read next

    Next: how to use a hardware wallet.

  • Seed phrases: how to back up properly

    Seed phrases: how to back up properly

    Everything about self-custody security reduces to one question: is your seed phrase safe, and will you still have it in ten years?

    What the phrase actually is

    A seed phrase is a human-readable encoding of a large random number. From that number, your wallet deterministically derives every private key and address it will ever use.

    “Deterministically” is the key word. The same phrase always produces the same keys, in any compatible wallet, on any device, forever. That is why a restore works — and why the phrase is functionally identical to the funds themselves.

    The words come from a standard list of 2,048, which is why your wallet can spot a typo: an invalid word is not on the list. It also means the phrase is not arbitrary text; it must be exact and in order.

    The two ways people lose crypto

    Someone else gets the phrase. Theft is immediate and irreversible. There is nothing to freeze and no one to appeal to.

    You lose the phrase. Equally permanent. An enormous quantity of Bitcoin is believed to be permanently inaccessible for exactly this reason.

    Good backup design protects against both at once, and the two goals pull against each other: copies that are easy for you to reach are easier for others to find. The right balance depends on how much you hold.

    What not to do

    • No photographs. Phone photos sync to cloud accounts, which are breached routinely and are often protected by a password you have reused.
    • No cloud notes, email or documents. Same problem, plus anyone who gains access to that account has everything.
    • No password managers. They are good tools, but a compromise of the manager becomes a total loss rather than an inconvenience.
    • No typing it anywhere except your own wallet during a deliberate restore.
    • No single copy. One fire, flood or house move and it is gone.
    • No telling anyone. Not support, not a “recovery service”, not a stranger who has been very helpful.

    What to do instead

    Paper, done carefully

    Adequate for modest amounts. Write clearly in pen, number each word, and store it somewhere private and dry — a sealed envelope in a locked drawer or a home safe. Make a second copy for a different location.

    Metal, for anything meaningful

    Metal backup plates let you stamp or engrave the words into steel. They survive house fires and flooding, which paper does not. If your holding is large enough that losing it would genuinely hurt, this is a small and sensible expense.

    Two locations

    Keep copies in at least two places you control — for instance home and a trusted relative’s house, or a safe deposit box. This protects against a single-site disaster. Both locations must be secure, since either copy is sufficient to spend your funds.

    A note on splitting

    People often split a phrase, keeping half in each of two places. Done naively this is worse, not better: you now have two ways to lose access (either half missing) and each half meaningfully narrows the search space for an attacker who finds one. Proper schemes for splitting a secret exist, but they are an advanced topic and easy to get wrong. For most people, two complete copies in two secure places is both simpler and safer.

    The passphrase option

    Many wallets support an optional extra passphrase — sometimes called a 25th word — which produces a completely different set of keys from the same seed. It defends against someone finding your written phrase, since the phrase alone reaches an empty wallet.

    The trade-off is severe: forget the passphrase and the funds are unrecoverable, even with the seed phrase in hand. It also needs its own backup, stored separately. Useful for experienced users with a clear plan; a way to lose money for everyone else.

    Plan for not being around

    If you hold a meaningful amount, consider how someone you trust would access it if you could not. Crypto has no probate process and no next-of-kin recovery. Sealed instructions with a solicitor, or a documented plan someone knows exists, prevents your holdings from simply vanishing.

    What to read next

    Next: hot vs cold wallets — which do you actually need?

  • How to set up your first crypto wallet

    How to set up your first crypto wallet

    Setting up a wallet takes about five minutes. Doing the backup properly is what separates people who keep their crypto from people who do not.

    Before you start

    Do this on a device you trust, that is free of malware and up to date. Do not do it on a shared or public computer. Have pen and paper ready — not your phone’s notes app.

    Step 1: Understand what you are creating

    A wallet does not hold your coins. Your coins live on the blockchain. The wallet holds the private key that proves they are yours and authorises spending.

    The practical consequence: if your phone is lost or destroyed, your coins are fine — you restore from the seed phrase. If the seed phrase is lost, the coins are unrecoverable by anyone, including you. And if someone else gets the phrase, they can take everything immediately and irreversibly.

    Step 2: Choose a wallet

    For a first self-custody wallet, pick something well established and widely reviewed. The important criteria are: it is open source or independently audited, it has a long track record, it supports the chains you intend to use, and it gives you the seed phrase (rather than holding keys for you).

    Download only from the official website, typed directly or reached from a bookmark. Do not click search advertisements — fake wallet apps and cloned extensions promoted through ads are a common and effective attack. Check the developer name in an app store before installing.

    Step 3: Create the wallet

    Choose “create a new wallet”, not “import”. You will be asked to set a password or PIN. This protects the app on this device — it is not the seed phrase and cannot recover your funds elsewhere. Use something strong and distinct.

    Step 4: Write down the seed phrase — properly

    The wallet will display 12 or 24 words. This is the single most important moment in the process.

    • Write them on paper, in order, numbered. Check spelling — the words come from a fixed list and a wrong word breaks the restore.
    • Do not screenshot it. Screenshots go to cloud backups, which are a target.
    • Do not type it into anything — not a notes app, not a password manager, not an email to yourself, not a spreadsheet.
    • Make two copies and store them in different physical locations, so a fire or flood does not destroy your only one.
    • Store them somewhere private. Anyone who finds the paper owns your crypto.

    For larger holdings, consider a metal backup plate — paper does not survive fire or water.

    Step 5: Verify the backup

    The wallet will ask you to confirm some of the words. Do it honestly from your paper, not from memory or a screenshot.

    Then go further: test a real restore before you deposit anything meaningful. Delete the wallet app, reinstall it, choose “import” and enter your phrase. If your (empty) wallet comes back with the same address, your backup works. Discovering the backup is wrong after you have funded it is a category of disaster you can simply avoid.

    Step 6: Send a test transaction

    Send a small amount first — a few pounds’ worth. Confirm it arrives at the address you expect. Only then move a real amount. This catches address errors, wrong-network mistakes and clipboard malware before they are expensive.

    Mistakes that cost people everything

    • Storing the phrase digitally. Cloud notes and photo backups get breached.
    • Entering the phrase into a website. No legitimate site ever needs it. See how to spot a crypto scam.
    • Only one copy. One accident and it is gone.
    • Assuming the app is the backup. It is not. The phrase is.
    • Buying a pre-configured wallet. A device or card arriving with a printed phrase is a theft in progress.

    What to read next

    Next in this path: seed phrases: how to back up properly, which goes deeper on storage strategies.

  • How to spot a crypto scam

    How to spot a crypto scam

    This is the guide we would most like every newcomer to read. Most crypto losses are not sophisticated attacks on blockchains — they are people being persuaded to hand over access. The tactics are repetitive, which means they are learnable.

    The one rule that matters most

    No legitimate person, company, wallet, exchange or support agent will ever ask for your seed phrase. There is no situation in which typing it into a website or sending it to someone is correct. Anyone asking is stealing from you, without exception — including if they appear helpful, official or urgent.

    The seed phrase scam

    How it works. You post about a wallet problem in a public forum, Discord or Telegram. Within minutes a “support agent” messages you privately. They are friendly and competent. Eventually they ask you to “validate”, “sync” or “restore” your wallet by entering your seed phrase into a form or website.

    The tell. Real support never contacts you first, and never needs the phrase. Wallet software does not require validation. If you have posted publicly about a problem, assume every direct message you receive is an attacker.

    The malicious approval

    How it works. A site offers an airdrop, a mint or a claim. You connect your wallet and are asked to sign. The signature is not a login — it grants a contract permission to spend your tokens, often without limit. Moments later your wallet is emptied.

    The tell. Read what you are signing. Wallets show the contract and permission being requested; an unlimited approval to an unknown address is a red flag. Be especially wary of claim pages reached through advertisements or direct messages. Periodically review and revoke old approvals.

    The guaranteed-return platform

    How it works. A polished site or app offers fixed daily or weekly returns — 1% a day, 15% a month. Early withdrawals work, which builds confidence and encourages larger deposits and referrals. Then withdrawals slow, then stop.

    The tell. Fixed returns are impossible with a volatile underlying asset. No legitimate crypto product can guarantee a rate, because nothing it invests in is guaranteed. Any advertised fixed return is describing something that cannot work — the money comes from later depositors until it does not.

    The romance or “friend” approach

    How it works. Someone contacts you on a dating app, a wrong-number text, or a social platform. They are warm, patient, and do not mention crypto for days or weeks. Eventually they mention their success with a trading platform. The platform is real-looking and shows your balance rising. When you try to withdraw, there are fees, then taxes, then more fees.

    The tell. The relationship arrives before the investment. Any unsolicited contact that eventually reaches a trading platform is following a script, regardless of how long it took or how genuine it felt. This category costs people their life savings more often than any other.

    The rug pull

    How it works. A new token launches with heavy promotion, a Discord full of enthusiasm and a rising chart. The creators then remove the liquidity or dump their holdings, and the price collapses to nothing.

    The tells. Anonymous team with no verifiable history. Most of the supply in a few wallets. Liquidity unlocked, or locked only briefly. Promised multiples. Countdown timers. And a community that treats any question about token distribution as an attack — see FUD.

    The impersonation giveaway

    How it works. A verified-looking account, or a livestream using footage of a well-known figure, announces that sending crypto to an address returns double.

    The tell. Nobody doubles your money. This is always theft, in every instance, regardless of whose face is on the video.

    Clipboard malware

    How it works. Malware watches for a crypto address being copied and silently replaces it with the attacker’s. You paste, glance, and send to the wrong place.

    The tell. Always check the first and last several characters of a pasted address against the source. For meaningful amounts, send a small test transaction first.

    The rules that stop nearly everything

    • Never share a seed phrase or private key. Ever. With anyone.
    • Treat anyone who contacts you first as hostile.
    • Guaranteed returns do not exist.
    • Nobody doubles your money.
    • Urgency is a technique. Slow down; legitimate opportunities survive a night’s sleep.
    • Read what you sign — an approval is not a login.
    • Bookmark the sites you use rather than searching for them; advertisements impersonate wallets and exchanges.
    • Verify addresses after pasting, and test with a small amount first.

    If it has already happened

    Crypto transactions are irreversible and recovery is usually not possible. Move any remaining funds to a new wallet with a freshly generated seed phrase — not the compromised one. Revoke outstanding approvals. Report it to your national fraud body, and to the exchange if funds passed through one, since they can sometimes freeze proceeds.

    Be aware of the follow-up scam: “recovery agents” who claim they can retrieve stolen crypto for an upfront fee target people who have already been defrauded. They cannot, and they are the same industry.

    What to read next

    You have finished the Foundations path. The natural next step is how to set up your first crypto wallet, where these rules become practical.

  • Is crypto safe? An honest answer

    Is crypto safe? An honest answer

    “Is crypto safe?” is really four questions wearing one coat. Separating them gives a far more useful answer than yes or no.

    1. Is the technology safe?

    Largely, yes — and this is the least of your worries. Bitcoin’s network has operated since 2009 without its ledger being successfully forged. Ethereum’s has run since 2015. The cryptography underlying them is the same class used by banks and governments.

    When you read “crypto exchange hacked” or “$200 million stolen in crypto”, the blockchain almost never failed. A company was breached, or a smart contract had a bug. The distinction matters because it tells you where to direct your caution.

    The real technical risk sits in smart contracts, which are ordinary software and contain ordinary bugs — except that the bugs are exploitable by anyone and the losses are irreversible.

    2. Are the platforms safe?

    Variably, and this is where money is actually lost. Exchanges have been hacked, have failed, have frozen withdrawals and have in some cases been operating fraudulently while appearing healthy. Customers of failed platforms have generally become unsecured creditors — at the back of the queue in a bankruptcy, often recovering little.

    You reduce this risk by favouring platforms with long operating histories, meaningful regulatory standing where you live, and published proof of reserves — and by not leaving more on any platform than you would be willing to lose. Moving significant holdings into self-custody removes this risk category entirely, while adding responsibility.

    3. Is it safe as an investment?

    No, and nothing can make it so. This is market risk and it is irreducible. Major cryptocurrencies have fallen 70–90% from peak on multiple occasions and taken years to recover. Smaller tokens routinely go to zero and stay there.

    Anyone describing a crypto investment as safe, low-risk or guaranteed is either mistaken or lying to you. The volatility is not a temporary phase to be waited out; it is a property of the asset class.

    What you can control is position size. If a 70% fall in your holding would affect your rent, your debts or your ability to sleep, the position is too large — regardless of how convinced you are.

    4. Is it safe from fraud?

    This is the biggest practical danger for a newcomer. Crypto combines irreversible transactions, no chargebacks, pseudonymity and a population of inexperienced participants. That is an unusually attractive environment for fraud, and the industry attracts it accordingly.

    The good news is that this risk is the most reducible of the four, because the tactics are well documented and repetitive. Nobody legitimate asks for your seed phrase. Nobody doubles your money. Guaranteed returns do not exist. Urgency is a technique for stopping you checking. Unsolicited contact that steers toward a trading platform is a script.

    Our guide on how to spot a crypto scam covers this properly, and it is the guide we would most like every beginner to read.

    So how do you make it safer?

    • Learn before you buy. There is no rush and nothing is running out.
    • Start with an amount whose total loss would be genuinely survivable.
    • Use established platforms, with app-based two-factor authentication.
    • Move meaningful holdings to self-custody, with the seed phrase written on paper and stored securely.
    • Never share a seed phrase or private key with anyone, in any circumstance.
    • Treat anyone who contacts you first as hostile.
    • Slow down when you feel urgency. That feeling is usually manufactured.

    None of this makes crypto safe. It moves you from the group that loses money to carelessness into the group whose only remaining exposure is the market — which is the risk you actually chose to take.

    What to read next

    Next: how to spot a crypto scam.

  • Why does crypto have value?

    Why does crypto have value?

    This question gets two unsatisfying answers. Sceptics say crypto has no value because it is not backed by anything. Advocates say it is digitally scarce and therefore valuable. Both are too quick.

    Where value comes from generally

    Nothing has value intrinsically. Gold is valuable because people want it — for jewellery, industry and as a store of value — not because valuable is a physical property of the metal. The pound or dollar in your pocket is not backed by gold either; it has value because a large economy accepts it, taxes are levied in it, and law requires its acceptance for debts.

    So “not backed by anything” is a weaker criticism than it sounds, since most modern money is not backed by a commodity. The stronger version of the question is: what sustains people’s willingness to hold this?

    The arguments that carry weight

    Verifiable scarcity. Bitcoin’s 21 million cap is enforced by software every participant runs and can check. That is a genuinely novel property — digital things are normally trivial to copy. But scarcity alone is worth nothing; there are scarce things nobody wants. Scarcity only matters where demand already exists.

    Utility. Ether is needed to use Ethereum — every transaction and contract call consumes gas paid in ETH. That produces real demand tied to actual usage. This argument is much stronger for chains with genuine activity than for tokens with none.

    Censorship resistance. The ability to hold and move value that no government or bank can freeze has obvious worth to people under capital controls, in unstable currencies, or cut off from banking. This is not theoretical; it is the clearest real-world use.

    Network effects. A monetary network becomes more useful as more people accept it. Bitcoin’s position owes a great deal to being first and to the accumulated infrastructure around it.

    The arguments that do not hold up

    “It is backed by mathematics.” Mathematics guarantees the rules are followed. It says nothing about whether anyone wants the result.

    “It has to go up because supply is limited.” Fixed supply constrains inflation; it does not create demand. Plenty of fixed-supply assets have gone to zero.

    “Institutions are buying, so it is validated.” Institutions buy things that later collapse. This is a statement about flows, not about value.

    “The technology is revolutionary.” A technology can be genuinely useful while a particular token attached to it is worthless. These are separate questions, and conflating them is the most common error in token valuation.

    The question to ask about any token

    For most tokens, the decisive question is whether success of the project actually accrues value to the token. Many do not: the protocol may work beautifully while the token is a governance badge with no claim on revenue and no required role. In that case the token can fall even as usage grows.

    Ask: what forces anyone to buy this token? If the honest answer is “nothing, they buy it hoping to sell higher”, you are looking at pure speculation. That is not automatically a reason to avoid it, but you should know that is what you are doing.

    Where that leaves us

    Crypto has value because enough people are willing to exchange other things for it, supported to varying degrees by scarcity, utility, censorship resistance and network effects. Those foundations are real but not guarantees, and they are far stronger for a handful of established networks than for the thousands of tokens that borrow their vocabulary.

    Anyone telling you the answer is obvious — in either direction — is not thinking carefully.

    What to read next

    Next: is crypto safe? An honest answer.