How do I buy Bitcoin safely?
The clean first-buy path.
Account setup, first purchase, auto-DCADollar-cost averaging (DCA)Investing a fixed amount on a regular schedule, such as $50 every payday, regardless of price. It spreads out when money enters the market and buys more units when prices are low, but it does not guarantee a better price than investing all at once, a profit or protection against loss.Full definition, moving to a hardware wallet, and labeling your coins. ~30 minutes start to finish.
This page is the step-by-step first-buy walkthrough. To choose between exchanges on fees, withdrawals and Lightning, see How to Choose a Bitcoin Exchange. If you are still deciding whether Bitcoin is worth owning, start with Bitcoin For Beginners.
For your first purchase, open an account on a regulated exchange (Coinbase, River, Strike), buy with a bank transfer (not a credit card), and withdraw to a hardware wallet once you hold more than ~$500. Start with a small amount to learn the process before committing real money.
- Coinbase, River and Strike are examples to evaluate, not blanket endorsements or equally insured accounts. Verify availability and licensing for your state or country, all-in fees, funding holds, withdrawal support and custody terms. “Insured” is not a guarantee of your crypto balance. Coinbase’s disclosed crime insurance covers only a portion of assets against specified theft events, excludes personal-account credential compromise, and losses may exceed recoveries. Conditional pass-through deposit insurance can apply to eligible U.S. cash at partner banks or credit unions if that institution fails: not Bitcoin, market losses or a blanket exchange-failure guarantee. Do not extrapolate Coinbase’s policy to River, Strike or another provider; check the legal entity, jurisdiction, policy limits and exclusions for your own account.[1]
- Buy with bank transfer (ACH), not a credit card. Credit card purchases carry 3–5% fees and possible cash-advance rates.
- Leave small amounts (<$500) on the exchange while learning. Move to a hardware wallet once you're holding real money.
- Hardware wallet (Ledger, Trezor, Coldcard): ~$60–$150 one-time cost. Protects against exchange hacks and account freezes.
- KYCKnow Your Customer (KYC)Identity checks that banks, brokers and regulated Bitcoin exchanges must run under anti-money-laundering rules, collecting your name, address, date of birth, an ID number and often a photo ID. Buying through a KYC exchange links your identity to the bitcoin you buy and the addresses you withdraw it to.Full definition is unavoidable on regulated exchanges. Label your UTXOsUnspent Transaction Output (UTXO)A piece of bitcoin you received and have not yet spent, like a separate bill in a wallet. Your balance is the total of your UTXOs. Spending uses up whole UTXOs and creates new ones, usually including change sent back to you, and each UTXO carries its own history, which matters for privacy.Full definition by source for future tax and privacy hygiene.
Sign up at River.com → verify ID → link bank → buy $20 to learn the interface → turn on recurring buys → after you've accumulated $500+, withdraw to a Coldcard or Trezor. That's it. The rest is optimization.
On this page
Step 1: Choose an exchange
This is the account you'll use to convert dollars into Bitcoin. Not all exchanges are built the same, many are general "crypto" casinos pushing 500 shitcoins and trying to get you to trade. You want the opposite: a Bitcoin-only exchange, U.S.-regulated, with a clean path to self-custody.
The three serious options for U.S. beginners:
- Bitcoin-only (no altcoin upsells)
- Zero fees on recurring buys
- Native Lightning support
- Full-reserve business model
- U.S. based
- Bitcoin-only
- Very low fees
- Excellent Lightning
- Jack Mallers (founder) is a serious Bitcoiner
- Easiest UX if you already use it
- Bitcoin-only (good)
- Slightly higher fees
- Not ideal for serious stacks
For a deeper walk-through of wallets, trade-offs, and setup gotchas, see the hardware wallets strategy page.
Avoid: Coinbase, Binance US, Kraken, Gemini, for Bitcoin specifically. They push you toward altcoins and their fees are high on small buys. They're not scams, but they're not the right tool for this job.
Robinhood Crypto did allow withdrawals to external wallets starting in 2022, so the older claim "you can't withdraw Bitcoin from Robinhood" is out of date verify×DON'T TRUST, VERIFYClaim: Robinhood Crypto supports withdrawing Bitcoin to external self-custody wallets.Verify at: Robinhood support: crypto wallets ↗ Source 1 in the list belowConfirm current availability and limits in your state before transferring meaningful amounts.. The honest reasons to use a dedicated Bitcoin exchange instead:
- Default is custodial. Until you withdraw, Robinhood holds your keys. Same counterparty-risk profile as any exchange.
- Trust history. Robinhood restricted purchases of GameStop and other stocks during the January 2021 volatility. That event made many users question whether they want a broker that has showed it will restrict buying or selling under pressure.
- Broker-first UX. No Lightning NetworkLightning NetworkA faster lane built on top of Bitcoin. Lets two people pay each other instantly, for tiny fees, by keeping a running tab between them off Bitcoin's main public ledger.Full definition support. No detailed UTXO management. For using Bitcoin (not just holding price exposure), a Bitcoin-focused exchange is a better fit.
For real Bitcoin with a clean self-custody workflow: use River, Swan, or Strike and withdraw to a hardware wallet. See ETF vs Self-Custody.
Step 2: Create account + verify identity
Go to river.com. Click "Get Started." Enter email, set a password, enable 2FA with an authenticator app (not SMS, SMS 2FA can be SIM-swapped).
You'll hit a KYC wall: upload a driver's license or passport, take a selfie, enter your SSN, confirm your address. Legally required under U.S. anti-money-laundering laws for any regulated exchange. Takes about 5 minutes. Usually approved in under an hour.
Withdrawal changes custody, not identity linkage: it does not erase exchange KYC records or public transaction history. A fresh address can reduce address reuse but is not guaranteed anonymity. Keep lawful tax records and source labels; do not publish addresses or balances unnecessarily.[5]
Step 3: Link your bank
River uses Plaid. You'll log into your bank's website through an iframe and authorize the connection. Same tech Venmo, Robinhood, and your tax software use. Takes 60 seconds.
ACH transfers are free but take 1 to 3 business days to clear. Wire transfers are instant but cost roughly $15 to $35 . For your first small purchase, stick with ACH.
Step 4: Your first purchase
Tap "Buy Bitcoin." Enter a dollar amount, $20 is plenty to learn the interface. You'll see the current BTCBitcoin (BTC)The ticker symbol for Bitcoin, used on exchanges and in price quotes.Full definition price, the satoshi amount you're getting, and any fees. Tap confirm. Done.
River will show your new balance immediately. Your BTC is technically in River's custody at this point, they're holding the private keys for you. Step 6 fixes that.
Before confirming, compare the final quote and the Bitcoin amount you will receive against a contemporaneous reference price. Fees and spread vary by product, order and market conditions; no universal “few percent” markup applies.[6]
The Hidden Cost Nobody Mentions: The Exchange Spread
Most Bitcoin exchange comparisons focus on the transaction fee, the percentage or flat dollar amount charged per purchase. The spread is a separate cost that rarely appears in those comparisons, and on small buys it is often larger than the fee itself.
The Bitcoin market price is the global price at any moment. The exchange spread is the difference between that market price and what the exchange charges you. You pay the spread before any transaction fee is added.
| Bitcoin market price | $102,946 |
| Exchange charges you | $103,923 |
| Spread | $977 (0.95%) |
You pay 0.95% more than the real price, before any advertised transaction fee is added.
Real spreads across exchanges vary widely. Some charge under 0.5 percent. Some charge over 3 percent verify×DON'T TRUST, VERIFYClaim: Bitcoin exchange spreads vary from under 0.5% at tight venues to over 3% at retail-focused apps.Verify at: CoinGecko BTC reference price ↗ · mempool.space (protocol view) ↗ Source 7 in the list belowCompare the price an exchange quotes at the moment of purchase against a neutral reference (CoinGecko or CoinMarketCap). The gap is the spread. Spreads change frequently, so check before buying..
- Open the exchange and view the price at the exact moment of purchase.
- In another tab, open coingecko.com/en/coins/bitcoin ↗ or mempool.space ↗.
- The difference between the two is your spread. Divide by the reference price to express it as a percentage.
River charges no commission on recurring automatic purchases verify×DON'T TRUST, VERIFYClaim: River charges no commission on recurring DCA orders.Verify at: River Help Center: What are River's fees? ↗ Source 8 in the list belowFee structures change. Read River's current fee page before relying on this.. The spread still applies and is competitive versus retail-focused apps.
Coinbase (consumer product, not Advanced Trade) charges a transaction fee plus a spread verify×DON'T TRUST, VERIFYClaim: Coinbase's consumer flow charges a transaction fee and a quoted spread, which can combine to 2 to 4 percent on small purchases.Verify at: help.coinbase.com fee disclosure ↗ Source 9 in the list belowCoinbase publishes its fee and spread separately. The combined cost on small tickets is routinely higher than Bitcoin-only venues.. On small tickets, combined cost of 2 to 4 percent is common.
Buying $100 of Bitcoin every month at a 2% spread versus a 0.5% spread costs an extra $1.50 per purchase. Over 10 years, that is $180 of direct extra cost. On top of that, the foregone Bitcoin compounds with whatever the asset does over the same window, so the opportunity costopportunity costWhat you silently give up when you pick one option over another. Spending $100 today on dinner means giving up whatever that $100 could have grown into if you had invested it instead.Full definition is larger than the $180 in raw dollars. For DCA investors the per-transaction cost matters more than for lump-sum buyers, because it multiplies across the number of transactions.
Step 5: Set up recurring DCA (the important step)
Regular purchases can reduce reliance on choosing one entry date, but cannot guarantee profit. Set an affordable budget, allocation cap and review date rather than an irrevocable “buy forever” instruction.[4]
If you choose recurring orders, use the provider’s current instructions, preview all fees and set an amount your household can lose. Review or pause when income, emergency reserves or your allocation cap changes. Use the written policy worksheet.[4]
Automation removes repeated order-entry decisions, not investment risk. Keep reviewing your household plan; it is acceptable to stop buying or reduce a position when your capacity for loss changes.[4]
Step 6: Withdraw to a hardware wallet
Once your stack hits $500 to $1,000, start withdrawing to a hardware wallet. This is the single most important thing you'll do as a Bitcoin holder. Not your keys, not your coins.
Once your Bitcoin position exceeds roughly $1,000 in value, the one-time cost of a hardware wallet (around $70 to $150 verify×DON'T TRUST, VERIFYClaim: Entry-level hardware wallets retail for roughly $70 to $150.Verify at: coldcard.com ↗ · trezor.io/compare ↗ · foundationdevices.com ↗ Source 10 in the list belowPrices fluctuate. Check manufacturer sites at time of purchase.) is justified by the counterparty risk you remove. Below that number, keeping Bitcoin on a reputable exchange with strong 2FA is a reasonable starting point. Above that, the risk of exchange failure, hack, or account freeze outweighs the convenience.
This is a practical guideline, not a rule. No regulator sets this threshold. Adjust it for your own situation. If an exchange holding your entire net worthnet worthEverything you own (assets) minus everything you owe (debts). The most comprehensive measure of financial health.Full definition in Bitcoin would ruin you, the threshold is lower. If you are testing a small position for the first time, it is higher.
FTX held roughly $8 billion of customer funds when it collapsed in November 2022 verify×DON'T TRUST, VERIFYClaim: FTX held approximately $8 billion of customer funds when it collapsed in November 2022.Verify at: DOJ indictment of Samuel Bankman-Fried ↗ · FTX bankruptcy docket (Kroll) ↗ Source 5 in the list belowCourt filings and the DOJ indictment cite a customer shortfall in the multi-billion-dollar range. Specific numbers are in the bankruptcy schedules.. Customers who held Bitcoin on FTX lost access to it. Customers who held Bitcoin in self-custody were unaffected by the collapse.
Not your keys, not your coins. Your keys, your coins.
- Coldcard Mk4 or Q (approximately $150 to $250)[11] - the gold standardGold standardA monetary system in which paper money can be exchanged for a fixed weight of gold, which limits how much money can be printed. The US stopped redeeming dollars in gold for its own citizens in 1933 and ended foreign governments' right to exchange dollars for gold at $35 an ounce on August 15, 1971.Full definition. Fully air-gapped, open-source, Bitcoin-only.
- Trezor Safe 5 (approximately $150 to $170)[12] - solid alternative, great UX, open-source firmware.
- Ledger Nano S Plus / X (approximately $80 to $180)[13] - works, but the firmware isn't fully open-source. Ledger's July 2020 e-commerce breach exposed approximately 1 million email addresses and detailed personal information (name, postal address, phone number) for roughly 270,000 customers[14].
Critical rule: only buy directly from the manufacturer's website. Never from Amazon, eBay, or third-party resellers. Hardware wallets can be tampered with in transit. coldcard.com, trezor.io, shop.ledger.com.
- Unbox. Check the tamper-evident bag.
- Power it on. Follow the on-screen prompts to generate a new wallet.
- Record the backup format and words your actual device generates; formats and word counts vary by model and wallet. Keep them offline. For an existing wallet, use the documented on-device restoration procedure rather than generating a replacement seed for the same funds.[15][16]
- Confirm the words back to the device.
- Set a PIN.
- On your Coldcard, generate a receive address. This is a long string starting with
bc1.. - In River, tap "Withdraw." Paste the address (or scan a QR). Send $5 first as a test. Never send the full amount without testing.
- Wait for the test transaction to confirm in your wallet; there is no guaranteed confirmation time. Check the amount and address, and verify recovery/signing access before moving substantial funds.[16][17]
- Once you see the test amount on your hardware wallet, send the rest.
Buying on Coinbase or Kraken instead of River? The full Coinbase and Kraken withdrawal walkthrough covers their fees, holds, and address allowlisting step by step.
For the full sovereignty ladder, multisig, air-gapped signing, passphrases, see The Bitcoin Sovereignty Stack →
Step 7: Label your UTXOs (optional but worth it)
This step is for users who care about privacy and want to avoid accidentally merging their KYC'd coins with non-KYC'd ones later. Skip it for your first month if you want, it's the 201 level.
Download Sparrow Wallet (free, desktop, open-source). Connect your hardware wallet in "watch-only" mode, Sparrow can see your balance and transactions without ever touching your private keys.
In Sparrow, label every UTXO (Unspent Transaction Output) with the source: "River 2026-04 DCA", "Birthday gift from Mom", etc. When you eventually spend or consolidate, Sparrow lets you pick which UTXOs to use. This keeps your privacy hygiene tight. For the full practice, see UTXO Management.
For coin-joining, CoinSwap, and the broader coin-hygiene toolkit, see Advanced Bitcoin Privacy. A lighter introduction is in Bitcoin Privacy.
Mistakes to avoid
Quick answers.
Where to go from here
Sources
Bracketed numbers and verify badges in the text link to these sources. Figures, rates and rules change: check each source’s date before acting on it.
- Robinhood support: crypto wallets ↩
- River Financial. Fees and product docs - river.com/learn. Published fee schedule - river.com/pricing . ↩
- Strike. Fees and product docs - strike.me/fees . ↩
- Cash App. Bitcoin fees disclosure - cash.app/help . ↩
- U.S. Department of Justice, DOJ indictment of Samuel Bankman-Fried ↩
- How is Coinbase insured? | Coinbase Help, retrieved 2026-09-17. ↩
- CoinGecko, CoinGecko BTC reference price ↩
- River, River Help Center: What are River's fees? ↩
- Coinbase pricing and fees disclosures - crypto | Coinbase Help, retrieved 2026-09-17. ↩
- Coinkite (Coldcard), coldcard.com ↩
- Coinkite. Coldcard pricing and docs - coldcard.com; quick-start - coldcard.com/docs/quick. ↩
- SatoshiLabs. Trezor Safe 5 product page - trezor.io/trezor-safe-5. ↩
- Ledger. Product and pricing - shop.ledger.com. ↩
- Ledger. "Addressing the July 2020 e-commerce data breach" - ledger.com/blog/what-happened-addressing-our-community. Approximately 1 million emails and approximately 270,000 detailed PII records exposed. ↩
- Get started with the Trezor Safe 3 | Trezor Knowledge Base | Trezor, retrieved 2026-09-17. ↩
- Recovery process for the Trezor Safe 3 | Trezor, retrieved 2026-09-17. ↩
- Bitcoin Developer Guide: Block Chain, retrieved 2026-09-17. ↩
- Protect your privacy - Bitcoin, retrieved 2026-09-17.
- Crypto Funds | Fidelity, retrieved 2026-09-17.
- Sparrow Wallet documentation - sparrowwallet.com/docs.
Last updated . Not financial advice. Do your own research. Disclosures · How pages are reviewed