Crypto Broker and Exchange Due Diligence Checklist
Crypto broker and exchange searches often look like provider rankings. InvestorTrip is not publishing a crypto exchange ranking until each exchange has verified source rows for legal entity, products, custody, fees, proof-of-reserves context, withdrawal terms, source URLs, extracted snippets, confidence and reviewer status. This page is a due-diligence checklist for checking a crypto broker, exchange or app before you send money or crypto.
Start with the legal entity
A trading app, website domain or token logo is not enough. Record the legal entity, country of incorporation, regulator or registration status, account agreement, custody terms, supported products, fiat rails, withdrawal policy and complaint route. If the platform uses different entities for spot crypto, derivatives, staking, lending or custody, check each one separately.
FINRA says it regulates member firms and associated persons, and that activities involving crypto assets that are securities must comply with applicable federal securities laws and FINRA rules. That does not mean every crypto service shown near a broker brand is supervised the same way as a securities account.
Source: https://www.finra.org/rules-guidance/guidance/crypto-assets-update
Ask:
- Which entity opens the account?
- Which entity custodies crypto assets?
- Which entity handles fiat deposits and withdrawals?
- Are services provided by a registered broker-dealer, an affiliate, a bank partner, a money services business, an offshore exchange or another entity?
- Which products are supported: spot crypto, derivatives, staking, lending, stablecoins, wrapped assets or tokenized securities?
- Which services are unavailable in your country or state?
Do not assume a familiar brand means every crypto feature has the same protection as a securities brokerage account.
Separate custody from trading access
The custody question is practical: who controls the private keys, what happens if the platform fails, and what records prove your claim? If the platform says assets are held in cold storage, segregated wallets, omnibus wallets, trusts or bankruptcy-remote structures, ask for written terms rather than marketing copy.
SIPC explains that its protection is for securities and cash in a brokerage account when a SIPC member fails, not for every asset or market loss. Crypto assets held away from a securities account can have different protections, and market losses are not insured.
Source: https://www.sipc.org/for-investors/what-sipc-protects
Before funding, save:
- Custody agreement.
- User agreement.
- Fee schedule.
- Withdrawal policy.
- Stablecoin or staking terms, if used.
- Any proof-of-reserves or attestation page, with the date checked.
- Complaint and dispute process.
Check communications and risk disclosures
FINRA reviewed crypto asset retail communications in a targeted exam and reported a high rate of potential issues. The lesson for investors is simple: marketing can be incomplete, and crypto communications need careful reading.
Look for plain answers to these questions:
- Does the platform explain whether the asset is a security, commodity, stablecoin, derivative or another category?
- Does it distinguish crypto services from regulated brokerage services?
- Does it disclose volatility, liquidity and loss risk?
- Does it explain conflicts, spreads, routing, market-making or affiliate relationships?
- Does it avoid implying guaranteed returns or risk-free yield?
If the page focuses on rewards, celebrity quotes, referral bonuses or token upside before legal and custody terms, slow down.
Withdrawal and scam checks
The FTC warns that scammers often use crypto payments and that only scammers demand payment in cryptocurrency in advance to protect money, unlock earnings or solve a supposed account issue.
Source: https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-scams
Pause if:
- Support moves the conversation to a private messaging app.
- Deposits go to a personal wallet or unrelated account.
- Withdrawals require a new tax, clearance, anti-money-laundering or release payment.
- The app shows profits but refuses withdrawals.
- A broker, influencer or social media contact tells you which wallet address to use.
- The platform cannot identify the legal entity and withdrawal route before deposit.
Investor.gov also warns investors to be cautious with crypto asset securities and celebrity endorsements. A celebrity or influencer mention does not prove legitimacy or suitability.
What a future ranking would need
A credible InvestorTrip crypto broker or exchange ranking would require verified rows for each provider: legal entity, jurisdiction, product coverage, custody model, proof-of-reserves evidence, fiat rails, trading fees, withdrawal fees, incident history, source URLs, extracted snippets, confidence and reviewer status. Until that dataset exists, this checklist is safer than a ranking page.
Bottom line
Do not choose a crypto broker or exchange from a headline list. First verify the legal entity, custody terms, disclosures, product restrictions, fees, withdrawal process and scam red flags from official or primary sources. If any of those answers are unclear before funding, the platform is not ready for your money.