
Before you scroll
- A cryptocurrency is a balance recorded on a public blockchain; whoever controls the private key controls the coins.
- You can hold crypto on an exchange (the company holds the keys) or in your own wallet (you hold them); each has different risks.
- Transfers are usually irreversible, prices swing sharply, and crypto is the favourite asset of investment fraudsters.
How crypto works is best understood by forgetting the price chart for a moment and looking at the record-keeping. A cryptocurrency is an entry in a shared ledger that thousands of computers keep in step. Nobody at a bank can reverse a payment or freeze an account on that ledger in the usual way, which is both the attraction and the danger.
The ledger: what a blockchain does
A blockchain is a list of transactions grouped into blocks, each linked to the one before it by a cryptographic fingerprint. Change an old transaction and the fingerprints stop matching, so everyone can see the tampering. Every blockchain crypto network needs a way for its computers to agree on which new block comes next:
- Proof of work, used by Bitcoin: computers called miners compete to solve a costly puzzle, and the winner adds the next block and earns newly created coins plus fees.
- Proof of stake, used by Ethereum and many newer networks: validators lock up coins as collateral and are chosen to propose and confirm blocks, losing part of their stake if they cheat.
Once a transaction is buried under enough later blocks, reversing it becomes impractical. That is why exchanges wait for a number of confirmations before crediting a deposit.

Keys and wallets: who really owns the coins
Crypto does not sit inside a wallet the way cash sits in a purse. The coins stay on the blockchain; a wallet holds the private key that proves you are allowed to move them. Anyone who learns that key, or the recovery phrase (usually 12 or 24 words) from which it is generated, can take everything.
| Exchange account (custodial) | Your own wallet (self-custody) | |
|---|---|---|
| Who holds the keys | The exchange | You |
| If you forget your password | Account recovery through the company | Only the recovery phrase can restore access |
| If the company fails | Your balance may be frozen or lost | Not affected |
| Main risk | Platform failure, hacks, account takeover | Losing the phrase, or being tricked into revealing it |
Never share your recovery phrase. No genuine exchange, wallet maker, support agent or website will ever ask for it. Anyone who does is trying to empty your wallet.
Buying and selling through an exchange
Most people buy their first crypto through an exchange, which works like a marketplace with an order book. Reputable platforms require identity checks, publish their fees and, in a growing number of countries, need a licence or registration. The EU's MiCA regime, for example, sets rules for crypto-asset service providers across member states. Protections are still thinner than for shares, and exchange failures have happened repeatedly.
Costs usually include a trading fee on each side (often split into maker and taker rates), a spread, a charge for card or bank deposits and a withdrawal fee, which may include the blockchain's own network fee. The crypto profit calculator shows how fees on both the buy and the sell affect the result.

Sending crypto: the checklist
- Copy the receiving address directly from the recipient's official app, not from an old message or your transaction history.
- Check the first and last several characters after pasting. Some malware swaps copied addresses, and scammers "poison" histories with look-alike addresses.
- Confirm the network. Many tokens exist on several blockchains, and both sides must use the same one; our USDT guide explains why.
- For a large amount, send a small test first and wait for it to arrive.
A transaction sent to the wrong address or network usually cannot be recalled. Nobody can "reverse the blockchain" for a fee, whatever they claim.
Coins, tokens and stablecoins
Coins are native to their own blockchain, like bitcoin on Bitcoin or ether on Ethereum. Tokens are created on top of an existing blockchain by a smart contract, and can represent almost anything, from a stake in a project to a game item. Stablecoins are tokens designed to track a currency, usually the US dollar, and are widely used to move money between exchanges. Each category carries different risks: a token depends on its issuer and code, and a stablecoin depends on the reserves behind it. Start with what is Bitcoin and what is USDT for the two you will meet most often.
Why prices move so much
Most crypto-assets have no earnings or cash flows to anchor their value, so prices rest on demand, expected future use and sentiment. Markets trade every hour of every day, often with leverage on offshore platforms, and forced selling can turn a fall into a cascade. Falls of more than half from a peak have happened many times in the history of the largest coins, and smaller tokens have gone to almost nothing.
Crypto and fraud
Crypto is the payment method of choice in many investment scams because transfers are fast, global and hard to reverse. Common patterns include fake trading platforms that show growing balances which cannot be withdrawn, "investment coaches" met through social media or dating apps, fake giveaways that promise to double whatever you send, and look-alike wallet apps. The scam guide walks through each one.
A good rule: if someone you have not met in person is guiding you to buy crypto and send it to a platform they chose, stop and check. The combination is the backbone of the most costly frauds.
Basic security habits
Most crypto losses outside market falls come from account takeovers and tricks rather than broken cryptography. A handful of habits close off the common routes:
- Use an authenticator app for two-factor authentication on exchange accounts rather than text messages, which can be hijacked by persuading a phone company to move your number.
- Keep a separate email address for financial accounts, with its own strong password.
- Bookmark the real exchange website and use the bookmark. Search adverts sometimes lead to convincing copies.
- Treat wallet approvals like signatures. Connecting a wallet to a website and approving a transaction can give that site permission to move tokens. Read what you are approving, and revoke permissions you no longer need.
- Be suspicious of urgency. Messages saying your account will be closed, or that a security problem needs your recovery phrase, are phishing.
Tax and record keeping
In many countries, selling, swapping or spending crypto can create a taxable gain or loss, including swaps from one coin to another. Keep records of each purchase and sale: the date, amount, price in your home currency and fees paid. Exchanges usually let you download a transaction history, but if an exchange closes or restricts your account, that history may become hard to get, so save copies as you go. Rules differ widely, so check your national tax authority's guidance or ask a qualified adviser.
Readers also ask
Do I need a wallet to buy crypto?
Not to buy it: an exchange account will hold it for you. A self-custody wallet gives you direct control of the keys, but also full responsibility for keeping the recovery phrase safe.
Can a crypto transaction be cancelled?
Generally no. Once it is confirmed on the blockchain, only the recipient can send it back. Some centrally issued stablecoins can be frozen by their issuer, but that is not a way to recover a mistaken payment on request.
Is crypto regulated?
Increasingly, but unevenly. Many countries now require exchanges to register or be licensed, and the EU has a common framework under MiCA. Protections are still weaker than for traditional investments.
Sources
- UK Financial Conduct Authority, ban on crypto-derivatives for retail consumers (2021)
- European Union, Markets in Crypto-Assets Regulation (MiCA)
- Bitcoin and Ethereum protocol documentation