How to Buy
Crypto in the UK.

Creating an account is straightforward: name, email address, password. The more involved part is identity verification — known in the industry as Know Your Customer, or KYC. Providers use it to meet anti-money-laundering and account-risk obligations.

You will need to provide a government-issued photo ID (a passport or driving licence) and proof of your address (a recent bank statement or utility bill, usually less than three months old). Most exchanges also require a live selfie or a short video to confirm you match your ID.

Verification typically takes between a few minutes and 24 hours, depending on the exchange and current demand. Some exchanges let you make small purchases before full verification is complete; others require it first. Complete verification before depositing any meaningful amount.

Your account details are linked permanently to your identity and your transaction history. In-scope reporting providers began collecting data under the Crypto-Asset Reporting Framework in 2026, with first reports due by 31 May 2027. This is not a reason to avoid verification — it is a reason to keep accurate tax records from the start.

Many UK-facing exchanges support GBP deposits through Faster Payments. Bank transfer is often cheaper than card funding, but availability, processing time, minimums and provider charges vary by account.

The exchange will give you a sort code, account number, and a reference code specific to your account. You initiate the transfer from your regular bank account, using that reference exactly as given. If you omit or mistype the reference, your deposit may take days to allocate manually.

Debit-card purchases may also be available. Compare the final quote: card charges, spread and trading fees can make the all-in cost materially higher than a bank transfer plus an order-book trade.

Worth knowing: UK banks can impose crypto transfer limits or blocks as part of fraud controls, and policies change. Check your bank's current policy before sending money and never bypass a warning at another person's instruction.

Credit-card availability is provider- and issuer-specific. Borrowing to buy a highly volatile asset adds repayment and interest risk even if the purchase is allowed.

Once your GBP is deposited, you place an order to buy crypto. Most exchanges offer two basic order types.

A market order buys immediately at whatever the current price is. You specify how much GBP you want to spend (or how much crypto you want to receive), and the exchange fills the order instantly. Market orders are simple and fast, but you accept the current price without negotiating.

A limit orderlets you specify the price you are willing to pay. If Bitcoin is currently trading at £60,000 and you place a limit order to buy at £58,000, the exchange holds your order until the price reaches that level. If it never does, the order expires unfilled. Limit orders give you price control at the cost of certainty.

For a first purchase, a market order is fine. The price difference between a market order and a reasonable limit order on a liquid asset like Bitcoin or Ethereum is typically very small — fractions of a percent. Where it matters more is for less-traded tokens with wider spreads between the buy and sell price.

After executing the order, the crypto appears in your exchange account balance. You now own it. The exchange holds it on your behalf in what is called a custodial wallet. Your funds are in the exchange's custody, not in a wallet you control directly.

Exchange account security is your responsibility. The most important step is enabling two-factor authentication (2FA). This requires a second verification step — usually a code from an authenticator app on your phone — whenever you log in or withdraw funds.

Use an authenticator app (Google Authenticator, Authy, or your password manager's built-in 2FA) rather than SMS-based codes. SIM-swapping attacks — where a criminal convinces your phone network to redirect your number to their device — are a known vector for crypto exchange theft. App-based 2FA is significantly harder to bypass.

Many exchanges offer withdrawal address whitelisting. This restricts withdrawals to a pre-approved list of addresses. Even if an attacker gains access to your account, they cannot send your funds to a new address without a separate verification step. Enable this if your exchange offers it.

Use a password you do not use anywhere else. A password manager makes this straightforward. Never share your password, your 2FA codes, or your recovery phrases with anyone — including people claiming to be exchange support staff. No legitimate support team will ever ask for these.

For larger amounts, consider moving crypto off the exchange into a hardware wallet — a physical device that stores your private keys offline. Hardware wallets are one self-custody option. Self-custody removes exchange custody risk but makes you responsible for backups, signing and recovery.

Do not invest more than you can afford to lose.Crypto prices move faster and further than almost any other asset class. Bitcoin fell 70% in 2022. Smaller tokens have fallen 90% and never recovered. This is not scaremongering — it is an accurate description of what has already happened.

Do not use an entity you cannot verify. The history of crypto is littered with exchanges that collapsed, were hacked, or turned out to be fraudulent. FCA registration does not guarantee safety but it creates basic AML compliance requirements. It is not an endorsement, and an overseas entity can leave you with different or limited routes for redress.

Do not share credentials or seed phrases. Anyone who asks for your password, 2FA code, recovery phrase, or private key is attempting to steal from you. Exchange support does not need these. Legitimate investment opportunities do not require them.

Do not ignore tax obligations. HMRC treats exchange tokens as assets for Capital Gains Tax in most individual investment cases. Selling, swapping, spending and most gifts are disposals; keep records from day one. Retroactively reconstructing years of history is significantly harder than maintaining it in real time.

Do not buy based on social media tips.Coordinated promotion of tokens on social media — sometimes by celebrities, sometimes by organised groups — has preceded some of the largest retail losses in crypto history. Price action driven by hype rather than fundamentals reverses quickly and without warning.

Buying crypto is not a taxable event. Holding it is not taxable. Tax only applies when you dispose of it — by selling for pounds, swapping for another token, or spending it.

The gain or loss is the difference between what you paid and what you received. The first £3,000 of capital gains each tax year is exempt. Above that, you pay 18% or 24% depending on your total income.

In-scope crypto service providers began collecting CARF information from 1 January 2026, with their first reports due by 31 May 2027. The rules do not remove your responsibility to keep records of each purchase: the date, amount and GBP value at the time. Your exchange's transaction export function is a good starting point, but it does not replace your own records — particularly if you use multiple platforms or self-custody wallets.