Buying your first bitcoin: every screen you will see, in the order you will see them

There is a specific kind of frustration in this process that nobody warns you about. Not the difficulty — none of the individual steps are hard. It is that each screen assumes you have already met a concept that nobody introduced you to. A field appears asking for a “network”. A number appears next to your order that is not the price you just looked at. A verification screen says “processing” for two days with no indication of whether that is normal.

So this page does the whole thing in order, at the level of the screen in front of you. Where something varies by country or by month, it says so rather than inventing a number. And where a step is genuinely dull, it stays dull; the boring parts are where the money goes.

What to sort out before you touch a sign-up form

Four things, and none of them are on any exchange's checklist.

Money you can genuinely leave alone. Not “money I probably will not need” — money that can drop by half and sit there for two years without changing anything about your life. The amount question has a real answer and it is smaller than people expect, but the test is not the size of the number. It is whether you would be forced to sell at a bad moment. If you would, you are not buying an asset, you are taking a position with a deadline.

An email address you control and do not share. This becomes the recovery route for an account holding money. A shared family address, an old work address, or one you have not logged into for years are all bad choices for reasons that only become obvious later.

The phone you actually carry. Two-factor codes will live on it. If your plan is to set this up on a laptop and never think about the phone again, stop and read step 04 first.

Identity documents in a state that will pass. Not expired, matching the name you are about to type, and photographable without glare. This sounds like a formality. It is the single largest cause of first-attempt failure — four fixable things account for most rejections.

The sign-up screen itself

This part takes about five minutes and is the least interesting screen in the process. Email, password, sometimes a phone number, a checkbox for the terms, and a verification code sent to whichever of those you used.

Two fields deserve a comment.

The referral field. It is usually collapsed behind a small link reading something like Enter referral ID (optional), sitting under the password field or on a second screen. It takes a short code. Entering one does not create an obligation, does not link you to anyone's account, and does not let them see anything about you — it typically applies a discount to your own trading fees, which is why we have one and why it is on our home page. It can normally only be entered at sign-up, never afterwards, which is the only reason it is worth mentioning at this stage rather than later.

The password. Use a manager and generate something you could not remember if you tried. The failure mode here is not a hacker guessing it. It is reusing a password that leaked from an unrelated site three years ago and appears in a list that people run against exchanges automatically.

If your screen looks different: some regions get a phone-first sign-up rather than email-first, and some see a country selector before anything else. The order of the fields varies; the set of fields does not. If you cannot find the referral field at all, it is behind the “optional” toggle — and if it genuinely is not there, that is not a problem worth solving, it is a small discount you did not get.

The account guide goes through this screen field by field, including what happens when the confirmation code does not arrive, which is common enough to be worth its own section.

Verification: what they look at

Now the part with no fixed length. Regulated platforms have to establish who you are before you can move real money, so you will be asked for a government document, a photograph of your face, and sometimes an address confirmation. This is not optional on any platform worth using, and the routes that avoid it are worse than they sound.

What the check is actually doing: reading the machine-readable strip on your document, comparing the photograph on it to the selfie, confirming the document is not a photograph of a screen, and running your name against sanctions and politically-exposed-person lists. Most of that is automated and finishes quickly. If any part scores badly, the case goes to a human queue, and human queues have no published length.

Timing: fast approvals can come back before you have closed the tab. Slow ones can take days. Both are ordinary. What decides which one you get is mostly document type, country, and how busy the queue is — none of which you control, and all of which make any promised figure meaningless.

If it comes back rejected: that is a specific outcome with a specific reason attached, not a judgement about you. Read the message, fix the thing it names, resubmit. Repeated blind resubmissions are what turns a delay into a locked account.

Lock the account down before any money goes in

Here is where this guide diverges from most. Nearly every walkthrough puts security at the end, as a tidy afterword. By then the account holds money, and the gap between funding and hardening is exactly the window that gets exploited.

Do these while the balance is zero and the stakes are nothing:

• Authenticator-app two-factor, not SMS. Any authenticator app will do. SMS codes can be redirected by someone who convinces your mobile operator to move your number, which is an ordinary and well-documented attack rather than a theoretical one. If the platform allows both, set up the app and remove SMS as a second factor if you can.
• Save the 2FA recovery codes somewhere offline. A written note in a drawer beats a screenshot in your photo roll. Losing your phone without these turns into a support case measured in weeks.
• Set the anti-phishing code. A short phrase you choose, which the exchange then includes in every genuine email it sends you. Emails without it are fake. This single setting defeats most of the phishing aimed at new account holders, and almost nobody turns it on.
• Turn on the withdrawal address whitelist. It means funds can only be sent to addresses you pre-approved, usually with a waiting period before a new one becomes usable. That delay is the point: it gives you time to notice.

Ten minutes, once. The post-purchase checklist repeats these for anyone who has already bought and skipped them, which is most people.

Getting money into the account

Two realistic routes for a first purchase, and the difference between them is larger than it looks.

Card. Minutes, sometimes instant. It is also the most expensive route on almost every platform — you are paying the exchange's card-processing markup on top of everything else. On a small first purchase this can be a startling proportion of what you put in. Credit cards are worse again, because your card issuer may treat the transaction as a cash advance, which starts charging interest immediately and has its own separate fee.

Bank transfer. Slower — same day to a few working days depending on your country's payment rails — and much cheaper, often free to deposit. If you are not in a hurry, this is the route that leaves more of your money as bitcoin. The full comparison covers speed, cost, limits, and which one is more likely to be declined.

If the payment is declined: this is common and usually not the exchange. Many banks block card payments to crypto platforms by default, sometimes silently. A call to your bank, or a different funding route, resolves it. Repeatedly retrying a declined card can get the attempt flagged.

Deposits arriving as a currency balance, not as crypto, is the expected state. You now have money sitting on an exchange, which you have not yet spent.

Placing the order

The screen offers at least two ways to buy, and the wording differs everywhere. Stripped of branding, there are two mechanics:

For a first small purchase, the simple option is defensible. The thing worth understanding is that the convenient one-click buy widget and the actual trading screen are often different products with different pricing on the same platform, and the convenient one usually costs more. Which to use, and what each trades away, is a page of its own.

You will also be asked how much — in your currency, or in bitcoin. Either is fine, and you are not buying a whole one. A bitcoin divides into 100 million units, and buying a few dollars' worth is completely ordinary.

Read the confirmation screen properly. It shows the amount, the fee, and the quantity you will receive. That third number is the one that matters and the one people skim. Then press the button, because this is where it stops being reversible — a filled order is not a card payment and there is nothing to dispute.

Where your coins actually are

Your balance now shows a quantity of bitcoin. Here is the uncomfortable accuracy: that number is a record in the exchange's database saying they owe you that much. It is a claim on a company, not an asset sitting in your possession. This is not a fringe distinction — it is the whole reason the phrase “not your keys, not your coins” exists, and the reason people who kept balances on platforms that later failed did not get them back.

For a small first purchase, leaving it on a well-run platform is a normal choice and the one most people make. The point is to make it knowingly. What actually happens when you press withdraw, and what a wallet address is, sits on its own page — and if you look up a transaction afterwards on a public explorer like mempool.space, you can watch it confirm, which is the first moment this stops feeling abstract.

One practical thing, today rather than eventually: write down what you just did. Date, amount in your currency, quantity received, fee, platform. In a lot of countries this transaction is already a taxable event with a record-keeping obligation attached, and reconstructing it two years later from exchange statements is genuinely unpleasant. Thirty seconds in a spreadsheet now.

When a step refuses to go through

Four things stall first attempts, in roughly this order of frequency. None of them mean you have done anything wrong, and all of them have a specific fix rather than a general one.

The confirmation code never arrives

Check the spam folder first, then check that the address you typed is the one you think it is — a typo in a sign-up email is invisible because you never see the address again. If it is genuinely not arriving after a couple of attempts, the usual cause is your mail provider silently filtering it; adding the sender to your contacts and requesting a new code fixes it more often than anything else. Do not request twenty codes in a row. Each one invalidates the last, so a burst of requests means the one you eventually receive is the only valid one, and it is probably not the one you are typing.

Verification says “processing” and stays there

The honest answer is that you wait. There is no queue position to check and no way to escalate a case that has not failed. What you should not do is start a second application, submit a different document, or create a second account — all three make the case messier, and the third can get both accounts restricted. If it has been days rather than hours, a support ticket asking for a status is reasonable; a support ticket every day is not.

The card is declined

Usually your bank, not the exchange. A large share of banks decline card payments to crypto platforms by default, and many do it without telling you why. Calling the number on the back of the card and asking whether the merchant category is blocked gets a straight answer in about two minutes. If it is blocked as policy, no amount of retrying will help — that is the moment to switch to a bank transfer.

The deposit does not show up

Bank transfers can take a working day or three, and weekends do not count. Before assuming something is wrong, check whether you included the reference the exchange gave you: a transfer that arrives without its reference has to be matched by hand, which is exactly the slow path you were trying to avoid. If it has been longer than the range the deposit screen quoted, the exchange's support has visibility that you do not, and your bank can confirm the money actually left.

Common thread: in every one of these, the instinct is to repeat the action. Repeating is what turns a delay into a flagged account. One attempt, then find out why.

What the first week usually looks like

The price will move, probably within hours, and you will feel something about it that is out of proportion to the amount. That reaction is the actual information from this exercise — it tells you what size position you can hold without it occupying your attention, which is worth more than any chart.

Two habits worth not forming: checking the balance repeatedly, and adding money because the price went up. The second one is the mechanism that turns a small experiment into a large one at exactly the wrong moment, and it is the most common way first buyers get hurt — the interface is designed to make it effortless.

If the answer after a week is “I did not enjoy any part of this”, that is a complete and legitimate result. You will have paid a few dollars in fees to find it out, which is a cheap way to learn something about yourself that a lot of people pay considerably more for.