Opening your first exchange account, field by field

An exchange account is a regulated financial account. That framing explains most of what is about to happen to you: the identity documents, the selfie, the wait, the questions about where your money comes from. None of it is the exchange being difficult. It is the same paperwork a bank would put you through, compressed into a phone screen and moving faster.

What follows is the process on Binance, because that is the platform this site uses as its example throughout. The specifics of the layout will drift — interfaces get redesigned — but the set of things being asked of you is stable, and so is the list of things that go wrong.

Have these four things ready first

Ten minutes here saves a rejected application later.

1. An email address you control, that nobody else reads. This becomes the recovery route for an account with money in it. Not a shared household address, not a work address you might lose access to when you change jobs.
2. The phone you carry every day. Verification codes and, shortly, two-factor authentication will live on it.
3. An identity document that is currently valid. Passport, national ID card, or driving licence depending on what your country offers. Expired by a week is still expired.
4. The name on that document, exactly. Middle names, accents, hyphens, and the order of surnames all have to match what you type. A mismatch between the typed name and the document is the single most avoidable rejection there is.

The sign-up form, field by field

Five fields, one of which is hidden until you ask for it.

Email or phone number

Most regions default to email. Some see a phone-first form. Either becomes your login identifier, and it is difficult to change later, so use the one you intend to keep. If a country selector appears before anything else, set it to where you actually live and can prove you live — not where you would prefer to be, because the documents you upload later have to agree with it.

Password

Generate one in a password manager and let it be something you could not memorise. The realistic threat is not somebody guessing; it is credential stuffing — automated attempts using passwords that leaked from unrelated sites years ago. A password you have used anywhere else is the one genuine vulnerability on this screen.

Referral ID (optional)

This is the field people miss, because it is collapsed. It usually sits under the password field as a small link reading something like Enter referral ID (optional) or appears on the next screen after the code check. Clicking it opens a short text box.

What it does: applies a promotional discount to your own trading fees, and credits the account of whoever the code belongs to with a share of the fees you later generate. It does not link the two accounts in any other way. The person whose code you used cannot see your balance, your trades, or your identity, and cannot act on your account in any respect.

What it does not do: cost you anything. The code takes a percentage off the fees you would otherwise pay in full.

The important practical detail: this field can generally only be filled at sign-up. There is no settings page later that lets you attach a code to an existing account. If you skip it, you skip it permanently — which is not a disaster, just a discount you did not take.

The link below is a promotional link. It goes to Binance's own sign-up page with our referral code already filled in, and the arrangement behind it is set out in full on our how we make money page. If you would rather use the site without it, go to Binance directly and leave the referral field blank — nothing here works differently either way.

Go to Binance's sign-up page

The terms checkbox

Nobody reads it and we are not going to pretend otherwise, but two things in there are worth knowing: which legal entity you are actually contracting with (it varies by country and is not always the one on the logo), and what happens to your balance if the account is suspended. Both are findable in the terms of use if you ever need them.

The code that arrives afterwards

A six-digit code to your email or phone. If it does not appear: check spam, check the address for a typo, and then request one more. Each new request invalidates the previous code, so people who click resend five times end up typing a dead code and concluding the system is broken.

Verification: what is actually being checked

You have an account now, but it cannot hold or move real money until identity verification passes. Expect to provide a document, a live selfie, and in some countries a proof of address.

Behind the scenes, roughly this happens:

• The document image is read — the machine-readable zone on a passport, or the equivalent fields on an ID card — and checked for signs of tampering or of being a photograph of a screen rather than of a physical document.
• The selfie is compared against the document photograph, and checked for liveness: the movement prompts exist to confirm a real person is present rather than a still image.
• Your name and date of birth are run against sanctions lists and politically-exposed-person databases.
• Country and residency are cross-checked against the rules that apply where you are, since not every product is available everywhere.

Most of this is automated. A clean case can be approved before you have closed the tab. Anything that scores poorly on any check goes into a human review queue, and human queues have no published length — which is why no honest article can give you a number.

Why applications get rejected, and what to change

Four causes cover the overwhelming majority. The message you receive usually names one of them, though not always in helpful language.

A rejection is not a ban. Fix the specific thing named and resubmit once. What causes real trouble is resubmitting the same failing image repeatedly, or opening a second account to start over — that gets both accounts restricted and turns a two-hour problem into a two-week one. The longer version of this table is organised by the exact error message, if you want to look yours up.

Verification comes in levels, and you probably need the first one

Exchanges do not treat verification as a single yes-or-no gate. There are tiers, each unlocking more, each asking for more. The names change between platforms and over time, but the shape is consistent:

• Registered but unverified. You can look around. You generally cannot deposit money, buy, or withdraw. Some platforms allow small crypto deposits at this level; that is not useful to a first-time buyer with a bank account and no coins.
• Basic identity verified. Document plus selfie. This unlocks ordinary buying, selling, and withdrawal within daily limits that are far above anything a first purchase involves.
• Address or enhanced verification. A utility bill, bank statement, or equivalent showing your name and address, sometimes with questions about employment and source of funds. Required for higher limits, and in some countries required outright before anything works.

For a first purchase of a modest amount, the basic tier is almost always enough. Do not volunteer documents for a tier you have not been asked for — each additional submission is another thing that can be rejected and another queue to sit in.

If your screen looks different: some countries have the address step folded into the initial flow rather than offered later, and a few jurisdictions require it before any deposit at all. That is a local regulatory difference, not something gone wrong.

If you are asked where the money came from

At some point — sometimes at sign-up, more often at a later deposit — you may be asked to state your source of funds, your occupation, or your expected trading volume. This surprises people and occasionally offends them, so it is worth explaining rather than just listing.

The exchange is required to have a sense of whether the activity on an account makes sense for the person behind it. An account declaring a modest income that suddenly moves large sums is a pattern their compliance systems are obliged to notice. The questions exist so that ordinary activity has an ordinary explanation attached to it in advance.

Practical guidance: answer accurately and unremarkably. Salary is salary. Savings are savings. Do not inflate an expected trading volume because a larger number sounds better — it does not unlock anything useful and it sets an expectation your account will not meet. If you are asked for supporting evidence, a payslip or bank statement is what they mean, and it is uploaded through the same secure flow as your ID rather than emailed to anyone.

Four settings to turn on before you deposit anything

Do this now, while the account is empty and there is nothing at stake. Every one of these is harder to care about after money arrives, which is precisely why the money should arrive second.

1. Two-factor authentication using an authenticator app. Not SMS. Text-message codes can be intercepted by someone who persuades your mobile operator to transfer your number to a new SIM — an ordinary, documented attack. If both are offered, enable the app and drop SMS as a second factor.
2. The 2FA backup key, written down offline. When you set up the authenticator you are shown a recovery string. Write it on paper. Screenshotting it into your photo library puts it in the same place as everything else you have ever photographed, including in whatever cloud that syncs to.
3. An anti-phishing code. A short phrase you invent, which the exchange then embeds in every genuine email it sends. Any email claiming to be from them without that phrase is fake, and this single setting defeats most of the phishing that targets new account holders. Almost nobody enables it.
4. Withdrawal address whitelisting. Restricts withdrawals to addresses you approved in advance, usually with a cooling-off delay before a new address becomes usable. The delay is the feature — it is time to notice something is wrong.

There is a fifth thing, which is not a setting: know what real support looks like. Binance staff will never contact you first about your account, never ask for your password or 2FA code, and never ask you to move funds to a “safe” address. Anyone doing any of those is running a scam, and new account holders are the specific target. If you need to check a policy, the official support centre is reachable from inside your own account rather than from a link someone sent you.

Why your country changes several of these steps

A frustrating amount of advice about exchange accounts is written as though there is one global version of the product. There is not, and the differences are large enough that following a guide written for somewhere else will leave you looking for a button that does not exist where you are.

What varies:

• Which entity you are actually signing up with. Large exchanges operate through different local entities under different licences. The terms you accept, the protections you have, and the regulator you could complain to all follow from that, and none of it is visible on the sign-up page.
• Which payment methods appear. Bank transfer rails are national. What shows on your deposit screen depends on where your account is registered, and a method that is standard in one country is simply absent in the next.
• Which products are available at all. Some features are restricted or withdrawn in particular jurisdictions. A guide describing a feature you cannot see is usually describing a different country rather than an out-of-date interface.
• How much verification is required before anything works. Some places require address confirmation up front rather than as an upgrade.

The practical consequence: when this guide and your screen disagree, your screen is right. Use the exchange's own regional help pages for anything that looks country-specific, and be suspicious of any advice that tells you to select a country other than the one you live in — your documents have to match it later, and the mismatch surfaces at withdrawal, which is the worst possible moment.

What the account can and cannot do yet

Verified, secured, and empty. From here the sensible order is: put money in by the cheapest route that suits your timing, then buy. Card is fast and expensive, transfer is slow and cheap, and the gap matters more on small amounts than most people expect — the fee impact table shows why.

One thing this account is not: a wallet you control. A balance here is a claim against the company, recorded in their database. That is a normal way to hold a small amount and a poor way to hold a large one, and the distinction is worth understanding before rather than after — what that actually means is a page of its own.