Buying or receiving bitcoin for the first time: what to check before paying, entering an address and confirming

You do not have to buy bitcoin to receive it. You might receive payment for work, repayment from a friend or a transfer from another wallet you already own. The price question differs in each case, but checking the destination, key control and records remains important. You do not need to buy a whole bitcoin, and no single amount suits every beginner.

Licensing and custody are separate matters

A trading platform, or crypto exchange, lets users buy or sell digital assets, but services do not all have the same structure. Sometimes coins remain in a provider-managed account; elsewhere, purchases are sent to the customer's wallet. Whether the entity is licensed is separate from who controls the keys. A licensed platform can be a custodian, and an app called a "wallet" may simply be an interface to an account at a company.

With third-party custody, you depend on that party's security, financial capacity and withdrawal policy. It may require identification or additional checks before releasing funds. With self-custody, you hold the keys and control transaction signing, but responsibility for backup and its security moves to you. Losing access is not like forgetting a website password when a recovery help desk exists.

The guide to the difference between a crypto wallet and a custody service explores this choice. It is not a contest in which one solution always wins. For someone who does not yet understand wallet backups and address verification, immediately moving to self-custody may add an error instead of solving a risk.

Check what you are actually buying too. A financial product tracking bitcoin's price is not necessarily bitcoin withdrawable to a personal address. Before depositing, look for an explicit answer about whether you can receive the coin itself, which withdrawals are supported and on what terms. Do not infer this from a coin image or the word "crypto" in a headline.

How to check a provider without relying on a regulator's logo

Identify the company's full legal name, its operating country and the entity that will serve your account. Then compare those details with the relevant regulator's register. A number on the company's site is not an independent check, and a private-message link can lead to an impersonation page. Reach the regulator's website separately and check the activities covered by its authorisation.

"Registered", "licensed" and "supervised" do not always mean the same thing across countries. Anti-money-laundering registration does not necessarily authorise every financial service or protect against insolvency. Ask about safeguarding customer assets, separating them from company assets, withdrawal restrictions and complaint handling. A vague answer does not become clear because the app looks professional.

Check identification requirements, security options and account terms before sending money. Set a unique password and additional authentication where possible, and keep recovery methods separately and securely. A legitimate identity-document request is not permission to give a one-time code to someone calling you. Upload documents only through a verified official channel.

The real cost is reflected in what arrives

The screen price may represent only part of the cost. Establish whether there is a purchase fee, a spread between the buying and market price, a cost for converting shekels to another currency, a payment-method fee and a withdrawal fee. Some costs are fixed; others depend on the amount or network conditions. Providers do not share a uniform tariff.

A useful comparison is between the amount you will actually pay and the bitcoin you can receive at your chosen destination after known costs. Also check minimum purchase, withdrawal and deposit amounts. A fixed fee can make a small transfer relatively expensive, while a deposit below a service's acceptance threshold may not be credited as expected.

A network fee is not necessarily the platform's withdrawal fee. On Bitcoin, transaction space requirements and requested priority affect fees; they are not simply a percentage of the money sent. A provider may use its own pricing or batch withdrawals. Check the final result on the confirmation screen instead of relying on a general fee schedule read earlier.

Prepare a wallet before sending to it

If you choose self-custody, install software from its official source and check support for the asset and receiving method required. A search advert does not prove a site is genuine. Update the device, avoid setup during screen sharing and read backup instructions before a meaningful balance is present.

In a wallet based on a seed phrase, the words are secret material allowing keys to be recovered. Do not photograph them with a phone, email them or paste them into support chat. Keep a protected physical backup under the wallet's instructions, check that it is complete and legible, and consider loss, water damage and fire. Check a backup only through the official method, not a "verification" website asking for the words.

For a hardware wallet, verify the device's origin and follow the manufacturer's checks. Do not accept a wallet already set up with a seed phrase supplied by the seller. The device unlock code and seed phrase have different roles: changing the code does not fix exposure of the words. A physical device also does not remove the need to check the address displayed when approving a transaction.

Bitcoin.org's safety guides stress backup responsibility and the risks of relying on a party holding the keys. These are working principles, not certification of a particular product. This guide does not recommend any particular wallet, exchange or application.

Check the asset, network and address, in that order

Bitcoin on the Bitcoin network is not the same as a similarly named token on another network. A product representing bitcoin elsewhere may also involve an issuer, contract or bridging mechanism. Being able to choose a network on the withdrawal screen does not mean the receiving wallet supports it. Match the asset, network and precise receiving instructions on both sides.

Receiving through Lightning is not simply swapping a normal address for a payment invoice either. It is a different mechanism, and both services must support it. Beginners should stop at an unfamiliar field and establish what is required, rather than try alternatives with real money. A cheaper fee is no reason to skip compatibility checks.

Generate receiving details in your own wallet or account. When transferring to another person, verify the request through an independent channel if impersonation or an address change is a concern. After pasting, check the full address against the trusted source; if a signing device has a screen, compare that too. Looking only at the first and last characters does not replace a full check.

Do not copy an address from past transactions assuming it is still the correct destination. Malware and misleading messages may display another destination, and a technically valid address may belong to the wrong person. Format validation does not verify the recipient's identity.

A test transfer checks a route, not a future transaction

Before a significant transfer, you can test with a limited amount whose loss would not cause difficulty, after checking fees and minimums on both sides. The test verifies that the asset leaves by the chosen method and that the receiving wallet or service recognises it. There is no need to send too little to be credited or repeat the same action without understanding its cost.

Wait for confirmation of arrival on the receiving side and for its requirements to be met. If the test does not appear, do not send a large amount to "release" it. Check the transaction ID, address, network and provider's processing status. A withdrawal may not yet have been broadcast; in that case, there is no transaction that paying a stranger can accelerate.

A successful test does not prove the seller is honest, the platform stable or the next withdrawal possible. Nor does it remove the need to recheck if the destination address, network or transaction details change. This distinction is especially important when an unfamiliar person encourages a larger transfer after a small one succeeds.

When bitcoin has really arrived

A sender's screenshot is not confirmation of receipt. Check your own wallet and the transaction ID using an appropriate source. A pending transaction differs from one included in a block, and a custodial service may wait for several confirmations before crediting an account. The number required depends on context and service policy; no completion time is guaranteed for every transfer.

The explanation of Bitcoin fees and confirmations distinguishes waiting at a provider from waiting on the network. Do not rush to broadcast another transaction simply because the first is delayed. Without understanding its status, you could pay twice or confuse the records. Contact official support with the transaction ID, not the seed phrase.

In Israel: check the bank and documentation too

Alongside the digital transfer is a trail of money and documents. Ask the bank in advance which supporting records it will need for a transfer to a provider and future receipt of proceeds from it. Keep transfer confirmations, invoices, coin quantities, dates, fees and transaction IDs. Bank requirements and provider terms are not necessarily identical, and a general answer does not approve every future action.

On 7 October 2026, the Banking Supervision Department published an amendment to Directive 411 (Opens in a new tab) concerning payment services associated with virtual currency activity. Read the effective date too: the circular's amendments are due to take effect on 1 May 2027. They should not be presented as a new right already effective in October or a promise that the bank will accept all crypto-derived funds.

Tax obligations do not necessarily begin when money returns to the bank either. Payment for work and exchanges between assets may require different treatment from buying and holding. Record each receipt and transfer's purpose, and seek professional help when activity raises a tax question. Do not give an accountant a seed phrase; transaction documents should suffice for the inquiry, depending on the circumstances.

When to simply stop

Stop when someone promises returns, pressures you to act immediately, requests remote device access or demands more money to unlock a withdrawal. Stop too when someone posing as support asks for a seed phrase or login code. Recognising warning signs does not require proving who is behind a message before declining to act.

The guide to warning signs in crypto messages can help, but the operational rule is simple: a good first action is one you can explain before confirming. Who provides the service, who holds the keys, what will arrive, what will it cost and how will you know it is complete? If an answer is missing, there is no need to fill it in by transferring money.

The regulatory details in this guide were checked on 16 October 2026. Service availability, account terms, fees and rules may change. Before acting, check current details with the relevant body; ביטקוין.com does not hold customer funds or provide personalised investment advice.